Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: Ic6qImhDs20dbIu3yT7qBn86ygzZvMkP7M8BCd4iWYg=
Subject key identifier: 6E:3A:ED:9C:63:21:25:A3:9E:50:98:F7:24:73:14:3A:66:FC:E9:00
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 019A23D30722F94E781D384A4DFB004EE16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 04:00:23 +0000
Manifest this update: Mon 27 Oct 2025 04:00:23 +0000
Manifest next update: Tue 28 Oct 2025 04:00:23 +0000
Files and hashes: 1: apVhYj18Bs_r1Q931zVqcqi5yvI.roa (hash: /gXE2P6qUcVxgRclWTrINQ6lVlcjG0089HciFUVuRsI=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: fY3mwmi5C9Aihpijl8DfG7Hu9+Q8seRUzbXjCvs3+vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:07:22:f9:4e:78:1d:38:4a:4d:fb:00:4e:e1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Oct 27 04:00:23 2025 GMT
Not After : Oct 28 04:00:23 2025 GMT
Subject: CN=6e3aed9c632125a39e5098f72473143a66fce900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:ec:b1:f0:68:ce:57:b0:47:59:f0:0b:62:
56:0c:35:fd:ce:0f:4f:47:80:d4:da:88:31:98:3e:
cc:e6:c1:24:5a:ce:8a:bf:61:4d:80:c4:1c:22:e4:
19:10:3b:fe:50:b8:ae:72:31:de:81:d0:96:1d:7e:
32:84:9f:89:cc:01:bc:4e:49:dc:bb:a1:da:ee:0b:
e1:b3:9b:30:43:bb:74:40:ad:ea:bf:2d:02:67:22:
f8:49:ad:39:bb:de:e9:21:63:bc:e9:cd:cc:7d:7a:
76:48:38:23:69:c9:54:ef:f3:02:82:62:26:7f:1b:
48:d0:49:b5:6d:34:e3:e1:96:fa:f6:a5:7b:02:1c:
04:1b:fa:74:c4:34:2d:be:e8:d8:ff:8d:1f:3e:c1:
6e:0f:8f:d6:f5:3f:e8:af:b9:71:41:6f:d0:05:69:
04:e8:24:81:60:0e:9f:5a:2b:50:53:46:ab:62:70:
70:5f:e4:03:20:e7:9c:46:48:f6:58:7f:7e:81:bf:
7e:ba:64:5c:6b:ac:98:85:22:d9:d9:de:0d:1d:5f:
cd:44:71:93:ca:77:85:f7:a6:cc:88:bc:42:2b:aa:
a4:8b:2c:c7:9d:d7:03:18:a4:1e:1e:40:c5:ca:26:
64:aa:2b:ae:07:36:87:3c:31:43:a0:38:58:bd:25:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3A:ED:9C:63:21:25:A3:9E:50:98:F7:24:73:14:3A:66:FC:E9:00
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:26:19:3f:8f:3b:68:6b:ba:2e:ce:ba:59:ad:84:c1:a6:
f7:c6:a4:6a:8a:81:50:ae:64:54:cc:21:63:30:67:9d:98:b3:
c7:6f:96:96:cf:2a:78:07:5b:b9:ca:60:be:1f:2c:23:ec:2e:
b8:71:2c:0f:a2:ed:99:6e:8e:c4:63:e8:c6:29:88:3b:7e:6e:
3f:7f:fd:c6:9a:07:de:9f:73:87:84:0b:ca:e9:a0:ae:23:31:
42:f5:ef:e7:8c:41:1f:f2:6c:4a:22:2a:e1:62:b6:eb:56:22:
a3:c6:db:84:c3:1a:95:0e:b7:49:f6:40:39:6c:08:b7:7d:a2:
3b:4e:5a:bc:ab:78:2c:2d:64:b6:fd:f6:cb:23:ce:24:4d:08:
b3:98:ff:04:93:bc:c0:89:0d:70:f3:20:7e:ae:83:12:bc:7c:
e9:34:5a:b6:5e:57:bd:2f:ff:7e:ca:19:8a:d1:2c:30:3c:1c:
82:d5:ce:c2:4b:85:49:cf:94:ec:f0:57:f5:27:3e:08:b7:b9:
c8:cd:f4:49:a5:05:5d:e9:4d:d6:15:23:4c:9c:21:6d:1b:78:
db:74:e8:ea:05:09:2f:21:bf:9a:a1:0f:46:5f:e4:75:da:9a:
e9:00:f5:d3:0e:4f:98:d6:47:2b:91:35:41:59:b4:f9:7e:9c:
a5:a9:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:08 2025 by rpki-client