Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: c2U2IheQTQ2DxLV4Z9BOSwQax20pdZ5UdFwwJJP6JxE=
Subject key identifier: 29:F3:E4:26:59:E8:A0:9F:8A:E4:54:78:20:48:94:83:98:50:43:50
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 019A21AD9B590FF3B4354BC05C80A20702D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 18:00:16 +0000
Manifest this update: Sun 26 Oct 2025 18:00:16 +0000
Manifest next update: Mon 27 Oct 2025 18:00:16 +0000
Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=)
2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: L2EPqJ0Srz+w5OWHwWGG/N5lTHJhUx/rRKZqTqGjlNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:9b:59:0f:f3:b4:35:4b:c0:5c:80:a2:07:02:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Oct 26 18:00:16 2025 GMT
Not After : Oct 27 18:00:16 2025 GMT
Subject: CN=29f3e42659e8a09f8ae454782048948398504350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:63:b8:cb:73:be:d6:49:47:d8:bb:dd:06:
91:65:05:56:78:62:29:8b:67:be:13:31:aa:92:95:
d4:88:67:a4:4d:06:c6:f0:08:ae:49:bf:e1:40:f2:
93:0f:33:07:c2:fa:b5:f8:5e:d9:48:cb:f5:f8:6a:
ad:9e:69:8a:70:75:75:8c:c4:c7:f5:ea:90:52:1b:
0d:00:bb:3d:c5:ea:2d:45:e7:e0:6f:54:5e:53:6f:
1c:58:62:8e:ba:98:9b:ba:e6:7e:8c:6b:f3:cf:52:
c9:1d:68:83:66:bf:d0:79:df:87:52:86:cd:13:95:
c4:1d:00:56:b7:0d:8a:1f:7e:5f:a9:7c:f8:85:76:
db:db:b8:c7:32:c5:3b:51:ca:8f:10:51:22:22:ab:
97:04:be:e0:8e:56:17:95:07:01:28:1c:2b:b5:a1:
5b:28:31:3d:cd:26:b3:ab:1a:92:a0:95:31:0a:b9:
2b:1b:57:67:13:a9:9f:92:44:92:b8:d8:50:33:f6:
91:35:02:d1:87:82:cb:0b:ae:64:6e:7f:89:f8:6c:
bc:99:99:5b:a3:d9:09:21:70:e5:a9:5c:61:ba:78:
16:d8:e4:ac:a6:1b:f7:f5:85:4f:aa:17:81:8f:02:
b9:cb:c4:5b:fe:7a:c5:3f:bd:e4:4c:71:10:b8:de:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F3:E4:26:59:E8:A0:9F:8A:E4:54:78:20:48:94:83:98:50:43:50
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d0:65:22:81:e7:12:8f:9a:2c:df:03:6d:60:c6:a3:bc:6c:
30:a8:bb:b7:d1:da:0b:38:85:6e:df:c7:e8:94:e0:e9:19:fd:
b0:b1:6d:17:6b:81:58:4e:33:3f:1b:10:c0:7a:5c:09:f8:1c:
a3:e8:4e:d1:9e:15:5c:f5:78:72:12:6a:a1:31:b1:78:cd:4f:
7e:47:a4:5a:1b:b6:cf:9e:34:52:fa:72:1b:43:d2:d1:8f:dc:
5e:aa:e8:23:4c:63:7d:83:c1:58:47:4b:8b:36:8e:fa:df:1a:
a4:92:02:8e:d1:b6:97:08:20:fa:7e:29:82:c9:52:4a:f2:74:
6d:5e:12:07:71:90:94:af:18:2a:45:d5:7b:c0:91:ee:b3:10:
02:5d:86:bd:9c:5f:c0:11:1c:2a:22:f1:40:85:6a:3d:d0:ee:
ac:ef:6e:ef:e8:73:32:cd:7b:e7:96:ef:e8:bd:79:19:13:95:
9b:a2:e4:c0:8e:fb:aa:af:f1:be:7f:a2:1f:df:ca:d2:b8:01:
f0:7c:7c:42:55:51:05:16:a8:6e:88:59:21:1e:85:4c:f0:23:
b1:88:24:53:00:8a:b7:68:39:ea:e8:68:ce:e6:de:fb:6f:b7:
59:84:f2:97:a9:3f:2d:f2:1e:ff:2e:2a:83:f9:27:55:cb:79:
91:4e:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:40:51 2025 by rpki-client