Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
File: ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json)
Hash identifier: eyhBVyFYKz8UIsWUXvik4ao8Dvb/emXCP6LuyZ+ohJc=
Subject key identifier: 26:35:1E:AA:59:48:1B:99:A1:4F:27:C8:7D:55:0B:71:31:9B:92:20
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 019A05C881E557E0B35BBD9CBFF0DED126E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
Manifest number: 16F0
Signing time: Tue 21 Oct 2025 08:00:17 +0000
Manifest this update: Tue 21 Oct 2025 08:00:17 +0000
Manifest next update: Wed 22 Oct 2025 08:00:17 +0000
Files and hashes: 1: 8AY6X4XCRyiZxzFlt6tsbjR30jM.roa (hash: 5ZRaImHY2F/S3wQVqNNqg0MgU/7l0llwd1UlTTznV7w=)
2: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: ZnVBT6k1PMXhga6OX3/79KhyXQI6+cbkd0jvtR87NzI=)
3: bth8nL17vmRfjOgOkE44hcyUW-U.roa (hash: +2CIURrrMY1RojUxyGB46gsHzcj2R0An7rXyNN3SRxE=)
4: fyItLKzWB2M2DcciXcjMC9ehbVo.roa (hash: 3hotdI7UkUaU/+3bTtSUK7y3DutUUFvTPfXcX54WRXY=)
5: xn5m4EslppaLzMQirkAjRslNCRc.roa (hash: UOBKdq1hXA/nlG6uZfbozsCpkf5JEX4D4dlwEvI1lPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:81:e5:57:e0:b3:5b:bd:9c:bf:f0:de:d1:26:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Oct 21 08:00:17 2025 GMT
Not After : Oct 22 08:00:17 2025 GMT
Subject: CN=26351eaa59481b99a14f27c87d550b71319b9220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:fe:a7:a7:cc:d1:40:7a:0c:e7:db:0d:d8:
01:02:ac:d8:f0:c9:b1:b7:13:e3:8d:9b:25:0b:84:
1d:7c:10:80:81:85:5b:fb:f6:50:4b:14:bf:83:d8:
2f:24:43:9a:3d:e7:26:00:c0:99:75:75:22:57:d6:
24:da:d7:01:89:8e:15:03:f8:a7:80:fe:d9:eb:aa:
77:d5:13:6a:b6:ca:04:41:5d:30:b8:7f:8a:ba:90:
af:59:a0:ed:ab:42:c6:73:53:6f:ae:b4:1e:56:c5:
59:ca:04:3e:4e:11:6e:06:7a:7c:45:e5:8a:22:8f:
f5:43:36:40:88:13:9f:ae:47:9c:55:2d:28:71:98:
9a:d9:76:f5:79:b5:d1:68:e6:da:6d:c1:2a:58:cc:
1a:24:ab:42:7b:13:0e:29:ba:df:a7:3c:04:f6:76:
cf:81:82:64:2b:e3:e1:ee:48:37:ee:9b:1c:0e:60:
3b:04:74:17:5e:2d:27:9b:8b:ba:e6:81:cc:9e:4b:
35:5b:c7:09:a8:82:65:49:60:cd:ad:b8:81:c1:d3:
66:04:65:e5:f5:b3:49:9b:9e:24:68:ec:e3:c0:93:
cc:75:10:94:b6:89:26:18:cd:b1:89:d4:3b:2c:f6:
4b:e4:a7:b6:8d:f0:d3:c4:85:9d:07:dc:53:9a:46:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:35:1E:AA:59:48:1B:99:A1:4F:27:C8:7D:55:0B:71:31:9B:92:20
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c2:ca:4c:e4:78:3f:7b:3f:f8:8d:f2:20:82:02:d6:2e:16:
f1:05:18:78:bd:c2:73:d4:55:e4:8e:50:56:55:a9:d8:93:c9:
d3:a9:9d:f9:e5:6d:6e:ee:97:10:26:fe:3c:58:9f:fe:f3:af:
ab:cb:66:03:ee:ac:ca:3f:8e:c7:a3:de:b4:f6:21:fb:1e:17:
50:d2:6a:4d:55:13:1b:4f:90:18:a8:4a:6d:ca:f5:6e:eb:f7:
7b:59:13:96:cd:e1:83:2d:c8:89:53:a4:5e:2f:5d:24:63:85:
e2:61:b1:f7:29:01:a0:d0:9c:53:36:b2:f7:e4:49:72:d1:1e:
06:bd:e8:8c:1e:40:5a:87:55:ed:ff:fe:98:fc:3d:6a:68:0b:
a2:c1:06:0f:0c:37:d8:dd:56:63:cd:72:21:1f:be:99:12:e3:
5d:50:36:61:1c:b3:4f:72:ea:0d:83:81:73:40:85:59:89:e0:
f7:23:e4:6f:e0:d4:6c:ca:46:66:48:16:f8:30:41:2e:23:ef:
f6:70:d2:15:4b:69:ea:9f:ad:f5:35:cf:f6:f6:16:d0:28:ea:
0a:14:82:87:46:92:bc:54:d9:19:aa:d7:74:65:bd:bb:55:64:
1a:43:17:48:ae:82:0a:7b:24:7a:02:68:54:fe:2b:a8:45:38:
e0:c6:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:02:27 2025 by rpki-client