Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File: ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier: lUlvx75G9//YpwFmbivOxbzYjLFyMI4keEeTw7vUaC0=
Subject key identifier: 91:8B:BB:2C:19:4E:64:80:C0:61:02:DA:7D:A1:D3:7E:16:2C:C3:81
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer: /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial: 019A23D2DB67AFEC19AD23EEFEECC4283EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 04:00:12 +0000
Manifest this update: Mon 27 Oct 2025 04:00:12 +0000
Manifest next update: Tue 28 Oct 2025 04:00:12 +0000
Files and hashes: 1: LPoSWmH9lMAQGTklM5DJIT-hXL8.roa (hash: TOrMsZzQDuOs5c3iwWnYNm18JhvhdddP0HuUPukBsu0=)
2: OvOurKu8T2ws1g_rbUDf-nmHO_k.roa (hash: il6P6mcaD6j7wpNIC2MuV0ZyXgmG33aNWz7qa9/JNHg=)
3: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: /uQtKg5dxkxKlEl5uKiBsqVn7UW6YlXepmb4ldGDm6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:db:67:af:ec:19:ad:23:ee:fe:ec:c4:28:3e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
Validity
Not Before: Oct 27 04:00:12 2025 GMT
Not After : Oct 28 04:00:12 2025 GMT
Subject: CN=918bbb2c194e6480c06102da7da1d37e162cc381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:5c:11:c0:fc:17:ee:6e:56:10:8c:28:7b:
3f:b1:58:19:6a:28:bf:92:42:bf:0c:6d:91:10:34:
83:2a:1b:bd:76:a7:cd:a0:0a:9b:b0:45:a8:ca:65:
73:fb:c5:42:e2:28:f8:22:5c:8e:b0:60:bd:b3:db:
b4:ef:4b:7b:f3:de:b7:15:a0:b3:16:8e:0d:cd:fb:
41:6b:a7:5c:0c:b5:aa:c9:b9:be:e6:bd:81:80:cb:
82:85:d5:aa:57:52:88:a3:d4:42:7a:87:f5:4d:ee:
87:8f:07:f1:d8:c3:ea:e2:e9:95:f7:63:3e:9e:2d:
d1:b8:1b:bc:e5:f5:8f:8b:20:e5:d7:85:af:e3:35:
b1:c9:0b:98:b6:f7:9e:6a:00:90:26:60:da:b7:67:
ba:17:f1:08:7d:95:53:0c:b4:01:4f:08:f2:c8:ec:
96:61:7c:13:a9:1a:13:db:97:f1:74:a7:8c:07:b6:
0a:12:09:bf:a1:c4:60:a6:fd:6d:82:98:60:66:2b:
51:79:09:39:41:e0:61:94:c7:aa:c1:5b:5a:1b:5d:
3e:52:2b:df:cc:e1:0f:8f:9d:e8:cf:cf:38:23:b8:
38:45:79:29:aa:e5:bc:6f:26:1c:b8:c0:e7:67:4f:
fc:22:62:56:fd:71:bc:f6:6a:0d:4a:6a:e6:71:19:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8B:BB:2C:19:4E:64:80:C0:61:02:DA:7D:A1:D3:7E:16:2C:C3:81
X509v3 Authority Key Identifier:
keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:76:c5:86:36:47:af:46:50:42:09:24:ac:fa:c3:2b:d9:a6:
ab:3f:5a:bd:f5:f9:55:16:87:85:f2:ef:1f:6a:1e:a9:dc:9c:
53:cf:17:37:0b:ea:d3:fd:d9:b7:4e:94:04:d8:cc:3e:d9:61:
82:8d:f6:97:e0:df:6d:ee:8c:fe:63:b7:e0:80:0d:96:ce:2b:
9f:d1:16:b1:70:8e:0b:61:e5:7d:31:e7:31:17:ed:f9:05:61:
d6:d6:1e:b5:e6:47:71:c0:e5:fa:d7:40:d9:f6:e1:6f:ca:00:
f9:2d:d5:97:de:d6:e8:88:a6:60:15:3e:bf:54:46:9c:37:63:
71:04:7b:9b:da:0b:f0:f1:07:fa:20:16:be:8b:d2:af:e9:73:
fc:13:c4:0f:92:8d:0e:89:29:54:0b:d6:f3:ff:30:0d:45:40:
92:f0:e1:95:8f:ba:cb:62:52:65:b6:54:c6:63:14:ac:e0:3c:
ca:cb:dc:94:fd:f0:9e:4e:f0:6b:ba:ba:af:e8:bb:d2:91:f6:
00:d2:d6:c7:fe:ec:a4:5f:28:53:82:44:a1:34:81:8e:f9:22:
a7:4d:6b:60:5f:4e:23:6c:f8:7f:76:3d:7a:38:6f:27:f8:66:
79:38:2b:18:32:10:bf:5a:61:76:9d:ee:51:81:d2:4c:19:46:
fb:af:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:23:41 2025 by rpki-client