Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: JiUUJBFVHX+wXpY1kwSNlfH4zgPT5dKxeTkjCg2i5ZE=
Subject key identifier: AB:60:2C:E6:DE:84:AB:B7:3E:B0:1A:8A:2E:F5:70:88:F6:29:59:67
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 019A2289DD77AB5EA46E70BBC8B8C02B9415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:00:51 +0000
Manifest this update: Sun 26 Oct 2025 22:00:51 +0000
Manifest next update: Mon 27 Oct 2025 22:00:51 +0000
Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: xS6eGCWCuhVqFyrW6m75CHmjvzJH8xfsNhmuZ+vbDHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:dd:77:ab:5e:a4:6e:70:bb:c8:b8:c0:2b:94:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Oct 26 22:00:51 2025 GMT
Not After : Oct 27 22:00:51 2025 GMT
Subject: CN=ab602ce6de84abb73eb01a8a2ef57088f6295967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:d0:2b:97:32:77:b2:25:a1:31:cd:7f:cf:
3e:fc:4e:7d:c8:00:38:36:3b:fa:b4:86:94:5b:98:
1c:9c:76:84:1d:2a:7e:bb:98:2e:79:de:3c:b9:70:
73:fb:30:50:bf:7e:20:24:5b:26:85:4a:92:cf:30:
d8:fe:14:7f:39:65:62:06:6f:04:81:67:13:32:69:
71:1b:25:22:5a:ab:41:9c:14:f4:60:12:ad:53:d4:
3b:50:7d:ff:d8:a4:ee:af:36:e5:c2:eb:77:53:05:
91:65:44:ce:b1:a5:dd:56:55:29:01:1d:0c:b2:19:
6c:fb:dc:4f:01:ef:74:70:c4:ad:4c:e9:20:9b:ae:
fd:5c:4f:01:75:1d:96:a2:21:41:52:2d:aa:03:7c:
61:16:3d:2c:5f:07:50:7b:16:28:9c:c0:12:b5:97:
54:43:c1:2f:d9:d9:29:47:1c:d9:4e:ba:29:3c:9b:
cd:93:17:21:4d:d5:35:43:a7:d2:32:ed:2d:39:d0:
e3:d7:a9:3c:6a:ef:b1:cf:8b:ef:39:d4:b8:ae:07:
24:b6:30:c4:fa:df:12:1d:55:40:ed:d6:2f:49:32:
ac:c7:8a:7a:e6:9c:27:c6:02:7d:ee:08:f3:46:8c:
bc:1e:f2:92:de:85:26:6f:9f:c6:57:bd:e4:35:54:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:2C:E6:DE:84:AB:B7:3E:B0:1A:8A:2E:F5:70:88:F6:29:59:67
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:bc:c8:1b:ce:f6:0f:54:ea:49:47:d3:4e:3c:19:22:dc:23:
36:bc:d5:a5:4f:5a:c6:c4:bc:42:d5:0a:39:03:c8:53:f0:76:
72:8b:a8:90:ee:7c:cd:16:25:85:5e:88:42:3d:b5:a0:ae:65:
2c:fe:05:f5:94:f9:a7:5d:37:67:dc:2d:42:e0:43:fd:97:69:
ee:b5:b1:b0:3e:e8:a7:b4:96:e3:16:78:aa:81:c2:e6:66:50:
3a:fd:10:87:ff:7e:8a:df:d3:a8:a8:91:14:d8:8a:56:21:c9:
da:81:7a:a0:df:ad:be:46:56:45:f7:b5:7b:49:83:56:cf:f5:
a8:8b:e2:94:43:38:6f:5e:cb:f8:d0:e0:ae:6f:92:0f:69:15:
a7:d9:43:c1:d6:d9:2e:0d:8d:63:17:1b:22:71:c5:ba:40:cf:
6f:21:27:c5:63:03:16:09:15:0f:d1:23:21:95:f0:93:14:ac:
c2:ea:d6:d5:ec:e9:21:70:2b:6d:bf:e1:40:38:ce:15:14:f3:
4a:e4:53:fb:13:69:f6:2a:15:d7:3b:95:02:8d:50:e2:57:43:
ba:e7:d2:56:7e:68:4b:75:1d:43:a7:30:18:4f:ea:a6:4d:78:
73:20:b2:28:88:44:fd:5f:eb:57:37:80:e4:75:7d:de:52:56:
8e:bb:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:24 2025 by rpki-client