
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: YhycLErT1UblyKVrzF+aBpQ/jZ1rLHDUHDMfYM2aGZc=
Subject key identifier: 75:A1:0F:4F:BB:DB:F8:05:62:5D:02:E7:D0:16:E1:F6:D2:71:0A:8B
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 019A194F6658AF3A0DBC80727E70DA4B06A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 16F1
Signing time: Sat 25 Oct 2025 03:00:25 +0000
Manifest this update: Sat 25 Oct 2025 03:00:25 +0000
Manifest next update: Sun 26 Oct 2025 03:00:25 +0000
Files and hashes: 1: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (hash: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: B/1NZHIJxmIU5hNKazIynQrrNQa0X3YnH5oV9sZtHxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:66:58:af:3a:0d:bc:80:72:7e:70:da:4b:06:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Oct 25 03:00:25 2025 GMT
Not After : Oct 26 03:00:25 2025 GMT
Subject: CN=75a10f4fbbdbf805625d02e7d016e1f6d2710a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:17:ee:12:b0:1c:95:6a:53:79:ca:60:41:
78:62:48:92:88:ac:f3:7c:42:5a:6b:15:41:5f:f8:
35:2d:a9:94:47:37:05:c7:ab:27:fd:f1:8c:c8:57:
77:ff:91:1c:6c:50:dd:7d:d4:56:ed:77:de:25:ed:
81:5f:e8:42:dd:9a:2c:99:e2:c4:69:45:32:f8:0b:
92:4a:57:46:11:ec:e7:a8:a3:e4:b1:08:ea:ab:75:
5e:b2:60:35:5c:49:9a:7f:ee:83:f8:b5:dd:93:ad:
8a:02:28:f5:e4:2a:85:f6:ec:f4:53:67:42:99:54:
eb:5d:6d:4f:32:27:1f:5f:ca:33:42:be:53:30:dc:
55:6a:c2:4d:29:92:b5:09:d6:be:e3:2b:eb:ba:4d:
9b:43:71:dd:eb:f7:11:ef:1e:af:c7:da:b9:6c:d4:
36:d0:4e:f9:9c:4b:c0:ca:e2:ef:d4:96:99:46:95:
c5:a6:11:b2:42:64:26:fb:6e:34:1d:2b:a2:30:c8:
3e:de:a8:b1:00:90:6f:9a:eb:40:35:6d:2c:c8:8a:
a6:8d:a1:63:83:2c:b5:0e:8f:87:4e:b1:2e:c3:4a:
c5:aa:a0:c0:9e:b0:81:e7:0d:48:fc:fe:fc:d6:e6:
eb:48:22:e6:80:60:b6:c3:53:23:d3:36:bd:fd:50:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:0F:4F:BB:DB:F8:05:62:5D:02:E7:D0:16:E1:F6:D2:71:0A:8B
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ef:59:c0:89:e4:81:08:ab:2f:b7:e5:90:f6:f5:e7:d4:13:
76:76:4d:96:61:bf:d4:52:9e:c5:51:4c:1a:33:e0:01:23:ec:
c5:db:31:c4:ab:76:46:7d:ee:7b:a4:54:75:c3:20:9e:1f:0c:
e7:2e:cf:5c:09:0c:0a:1e:42:da:af:71:b7:16:64:49:37:9d:
50:d9:f5:f1:24:f9:22:7d:fb:22:75:1c:eb:bd:00:0e:66:72:
01:47:d6:5d:73:48:a7:ef:17:20:34:82:d2:03:83:c5:90:2d:
47:25:dd:54:86:69:0e:86:69:78:63:47:b6:d0:e5:47:cb:11:
91:0e:6b:69:3a:1d:1d:eb:ad:a8:86:ca:0e:c9:77:2c:aa:03:
fd:ce:af:fe:08:77:1d:06:4c:95:20:20:b5:c0:79:b0:5a:73:
c2:20:2a:f7:eb:b8:68:69:fd:1b:4a:2c:e8:e7:7c:bc:7a:68:
b2:f9:bb:38:66:1b:e2:48:84:04:a8:dc:93:4f:6c:b3:e4:3d:
ca:91:13:83:00:9b:a5:21:9b:cf:c8:f8:e1:91:83:a7:53:57:
35:7c:13:cc:b6:3b:a5:7b:ce:69:f2:24:9e:e4:cc:a3:fa:4d:
4a:c7:c9:11:b3:f6:1b:40:41:c9:48:22:1e:06:37:f7:79:96:
fa:e4:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 05:12:40 2025 by rpki-client