Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier: 1ARF+REL1883tn0kdJepo1TtDfFsKYpUFkjx6XlDJVg=
Subject key identifier: D1:31:0E:19:1D:1B:70:AB:DE:A1:77:AB:31:3D:88:9D:20:A4:6C:A7
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0199FC8FC9F857318B722AE531832CC8AD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number: 1724
Signing time: Sun 19 Oct 2025 13:01:45 +0000
Manifest this update: Sun 19 Oct 2025 13:01:45 +0000
Manifest next update: Mon 20 Oct 2025 13:01:45 +0000
Files and hashes: 1: C0T9RGwlH59kjnC5VAy3rxYLFck.roa (hash: 4yuu/RtUYmGG4Lowyk6SdHR4r73obwKncj5QhubWyzk=)
2: GaKfTqsXTBbzB0l6PPjCOtbieE8.roa (hash: bGjsSkVxtFTtg2bHcJH2NQE4duud/iaOMe/znbQ8Z78=)
3: MrRldFhaNhVoeCmw8xkb8TOhACY.roa (hash: K+X8TmG47yctp/QDpywhtZlC+KrX7gLEQ1SpS6yd2E0=)
4: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: SMYI+AAUUk3UfkGwgQ1AzVzNYSSA0oXDLIK9nuzVkOo=)
5: aTrGkvO5sOxBXIo1KiSB3ifAh1U.roa (hash: U2yJyooBVnOhDaZgcMUd0CR1TY9eGwZxZoT9BEikhsw=)
6: fJSwZSCvgo26rqxIAcOdab5KKYs.roa (hash: teqnFvvZnLT9nDR1yJ19E2k/PCo/G+uD5CJ+qieOR4o=)
7: vZCiwKajLAj94g_r1KS02gxe_XQ.roa (hash: /9FsroII+PnZV3EcII02TBLCdlztOBLTex1BPR/WLFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c9:f8:57:31:8b:72:2a:e5:31:83:2c:c8:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Oct 19 13:01:45 2025 GMT
Not After : Oct 20 13:01:45 2025 GMT
Subject: CN=d1310e191d1b70abdea177ab313d889d20a46ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:14:44:a6:05:41:b1:51:4c:32:73:af:74:
58:d0:e6:8c:9a:94:6c:d4:1b:39:ed:ab:90:0b:90:
bf:4b:8b:fa:d2:fa:29:f5:3a:8e:b2:fe:1a:02:cf:
16:91:3e:82:23:4a:ed:52:ad:68:8b:39:2f:ae:5b:
e3:69:c3:28:98:fe:25:7f:72:9e:25:54:02:34:77:
7c:bc:d6:d2:70:59:7f:e2:3d:2b:f2:8c:d1:84:28:
ee:3c:f2:2d:27:f8:37:81:43:ba:65:1d:96:63:df:
78:48:60:50:84:d5:24:a9:25:13:41:1c:85:5e:1d:
86:b7:d1:cf:55:63:6b:57:4c:0f:8e:6c:96:53:e1:
d0:7d:34:63:07:75:f1:7c:28:a7:35:0f:65:1b:a5:
da:15:6b:d6:c7:f0:bb:69:b4:49:b1:d2:25:d5:5b:
3b:2b:c3:63:1f:76:a5:4d:64:44:d4:e3:6d:82:e3:
d3:ea:0e:8d:27:39:c9:cb:4c:7e:5e:53:44:ea:c3:
6b:f5:9c:34:1b:04:8e:cb:eb:6f:25:ff:f3:d2:7a:
23:3a:91:0f:dd:78:be:50:fb:87:52:94:71:5b:f4:
2a:8a:17:07:67:8f:82:8b:75:95:23:5c:50:6f:40:
ee:71:b7:6c:a5:e0:ef:d3:11:10:44:67:65:a3:a2:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:0E:19:1D:1B:70:AB:DE:A1:77:AB:31:3D:88:9D:20:A4:6C:A7
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:02:b5:1c:dd:85:c1:ab:37:e9:02:76:fb:3c:94:c1:5d:f6:
a0:4e:58:2a:c7:30:bf:07:cc:6a:e1:26:42:cf:e9:3a:f4:c1:
5a:ac:42:d5:8b:ef:f8:53:1a:05:39:44:e3:14:63:23:c0:e6:
02:e9:25:30:7e:f1:0a:60:65:18:1e:ba:02:92:24:00:b9:56:
92:e0:53:9f:8c:c7:29:7c:c1:03:20:52:48:df:cc:fd:12:ae:
9f:93:c6:b1:10:0a:12:cf:4e:23:3e:5c:9f:fb:15:68:82:79:
92:5d:a9:1a:12:d3:3a:73:88:40:4a:e4:d6:dc:7e:93:41:11:
61:97:1f:40:23:7c:09:88:d2:17:7a:6f:cc:6d:2f:83:63:f3:
22:86:91:2d:6d:e5:b2:8b:e7:ac:be:01:71:c2:8c:12:ce:0b:
55:45:e7:35:d8:f2:25:08:d2:2d:88:6b:aa:6a:6c:03:8e:ad:
2a:e6:be:c2:19:ac:41:47:01:59:14:85:05:83:0a:1c:e4:f1:
06:ad:36:29:cc:b5:eb:10:bc:e6:71:a6:8f:38:95:3e:aa:40:
34:7f:b0:1a:d7:0b:f5:24:b7:72:51:de:71:fa:32:38:23:da:
53:47:ab:fc:40:fd:50:47:ae:03:44:18:ba:99:43:55:d3:0a:
79:28:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:05:49 2025 by rpki-client