Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: jhY9/pjIaqbW78VaqWQgf0CvrdWyqMOHGsy3soGtrYk=
Subject key identifier: DD:3D:DE:58:E7:D6:22:3D:B3:2C:67:F6:78:C9:60:48:6C:B8:96:E4
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 019A300ED1F1412BA9CAADED1A41384235E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 13:01:08 +0000
Manifest this update: Wed 29 Oct 2025 13:01:08 +0000
Manifest next update: Thu 30 Oct 2025 13:01:08 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: tItx7YDZXHTAklJCeIbPDDLhg4N0gESM0seBPZDAZq8=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0e:d1:f1:41:2b:a9:ca:ad:ed:1a:41:38:42:35:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Oct 29 13:01:08 2025 GMT
Not After : Oct 30 13:01:08 2025 GMT
Subject: CN=dd3dde58e7d6223db32c67f678c960486cb896e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:0c:bc:41:b9:86:83:2c:34:01:91:96:74:
e7:3b:87:7a:45:4f:f8:8c:e3:34:eb:ac:4c:31:5d:
26:12:08:1b:2a:b1:5d:71:b8:92:66:d8:19:bd:ad:
33:a2:0b:5e:fe:2b:30:51:7d:db:37:07:3d:c8:31:
85:03:1d:7b:98:74:ac:51:2e:c0:7c:e1:21:d3:2e:
35:ed:24:32:f2:6d:3e:d4:0e:28:e2:40:e3:26:b1:
98:1f:8e:b6:07:d7:42:6b:80:f4:37:15:eb:db:10:
42:3b:bf:43:97:3f:90:3b:d0:21:e7:5e:31:3d:cb:
b3:90:74:46:56:7b:c5:c6:30:d0:67:bd:00:c2:20:
f3:91:25:4d:fe:f0:99:39:75:d3:ef:0a:73:5a:56:
8b:50:09:79:b9:61:ae:7c:86:4f:27:4c:dc:0b:d1:
de:4f:c7:44:38:ab:47:fc:3f:f0:7f:23:b6:b1:c1:
2a:45:a9:8f:17:62:5c:40:c3:ad:c6:1d:64:7d:08:
c9:d4:14:52:01:50:d8:b4:da:73:e2:04:ac:f7:f8:
75:d8:23:6b:e2:a3:27:00:5c:4d:0d:5b:70:72:0f:
d0:c3:15:32:ba:21:37:47:05:e4:72:23:aa:0f:d9:
c3:99:a1:9f:79:d2:b4:35:57:04:07:ec:e9:2c:01:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:DE:58:E7:D6:22:3D:B3:2C:67:F6:78:C9:60:48:6C:B8:96:E4
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:61:5e:10:f5:06:e2:82:14:c8:86:2f:fe:25:8e:37:06:df:
69:7f:90:87:04:bd:12:f9:69:35:ea:63:d2:63:d4:43:c0:e5:
c5:a3:62:d8:3b:95:37:00:47:09:ad:62:70:b3:d2:eb:90:1f:
6a:21:6d:69:5a:03:40:34:a6:dd:87:db:1d:2c:5f:aa:5d:9c:
77:be:96:12:18:fc:34:36:a4:fa:53:af:77:4e:39:dc:40:a2:
9b:12:bb:72:1e:9d:ac:6e:a3:41:84:10:f1:5b:72:4b:b9:56:
5d:ba:c3:a5:b5:53:ad:c0:98:a8:54:c6:ce:ce:5d:43:6d:15:
db:3c:cf:0d:86:07:6c:dc:20:16:73:38:4c:01:38:89:e4:5c:
96:f1:f3:45:10:08:f8:95:fd:13:75:40:f5:db:19:83:ad:61:
48:dd:b4:b7:9d:33:59:04:1f:9d:2f:1c:53:70:43:5f:30:92:
6e:78:a3:fe:d1:2c:d5:f9:bd:ac:db:a1:2c:23:81:41:f7:9a:
e7:4e:fc:d7:47:b5:eb:86:80:45:9b:74:39:26:55:24:de:23:
18:cb:f4:26:58:df:5c:59:20:2a:0c:c7:f8:ad:4a:a6:73:fc:
b4:67:26:7e:c4:63:63:d4:0e:18:9f:59:e6:ad:cf:0c:22:3a:
70:9e:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 14:50:45 2025 by rpki-client