Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: DHYmVEjY5g5HUnLyKX2MUghxZFNuuH8OI8mS203i5iU=
Subject key identifier: 89:BC:D4:D9:D4:E7:6A:EA:CE:97:FA:4E:D2:0F:7A:4F:31:A3:FA:BB
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 019A255363373E455F3F01A06336F502FC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 11:00:13 +0000
Manifest this update: Mon 27 Oct 2025 11:00:13 +0000
Manifest next update: Tue 28 Oct 2025 11:00:13 +0000
Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: leykyNZySzlM8i/mbZAZ6wj9xNVYoLNl+LSo2pd8lzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:63:37:3e:45:5f:3f:01:a0:63:36:f5:02:fc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Oct 27 11:00:13 2025 GMT
Not After : Oct 28 11:00:13 2025 GMT
Subject: CN=89bcd4d9d4e76aeace97fa4ed20f7a4f31a3fabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:3f:06:e9:17:de:8f:5a:ef:27:44:c0:e3:
61:9c:21:6f:f8:eb:a4:b9:f6:3b:4e:70:62:8d:1e:
38:d1:80:c6:90:4a:b1:e8:a1:1d:ba:25:f3:96:1b:
05:70:a8:ac:85:d0:ec:e5:e0:18:a1:ec:32:99:4a:
28:e9:ed:ed:29:bc:15:82:af:f8:d0:56:27:b9:d9:
69:12:99:ed:f2:58:b9:e1:56:60:f6:b0:85:3b:94:
85:02:65:f0:c4:11:30:f4:b4:c6:0b:ed:5d:b9:95:
fc:fd:85:d1:51:66:fa:03:f5:15:3e:92:da:68:2f:
bb:c0:b3:33:52:65:27:ee:6e:25:de:c6:03:47:ef:
0c:97:e0:b0:b9:4d:b0:4c:3c:bd:5d:4b:f7:33:a3:
ce:92:d5:5d:70:ca:93:7b:2d:87:da:81:1b:39:77:
d3:b8:e7:cd:02:dc:2e:fb:0c:91:07:57:10:55:83:
23:f2:5c:a1:4e:d0:79:81:8b:15:f3:90:96:79:87:
59:52:67:b9:8b:62:2a:a4:ff:d2:a6:f6:ae:4a:ae:
7b:93:f1:2f:40:28:c7:85:47:1c:35:e8:1b:72:d6:
59:4f:32:ae:c3:a6:a4:50:49:fc:6e:48:88:00:0e:
71:45:25:ba:de:85:9e:18:43:96:97:85:e4:71:c0:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:D4:D9:D4:E7:6A:EA:CE:97:FA:4E:D2:0F:7A:4F:31:A3:FA:BB
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f7:c8:a3:40:b0:a2:fe:b9:18:63:8a:6f:8d:52:e7:70:1c:
84:84:26:91:9a:84:1b:11:bd:d1:b7:fc:94:9d:32:0a:41:bb:
cd:83:37:71:dc:92:c3:89:08:ab:e1:52:3a:89:fd:85:6d:65:
65:b9:61:40:92:ad:9f:b2:8e:01:d1:53:b3:6d:e8:d0:eb:36:
7f:d2:04:5d:2b:1a:03:38:26:b8:7e:ac:2e:b5:d3:72:7c:6f:
84:48:8e:1b:e2:04:66:d7:4a:89:47:86:3c:3c:19:95:87:f7:
e8:ae:8b:51:8b:6f:58:78:f5:3f:cb:34:06:ef:4f:39:4e:3a:
75:ac:85:85:ae:26:3e:df:f9:45:c7:d1:e0:41:7d:a5:37:a2:
63:a2:a7:11:bf:30:62:8a:9a:e9:c7:bf:ea:c2:f9:73:0e:c5:
2e:b0:27:6a:2b:2a:5b:9e:aa:eb:d2:9c:d2:3c:c1:4a:76:16:
39:4f:94:49:d7:eb:da:87:5b:b4:1e:e5:5a:e6:c9:14:6e:58:
8c:f4:c0:a8:ac:de:ed:8f:eb:74:04:15:3b:50:dc:0c:46:cf:
c5:0e:15:fe:89:c8:a5:6f:fc:7d:d5:c4:1a:0f:8e:6b:38:1a:
49:f8:2d:3b:81:96:fb:f6:14:9c:38:5d:bd:c5:61:48:2a:c5:
e2:5c:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:22:32 2025 by rpki-client