Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: oJ5PMy2tjIa0vtRbvfjj4x0RL4qyIfkjJGvSVgzlQMo=
Subject key identifier: 4E:25:D9:62:39:39:46:DF:64:9A:C9:98:6B:6F:8C:46:DC:D6:89:87
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019A1D9A1F9A566B07DF0DD1C0D230C804BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 0FBD
Signing time: Sat 25 Oct 2025 23:00:31 +0000
Manifest this update: Sat 25 Oct 2025 23:00:31 +0000
Manifest next update: Sun 26 Oct 2025 23:00:31 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: 9dIao10YGgNs/ap0fvYl8KBy3Pl04OoRU/uxxNHsHoM=)
2: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:1f:9a:56:6b:07:df:0d:d1:c0:d2:30:c8:04:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Oct 25 23:00:31 2025 GMT
Not After : Oct 26 23:00:31 2025 GMT
Subject: CN=4e25d962393946df649ac9986b6f8c46dcd68987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:86:59:7f:13:16:41:c7:8e:be:6f:fa:09:
ea:07:fa:7f:7b:38:38:99:70:c4:c7:5a:96:6b:fe:
9c:19:39:a8:b5:de:91:74:60:6e:6f:99:93:cf:ec:
e5:f0:ca:16:59:c1:ba:fc:71:11:07:3f:e4:e1:16:
af:75:1c:30:7a:fa:50:ab:32:54:6c:6d:ae:3d:c7:
dc:ee:08:53:35:a0:63:6a:e8:e1:97:cf:2c:30:a3:
6d:0c:ad:81:d0:be:44:1a:fd:61:15:91:e3:83:73:
a8:cf:29:4e:15:9e:ae:12:bd:dd:39:a8:65:69:02:
e5:a5:1b:23:62:84:ca:93:3e:e9:d6:ae:9e:c3:e5:
88:a9:b2:6e:27:9c:33:21:03:6f:ab:78:15:23:1c:
99:e2:fe:c3:1c:aa:50:72:8c:7d:9e:c9:7b:af:fa:
3f:b8:73:6b:6b:3c:36:40:b7:70:b3:15:a9:ea:25:
b7:11:e2:80:f9:84:38:7a:72:fc:06:3e:13:0f:dc:
94:b1:47:fa:7a:42:88:7c:c0:3f:56:9c:43:21:50:
f5:f3:0f:94:c8:ce:7e:54:1f:ee:82:22:06:e1:37:
51:a5:d8:4e:fb:7d:5b:50:bf:54:e5:7e:0b:bb:32:
a6:fc:6b:20:de:57:8f:50:f8:ed:79:ea:fc:fc:72:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:D9:62:39:39:46:DF:64:9A:C9:98:6B:6F:8C:46:DC:D6:89:87
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:92:f0:17:dc:c9:25:11:9a:c8:70:c7:95:75:08:da:71:c8:
32:e9:39:01:cf:00:14:8d:c0:ae:aa:b5:46:91:9b:1b:6f:77:
21:7d:2f:a3:e6:ea:de:f8:b5:e2:3d:45:c4:98:fe:04:0e:dc:
c6:ef:9b:04:af:ee:22:79:c6:b1:56:2d:42:aa:41:fb:23:2f:
ca:ca:5c:d6:4c:90:84:22:3d:b4:8e:89:47:6d:0e:8b:33:49:
90:88:c4:dc:d9:9f:7b:28:5a:5e:5e:8a:c4:f4:ad:66:91:ab:
24:19:42:6f:b5:0d:b7:45:b0:59:8e:94:80:93:4c:76:1f:0b:
1a:7d:9a:f9:db:7f:10:4f:67:62:28:1c:bd:29:27:52:61:bf:
e6:8a:91:a3:a0:f1:36:b2:f2:d0:79:74:80:fd:32:69:59:d2:
b9:90:93:81:7e:3b:55:49:f4:fd:18:86:03:3e:29:83:8e:52:
fd:4a:64:bc:f2:ea:41:b1:89:f8:b5:4f:8b:68:fc:57:3c:0d:
bb:43:fb:a4:94:14:3c:e1:d5:e9:4e:4f:12:20:c5:f5:f1:73:
d2:03:bb:01:61:cd:cd:7f:bc:71:33:0d:98:fc:e1:22:fe:d4:
db:8f:f8:94:e8:3d:76:36:d9:af:4a:8c:66:8f:03:5c:11:d6:
be:39:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:13:42 2025 by rpki-client