Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: cZLlUD7GpcfY2wxOy3goYvsfMwrux8PY0v5Uk5yYkdc=
Subject key identifier: 04:00:43:AC:6F:74:8A:6F:94:EC:CA:3A:DA:FF:04:2C:E0:89:80:50
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 019A221B8DC47E4638F5757EDC5D2DD08B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 06D8
Signing time: Sun 26 Oct 2025 20:00:22 +0000
Manifest this update: Sun 26 Oct 2025 20:00:22 +0000
Manifest next update: Mon 27 Oct 2025 20:00:22 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: 3ktBRTAeHX1CF5WVzVwf176eEyjK9BXOMQZWxFsYhAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:8d:c4:7e:46:38:f5:75:7e:dc:5d:2d:d0:8b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Oct 26 20:00:22 2025 GMT
Not After : Oct 27 20:00:22 2025 GMT
Subject: CN=040043ac6f748a6f94ecca3adaff042ce0898050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:b6:2b:27:a9:bd:c0:ec:f9:80:08:b3:c8:
ac:b8:d5:20:b0:38:e1:3a:aa:6a:b1:c2:1f:8f:f7:
df:64:e9:d2:6c:ea:7a:fd:e7:a2:9c:73:06:54:ce:
02:37:13:48:a0:ab:85:1d:f2:29:fb:1f:f2:e9:80:
b2:ac:19:96:03:c5:51:30:13:ee:6d:c6:8c:e8:10:
a9:4e:ff:f0:b3:72:4d:a4:8d:fc:c5:80:b5:08:1d:
8f:78:11:db:4a:2a:e8:e4:db:bd:d1:ec:67:0d:bc:
49:8a:f2:7b:d7:85:60:bc:4c:a0:b3:25:29:e4:89:
a3:b5:2f:be:d1:73:5c:8d:5b:cd:eb:78:b5:2e:91:
d6:05:d0:0b:df:25:80:c5:1e:68:2e:9d:ab:32:0b:
99:9a:ce:75:4b:ec:86:c2:3c:c5:1f:35:2f:a2:29:
1b:93:ba:07:8b:00:e4:87:de:32:0d:bb:21:cb:80:
9b:8b:80:e1:84:a0:60:0d:7f:83:e5:88:3c:56:bb:
67:78:37:a5:91:1c:2f:d1:fa:06:a0:57:49:75:ca:
b6:55:46:52:8a:94:06:5f:98:38:f5:9e:b4:b9:dc:
32:d9:64:27:fd:00:19:d8:6a:54:c0:c5:50:b3:28:
44:38:50:bd:89:de:f0:b0:2d:6d:af:d3:59:b9:e2:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:43:AC:6F:74:8A:6F:94:EC:CA:3A:DA:FF:04:2C:E0:89:80:50
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:60:5d:3b:b3:88:e3:d3:23:1d:f4:00:73:a4:95:c3:f9:df:
70:a6:d3:8e:3c:fc:5d:66:b9:e9:30:f0:d3:b0:8e:f0:ca:ca:
c6:af:5f:b6:31:ca:ce:18:0e:53:8f:72:33:55:d0:2a:2b:42:
60:30:0b:5c:03:ba:1a:1f:43:05:58:8b:f8:95:47:ee:9b:5c:
a7:b6:cc:05:62:a6:e9:ee:3e:ef:39:86:a7:39:c0:fc:e4:32:
1d:97:3e:61:e5:18:83:4a:87:82:23:60:b2:1d:2e:c8:a2:df:
af:ff:7f:2a:fe:5c:65:c4:5c:f9:6f:2b:66:58:f0:dd:bd:b0:
bc:08:68:40:e7:67:ce:7b:78:6b:fc:d6:12:ce:6d:0c:52:7b:
6e:8c:28:c0:a9:94:09:f6:c8:6f:5e:b1:65:bb:c9:81:b7:a1:
70:f1:2e:98:1e:2a:9f:22:52:cc:ce:0f:4d:01:e5:d7:47:eb:
fe:aa:af:ca:30:13:28:67:cf:b0:9b:50:56:78:70:9b:4a:3a:
e9:f7:ee:d2:28:64:8e:5f:8b:f6:2a:0e:18:99:73:26:38:60:
0d:17:28:d0:39:b9:65:70:1b:2c:7a:26:14:24:53:89:df:e3:
e4:de:31:98:64:e3:c9:5b:9d:5f:31:b5:46:75:a0:6d:e1:27:
d9:9d:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:27 2025 by rpki-client