Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: MhcMssr6mQg+Dr7ls3MzDnZhGawDPc6QIZ40BkiB0rc=
Subject key identifier: BE:21:59:21:4C:CE:6C:D2:10:15:35:DA:29:E9:B2:59:D8:70:2D:AE
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 019A228945BCF16B7F5BC23777E33DA04251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 16F3
Signing time: Sun 26 Oct 2025 22:00:12 +0000
Manifest this update: Sun 26 Oct 2025 22:00:12 +0000
Manifest next update: Mon 27 Oct 2025 22:00:12 +0000
Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: v7VoS3BLBfI42IqU5hifLlGhXvpGIAtAuJBDNIv0ids=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:45:bc:f1:6b:7f:5b:c2:37:77:e3:3d:a0:42:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Oct 26 22:00:12 2025 GMT
Not After : Oct 27 22:00:12 2025 GMT
Subject: CN=be2159214cce6cd2101535da29e9b259d8702dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:75:9d:54:e9:bd:d9:c6:81:d6:86:f2:5a:
dd:5b:5d:74:2b:5d:24:d1:4e:ea:72:76:77:34:5a:
e0:12:17:cf:2c:76:20:66:1c:c3:43:04:78:5a:c5:
2c:97:fa:dd:af:f4:fb:95:98:a5:9f:3d:14:9a:ce:
05:23:f9:e1:7e:06:6e:30:ef:7a:b6:40:42:02:b1:
20:aa:08:37:40:b2:eb:59:7e:d8:c7:bb:f7:c0:01:
bd:e6:0c:11:98:d9:d0:0a:1f:75:7a:ba:67:e0:14:
7b:07:10:4a:78:36:c5:80:0c:4d:08:c6:ab:aa:93:
b4:1e:76:48:9d:52:6d:82:16:a0:ef:15:90:c3:6d:
09:74:a9:58:1e:97:40:fc:e6:56:45:53:51:76:ef:
6d:88:34:ae:d1:5c:6d:68:f4:67:d9:7e:7b:dd:37:
14:d9:ae:ef:29:8c:8f:33:06:ee:2a:e8:1f:ab:f0:
a4:a6:dd:ce:45:00:68:13:a4:f8:cd:fa:5a:4a:8b:
19:23:58:e7:2a:32:05:af:ba:34:f3:4c:c6:40:0d:
fd:ea:69:c4:d6:ac:7f:55:3e:4c:7c:ef:5c:7b:44:
5f:1f:94:7a:9b:d7:7d:e2:af:3f:27:13:11:8c:0f:
bd:5b:7e:dc:ef:53:2f:53:13:22:ef:f3:71:aa:bb:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:59:21:4C:CE:6C:D2:10:15:35:DA:29:E9:B2:59:D8:70:2D:AE
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:87:c8:56:97:fe:d8:b6:82:ab:53:fd:46:88:7e:2b:1f:1f:
02:28:96:1d:53:8b:f5:21:cc:63:bb:40:f6:bc:bc:de:d0:d0:
ed:a2:9e:70:61:c5:34:9c:6d:d7:75:6a:20:c4:ea:4c:e9:49:
57:89:12:5a:1a:67:16:ed:3e:f6:34:02:0b:d7:4c:70:05:77:
1d:38:b7:8a:d5:06:ab:e3:e4:35:6b:eb:ac:d2:4d:84:89:2b:
36:7e:c1:e8:0e:30:75:c6:b5:80:c6:8a:b4:5a:61:65:7a:6f:
7e:4c:f3:68:19:e6:48:21:28:b5:8e:e6:6c:ce:f6:79:61:aa:
8e:0c:73:90:63:78:cc:a7:ba:fc:75:f7:17:d7:38:0a:92:e0:
df:e1:aa:2e:96:f5:28:78:85:d3:38:ee:31:c3:5d:b9:cb:e3:
aa:31:4e:22:a2:bd:1a:1a:0b:43:a4:cf:c2:53:0a:cf:f6:0f:
e6:b6:73:6d:52:21:e3:10:33:88:95:4e:b1:d9:00:58:9a:c3:
02:27:a9:9d:45:40:b2:6d:c7:bb:54:0c:f2:91:75:3b:7e:95:
f0:43:56:c4:f9:76:bc:15:cb:ae:2e:fe:bb:85:a4:75:d7:72:
32:3e:17:f4:ea:b4:39:c9:b3:44:57:96:6b:99:fb:14:6e:4c:
13:26:4e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:37:23 2025 by rpki-client