Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: lW26nRKARlOJ8oPi6xoVWMoIiZqWYfHxfUleZxd48Jk=
Subject key identifier: A9:F9:57:54:0A:3F:4F:1D:D4:44:F4:2E:69:7D:54:1B:67:57:7E:DB
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 019A221B7BDB143B82FAB73C9E171C0DFFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 0631
Signing time: Sun 26 Oct 2025 20:00:17 +0000
Manifest this update: Sun 26 Oct 2025 20:00:17 +0000
Manifest next update: Mon 27 Oct 2025 20:00:17 +0000
Files and hashes: 1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: ay2kFRrf3cbTxb7DN5Hj7Jgurk+f+Ydp7M9USz10VOw=)
2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:7b:db:14:3b:82:fa:b7:3c:9e:17:1c:0d:ff:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Oct 26 20:00:17 2025 GMT
Not After : Oct 27 20:00:17 2025 GMT
Subject: CN=a9f957540a3f4f1dd444f42e697d541b67577edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:e7:91:b1:40:8b:87:bb:11:45:d5:af:23:
53:0b:0f:23:f4:54:6c:84:fb:a2:ba:1b:5b:a7:be:
89:39:c1:c6:d5:8e:00:ca:24:c5:62:bc:9d:49:eb:
d3:80:27:b7:41:2e:1d:ca:ae:3b:3b:c0:b4:2b:65:
af:70:78:83:d3:f4:4a:45:12:c1:f2:05:12:e3:5f:
fa:c5:a4:11:8b:8b:be:7c:a5:14:ad:ce:ff:ce:40:
8c:07:2b:dc:7b:4b:11:e4:59:47:e1:8a:72:54:e9:
a3:d2:7f:25:8c:13:1f:93:81:3c:6c:ee:ec:83:48:
6c:2a:2e:38:31:8c:c2:7e:9a:40:38:b6:1e:48:7f:
cd:b0:d5:25:d6:2e:8f:da:07:8e:af:be:94:d9:c1:
98:88:b7:41:64:4b:46:d4:f0:64:9b:b4:ea:21:6a:
fd:aa:5c:68:2b:74:6a:f2:7c:71:17:76:d6:5c:fc:
d9:0d:e9:9a:83:1a:15:d5:74:8f:67:35:ec:4a:0b:
df:95:38:b0:29:b3:fe:d7:63:1a:a8:56:a9:89:d9:
e7:c2:71:52:c5:db:03:e9:e3:38:d8:78:6a:f1:6e:
81:4a:5b:57:3b:86:cb:1c:3f:3b:45:90:e0:e8:fc:
8d:30:e7:ae:ce:68:bd:7b:81:80:ff:3d:1a:ff:c4:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:57:54:0A:3F:4F:1D:D4:44:F4:2E:69:7D:54:1B:67:57:7E:DB
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7e:a0:68:c8:d0:24:0f:c3:9b:60:d2:fc:83:59:86:38:b2:
a6:36:f6:a8:77:ce:eb:fd:2e:9e:3b:cb:cc:3f:09:1f:dc:8a:
7a:c7:fd:80:91:4d:a0:b5:bc:37:15:69:0a:72:20:c7:ba:e1:
1b:80:6c:58:21:b6:51:ab:f2:74:f6:0f:cd:da:9a:59:4c:f5:
e7:7a:f1:c5:dc:71:b3:c3:ae:2a:1f:cf:dc:9f:57:8e:fc:9d:
30:ae:86:50:95:28:64:7e:b6:93:35:48:0b:93:e6:8f:21:a0:
a0:10:c0:19:1c:9e:fc:9a:03:cb:aa:67:6f:6c:94:2f:bd:85:
ff:f7:53:7d:37:9d:48:69:cd:88:6e:50:8e:95:0d:01:de:4d:
a8:9e:28:01:3d:c3:3f:71:49:7b:6a:52:5a:59:f1:d3:9b:a9:
a0:e2:a9:08:0a:78:e7:93:34:2c:c9:ae:07:0f:82:30:4c:93:
35:48:1a:2a:ea:d4:12:a5:f5:ee:87:32:6f:db:37:65:8e:30:
e7:ea:9b:f4:b3:f6:88:c3:c9:62:32:f6:d5:1b:ec:7a:8b:19:
08:0c:e5:6e:a3:dd:e7:9f:72:dc:48:94:5b:f1:58:fb:e0:84:
f8:7f:cb:ae:3f:98:10:a7:83:e5:2f:11:21:1e:f9:7b:0d:78:
52:cd:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:38:34 2025 by rpki-client