Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File: Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier: RFnyVBMJUlwnYu1DKai+YHKiv7wxsoP0JDhOdbTBU/4=
Subject key identifier: 88:D3:94:F4:D5:C3:1D:37:87:5C:E2:47:BA:8A:00:72:E5:1A:F7:C9
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial: 019A239C561C164CE338137E55A92F5C379B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number: 1703
Signing time: Mon 27 Oct 2025 03:00:39 +0000
Manifest this update: Mon 27 Oct 2025 03:00:39 +0000
Manifest next update: Tue 28 Oct 2025 03:00:39 +0000
Files and hashes: 1: 7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa (hash: k+U35adZwDUqbZfONZN9YxBvYnb8OmgnqwbSFhlvMsw=)
2: Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa (hash: IbN6B6NWFefTjZbMVpJkmbwj8ZHivUrVhvuHXNdd+oQ=)
3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: 0zz2os2hyLwfRUpHA5nL/7lKhUTgWzi9r5JWwxbmPRg=)
4: jFXSmkjEC26c8mxhOetY3rp2Ccc.roa (hash: olcLB40Oa+I2BCFt/Z0AGNONx90qq/xMtLVV5Y1vQVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:56:1c:16:4c:e3:38:13:7e:55:a9:2f:5c:37:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Validity
Not Before: Oct 27 03:00:39 2025 GMT
Not After : Oct 28 03:00:39 2025 GMT
Subject: CN=88d394f4d5c31d37875ce247ba8a0072e51af7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:1d:1c:c5:fe:ce:2e:bd:88:4c:e2:cb:c1:
da:25:10:3b:e0:a6:1d:17:72:00:72:32:94:a5:07:
fa:42:4c:e6:24:10:56:bf:ea:7f:2f:ee:76:76:65:
a8:fd:49:8f:ab:54:c1:12:2f:6d:3d:f4:8c:ee:e1:
01:25:1f:23:15:df:5a:9f:ef:3a:a9:c0:41:1c:d1:
d0:58:8b:4c:8c:12:df:cc:41:51:9d:1d:03:73:74:
e7:08:c9:e9:85:fd:4b:ea:3d:a1:dc:07:42:c1:d7:
1a:8f:3e:f5:1d:fb:38:5f:0e:e8:22:92:fc:49:94:
14:ab:99:0a:61:c9:f9:d6:cf:39:4e:2b:a0:f7:68:
7e:63:34:22:61:a9:69:23:49:69:5b:ee:7e:2a:b6:
0a:59:8d:29:fa:9d:bf:f2:bb:2a:3d:2a:cb:d6:99:
ba:59:15:79:c6:d2:00:0b:f7:45:7b:e0:85:e3:32:
d6:ec:40:f6:74:15:c8:78:0b:e1:5b:c8:2b:b2:fe:
0d:1b:8c:40:dc:67:d9:50:a5:8c:89:4c:a7:f0:83:
3c:da:8b:64:e1:6d:21:9b:79:88:4d:de:fc:2d:3b:
e3:77:bd:6f:ad:8e:b5:7c:c7:b5:e2:ff:1f:35:bd:
70:4b:6e:7c:c3:b6:a3:8c:8e:01:f1:87:47:fd:69:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:94:F4:D5:C3:1D:37:87:5C:E2:47:BA:8A:00:72:E5:1A:F7:C9
X509v3 Authority Key Identifier:
keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ab:b4:a0:7b:d0:f9:50:a1:a7:26:8f:f9:a1:96:c9:ea:e7:
f7:55:ca:61:f1:c0:15:22:17:85:9c:d3:e1:bc:75:82:0c:64:
d7:06:2a:66:2e:6b:d2:41:4e:84:90:19:1c:ba:43:82:d3:82:
fc:65:ca:ba:56:09:f7:28:eb:f9:42:5f:94:15:5b:09:72:86:
de:00:da:e3:d7:4d:6b:52:2b:d3:43:7e:17:1f:bb:61:34:ad:
fb:66:22:91:c0:bf:84:a9:33:14:8d:f8:d1:fe:25:92:3e:47:
a0:c3:98:96:af:56:8a:ad:d4:ce:fb:99:96:ad:ab:96:cc:f7:
b7:5b:70:a6:03:3d:dc:e5:86:6f:84:7a:e9:57:a6:7b:89:a3:
5b:a3:09:ff:d1:69:fb:7e:25:ce:5c:c7:58:c5:42:7e:14:c5:
c6:6d:38:d5:fc:d1:64:ee:72:11:c1:e9:54:a9:ca:8a:cb:77:
4d:ae:ec:66:25:7a:ec:49:0b:0d:91:e5:17:06:01:0b:b7:5f:
26:49:b3:b1:4e:e1:ad:99:12:09:39:46:f6:cc:b4:76:f0:48:
5e:17:ad:f5:d4:5b:42:3a:ab:53:1b:b4:a0:2d:bf:81:46:42:
93:0c:01:6e:22:76:3b:99:63:50:01:32:8d:bb:ee:a5:a9:5c:
bd:40:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:11 2025 by rpki-client