Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: XjlaO1lyLgCylkFyh1YfGNxKZeQHw7NZGI/4etKcIEg=
Subject key identifier: 16:42:AD:60:CD:5D:29:97:36:9D:72:42:1F:44:5D:E9:71:7A:A6:FE
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019A0411357B628B1999F09C99A667774FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0337
Signing time: Tue 21 Oct 2025 00:00:27 +0000
Manifest this update: Tue 21 Oct 2025 00:00:27 +0000
Manifest next update: Wed 22 Oct 2025 00:00:27 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: 0RpSE3jlcxQNP4NjUSm4r3MenQ9Lvh2KRpivFf/1mXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:35:7b:62:8b:19:99:f0:9c:99:a6:67:77:4f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Oct 21 00:00:27 2025 GMT
Not After : Oct 22 00:00:27 2025 GMT
Subject: CN=1642ad60cd5d2997369d72421f445de9717aa6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:83:6c:25:e2:00:c6:88:c7:95:10:18:7b:
06:e6:ea:47:6d:ff:b6:99:5c:e9:53:00:67:9a:bf:
90:c8:85:c2:4e:94:ab:12:34:81:86:de:e6:d9:0e:
b9:12:2b:23:fe:ef:54:52:25:f2:1f:a6:14:45:91:
93:d9:75:4c:ff:d6:f3:20:12:ce:7b:9e:80:99:d8:
9a:61:80:1c:75:a8:50:1d:67:70:68:be:ae:cd:16:
1e:b6:32:8b:2c:c0:4b:d1:19:e9:74:ca:76:66:56:
70:35:30:a9:6e:de:fe:a0:09:6e:38:ac:f4:76:07:
d7:f5:66:aa:71:8e:b9:06:18:1b:31:16:02:ec:d0:
d2:02:ee:90:12:78:3b:c8:dd:c3:0d:d8:61:0b:57:
a3:af:5e:d2:1d:ce:62:f1:42:c0:0f:71:65:9f:97:
07:16:b6:e6:82:f8:ef:01:c8:93:87:b7:94:c6:82:
ad:28:f7:8f:55:13:f9:9d:7b:27:00:a6:ed:4b:0f:
c9:b1:01:93:68:be:de:c7:60:07:48:f2:47:67:79:
f9:b6:d1:d0:6f:64:e9:2d:02:ac:31:77:b2:d5:ac:
c0:40:bf:96:a8:ae:68:96:53:d4:74:30:f3:53:05:
a0:d2:b3:03:57:55:d2:08:5b:5f:10:68:c8:42:bc:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:AD:60:CD:5D:29:97:36:9D:72:42:1F:44:5D:E9:71:7A:A6:FE
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:4c:55:56:34:a4:23:79:61:ac:ae:31:d9:bb:73:58:2a:89:
02:85:59:e1:54:de:8f:6e:8f:c7:ca:09:b7:9a:1a:6e:3f:21:
44:7e:84:d1:88:60:78:a7:99:be:05:48:18:f4:2b:1b:29:cc:
d4:e9:6e:3f:a1:e9:d1:38:1d:df:2e:a7:80:35:f0:2e:99:29:
cd:5c:27:b7:74:db:25:56:22:9a:9f:7f:9b:df:6f:0b:f4:b2:
ec:57:c2:d3:b5:e3:a0:3a:bc:d3:a9:c3:33:36:54:18:ab:3f:
e6:bb:89:15:a3:7f:42:c8:85:f7:75:30:bb:d7:68:2b:f9:79:
39:b1:8f:4b:f7:03:c1:a9:28:64:0f:6d:31:76:c9:91:00:6a:
5a:d8:56:7c:2a:e8:54:c3:89:da:7b:e5:5a:72:b4:e9:46:a8:
0f:22:ed:64:b1:d8:cb:2a:7e:86:bc:f0:fe:68:db:ba:27:63:
15:14:e8:ff:d4:67:58:be:8f:1d:f0:13:d8:3a:69:a2:ce:12:
4e:b7:75:d8:20:35:c6:9f:a1:51:38:05:8f:fb:1d:3f:1f:bd:
b0:96:92:22:3a:00:ef:b3:7e:43:eb:b9:e9:01:36:38:bf:78:
8e:e1:41:39:a2:63:bf:fc:56:76:1c:d1:dc:5e:bd:fd:cc:90:
b0:58:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:54:19 2025 by rpki-client