Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: KSg8JPwwGZBxMkhhMz085GcCtWYOLKX2emZcSrCsO0w=
Subject key identifier: 65:25:E2:A7:50:83:F9:BB:74:64:12:04:EF:23:2B:4D:B3:51:7D:F2
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 019A228AC828EAB5001958DC2AD64F7E9DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 1688
Signing time: Sun 26 Oct 2025 22:01:51 +0000
Manifest this update: Sun 26 Oct 2025 22:01:51 +0000
Manifest next update: Mon 27 Oct 2025 22:01:51 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: ynBK6xbZVbihDbyoIQXYentwUfuqx8INUMJppzoF0Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:c8:28:ea:b5:00:19:58:dc:2a:d6:4f:7e:9d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Oct 26 22:01:51 2025 GMT
Not After : Oct 27 22:01:51 2025 GMT
Subject: CN=6525e2a75083f9bb74641204ef232b4db3517df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:f3:da:28:ba:c9:c3:ac:b9:74:c4:a3:9f:
0d:a5:91:74:de:76:91:ea:f8:ff:c7:b0:b3:5d:ac:
9f:91:62:da:31:8a:f9:7e:04:98:53:c9:c2:f5:28:
b3:d9:85:da:f1:32:18:bb:4b:8e:84:89:03:56:f4:
14:24:ea:47:d9:e8:d3:4b:56:dc:9f:da:a5:41:99:
3b:dd:b4:45:61:33:70:28:eb:0c:60:06:22:28:90:
d0:f7:65:88:31:b4:40:4e:10:4a:af:1b:28:0b:d7:
fe:2a:71:61:7f:86:c2:16:b8:4d:e9:71:08:34:c1:
a4:fb:4d:88:84:cc:df:b9:a9:62:e9:2f:1f:f3:fe:
fe:fb:e1:47:d3:f4:65:70:32:c7:e3:c0:28:9c:f5:
bb:6c:23:1f:35:1e:70:6a:02:fc:de:fe:cc:7b:3f:
7e:36:1c:2b:46:4f:f7:97:b3:a5:23:08:c1:be:82:
a0:b8:fe:d5:f3:00:90:74:0a:05:b5:54:fb:70:47:
f4:f7:ab:20:d0:88:7e:79:b9:fe:84:3a:24:19:38:
a3:94:2f:5f:26:10:df:b6:51:d2:f8:b8:a5:f5:3d:
f5:1c:1e:21:6a:a2:78:e1:d3:0d:82:3d:b9:5d:e1:
72:6d:a0:3c:a1:57:11:37:8d:41:5b:8a:3e:cc:96:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:E2:A7:50:83:F9:BB:74:64:12:04:EF:23:2B:4D:B3:51:7D:F2
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3c:5c:2e:04:72:45:bd:6c:38:4c:81:78:66:09:9d:eb:85:
21:4f:0c:3f:8f:41:f0:87:e1:51:66:b7:1c:95:64:d4:4c:7b:
e6:14:fc:5c:a3:71:42:f8:43:b7:f5:91:c3:7a:12:63:ae:a2:
47:29:28:2c:98:95:fa:7d:c8:39:8c:ba:75:d0:6c:68:da:15:
0c:32:cb:3d:d1:af:0b:38:23:92:a8:a4:ba:51:76:eb:2d:7b:
c0:f6:c6:7c:e8:5a:eb:d1:27:45:2b:40:5b:a9:92:c7:27:23:
6a:78:d2:51:38:f8:bb:8e:bd:b7:8f:4c:6b:3d:1a:b1:3d:e7:
29:01:b8:3c:5d:dd:74:bf:5a:61:a6:16:ad:5d:23:6e:cd:fe:
71:86:ce:74:2f:a1:03:6e:39:cb:61:95:21:c4:b0:b7:ac:c2:
13:a7:f6:e6:1a:b7:2f:cc:82:92:d4:91:67:b7:94:18:6e:63:
ac:66:68:cd:99:6e:64:6b:f4:7c:fa:84:1b:67:92:8f:f9:42:
98:45:1b:13:bb:ef:07:b0:fc:cf:6a:9a:89:ac:28:4a:74:0c:
07:37:74:ce:d9:6b:67:84:b2:0a:f8:19:d7:81:ac:30:a6:64:
4d:28:32:fc:a9:16:02:57:54:15:e7:92:21:7a:9c:78:77:5a:
ce:6c:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:52:12 2025 by rpki-client