Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier: V9OVjbqRZg/q1agubRREBakjV8LzN+W5MSR7fl545WA=
Subject key identifier: 30:B6:9B:83:82:3F:06:0E:26:BF:23:2B:73:D2:7A:13:21:36:BF:AC
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial: 019A02C76EF614B5DEEEFC38EAB1AB649EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 18:00:15 +0000
Manifest this update: Mon 20 Oct 2025 18:00:15 +0000
Manifest next update: Tue 21 Oct 2025 18:00:15 +0000
Files and hashes: 1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: n9kSv9LFhyPcoxODc07tK5mNLEmGxgrImHPimw2dKqU=)
2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:6e:f6:14:b5:de:ee:fc:38:ea:b1:ab:64:9e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
Validity
Not Before: Oct 20 18:00:15 2025 GMT
Not After : Oct 21 18:00:15 2025 GMT
Subject: CN=30b69b83823f060e26bf232b73d27a132136bfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:b7:2a:62:c7:8b:af:80:01:0b:02:69:a6:
6e:8b:4c:52:4e:ed:88:24:cd:41:6c:df:52:93:9b:
ff:08:40:ef:98:a2:33:e3:dc:27:98:59:0b:97:50:
f5:e7:ba:e4:ba:0e:8a:03:88:dd:91:fb:c8:da:d8:
1f:d7:de:ff:93:95:38:e8:b8:ca:9f:d8:a7:30:ba:
e3:c6:35:31:a9:e8:ae:93:25:33:ef:d3:43:5c:16:
4d:b8:74:9a:17:05:d6:0a:a6:67:24:da:46:70:1b:
f0:98:78:d5:5b:54:36:17:aa:08:5c:f0:9b:17:53:
0c:79:82:00:c8:ba:68:64:a3:c9:91:e1:f3:89:05:
1d:9d:f9:a9:73:70:01:48:fc:50:98:81:2a:c4:6a:
4c:35:db:a4:b8:85:cc:c5:3f:85:6a:4c:3f:77:cc:
32:37:34:cd:92:5d:c5:05:f9:3f:06:56:54:c9:8a:
1b:d7:f1:2a:5c:65:83:bd:8a:21:6a:8d:e2:39:f3:
d1:06:71:29:27:f2:ac:9b:ae:73:61:98:d2:e9:fa:
f5:94:8c:88:65:4c:9b:d6:ad:a6:2d:ac:2a:bb:90:
15:79:66:78:a4:a4:33:bd:d3:cf:17:9e:7c:af:07:
06:67:12:e6:ce:22:76:97:62:18:2b:f7:89:5c:da:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B6:9B:83:82:3F:06:0E:26:BF:23:2B:73:D2:7A:13:21:36:BF:AC
X509v3 Authority Key Identifier:
keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5a:9d:ae:a0:66:0b:b0:9f:fe:c8:a7:29:26:86:dc:23:fe:
98:5a:56:58:26:5a:97:2c:42:e0:da:de:ad:ed:5d:08:4d:65:
33:32:df:c2:94:b2:19:39:6d:42:92:4c:f5:9b:da:8d:b4:91:
63:e0:c1:b9:61:f8:f8:5f:fd:1b:a6:88:98:a1:40:5e:af:a0:
f4:36:0e:57:3d:5e:0c:03:f9:eb:79:51:23:89:9f:75:34:d7:
29:5e:c2:15:9b:0f:5c:e4:14:3c:af:5f:a8:20:0b:d9:86:4c:
6a:a8:dc:b9:12:99:e7:4c:54:e0:23:cc:b4:b1:1b:d2:74:f1:
4a:5f:a3:0b:d7:a7:e5:33:38:1f:02:97:f0:79:31:b0:6c:bb:
f9:15:bc:1b:12:d3:c0:46:7e:cb:81:41:b2:be:03:0f:eb:86:
5c:cd:91:81:62:50:2a:ba:50:5d:36:69:1d:86:f1:2f:cb:b1:
23:bf:7f:64:e6:35:a5:f9:56:d8:2d:12:55:96:27:fc:8d:e0:
67:ef:af:7d:f7:33:00:10:61:54:c0:65:ff:53:8a:54:10:79:
5a:32:ce:85:a1:be:8d:81:25:8a:ae:f0:eb:f3:bf:54:4a:0c:
0a:f6:0a:8c:e0:af:18:f0:4e:ed:b5:0d:a8:8a:22:b1:d7:b7:
f0:f6:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:09 2025 by rpki-client