Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File: ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier: PoQTmYfMP7gHrFAdgpQ4olHj+T1LOFUv3MMvuLKm8SI=
Subject key identifier: B8:A0:75:1A:71:78:FA:CA:41:79:8D:13:EF:E8:2D:91:61:93:6E:68
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019A288B5CB09EB582DDB865B78CB6A8489D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 02:00:13 +0000
Manifest this update: Tue 28 Oct 2025 02:00:13 +0000
Manifest next update: Wed 29 Oct 2025 02:00:13 +0000
Files and hashes: 1: 2iga0nlk79hsiXYssBRVEJUMzCk.roa (hash: zNjDqRkr/NBAAcHU26E2dhZjP52AAgoYr8bc94c0dmE=)
2: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: dwe3u9qx02Oz+3c18maCsytrTR/kpKZJRtfmSpME6o0=)
3: fkt0k7xGZr7xPzs_ROD74bwXerU.roa (hash: ULOdEt3VdfcvW7gsCxZ+iNOypPoRvVALloBYfPcdh1o=)
4: v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa (hash: tWh0zo1fGBbY4LR0IeI+HXzSMUKkzsrBwh77hMlS6LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:5c:b0:9e:b5:82:dd:b8:65:b7:8c:b6:a8:48:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Oct 28 02:00:13 2025 GMT
Not After : Oct 29 02:00:13 2025 GMT
Subject: CN=b8a0751a7178faca41798d13efe82d9161936e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:db:61:e2:35:3c:ff:f0:69:ec:92:e7:3c:
a3:9d:24:92:62:88:bf:e3:e5:c3:b7:0d:69:18:78:
c4:41:22:ab:7a:2c:c1:92:62:a4:c8:cb:30:b6:22:
7f:af:1e:85:3c:57:5c:ea:a7:f8:17:16:3c:8d:e4:
ed:c4:a9:b0:f8:b0:18:83:ce:7c:51:a9:d3:3b:87:
1a:75:22:5e:41:37:57:9a:71:3c:8e:94:1d:0e:c2:
82:b7:a6:80:84:cb:e4:8c:53:d9:d2:e6:8e:b0:72:
fc:56:76:04:8f:a3:58:06:67:cd:3a:92:a1:7e:91:
71:ed:50:c4:11:13:03:6f:48:ef:d1:89:ee:0a:ad:
26:bc:b4:a2:48:96:a3:5c:06:6c:96:55:27:8d:29:
33:1f:28:4e:8e:4e:46:39:7e:ff:ea:16:ff:5a:85:
d3:dc:0b:48:07:ec:a5:6d:69:be:e0:27:28:e1:c8:
a5:37:4f:45:e0:37:be:71:8a:a3:2d:e6:67:c5:cb:
94:4f:2e:c6:6e:49:36:45:4d:1d:39:8a:a3:d3:53:
bf:34:3c:b1:49:35:ec:46:cc:cd:cc:47:46:5c:cc:
c4:35:34:b7:9e:90:6b:48:ce:27:8e:2b:09:07:ce:
91:0c:9e:07:e1:f7:9e:26:2d:10:20:c6:b2:59:b9:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:75:1A:71:78:FA:CA:41:79:8D:13:EF:E8:2D:91:61:93:6E:68
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7b:2c:3b:fc:bd:11:97:8c:56:fe:13:51:6f:99:df:b4:37:
01:75:2f:7a:ce:b9:31:34:35:3a:d1:e8:a6:1b:63:0b:9d:25:
fc:e4:51:36:7d:6e:d0:d6:77:33:92:45:77:a2:fc:c7:d9:78:
76:23:57:1c:ab:0f:4d:dd:de:be:e6:86:39:bc:43:f2:82:e3:
91:d5:7c:e3:28:79:5d:d8:b8:7d:28:e1:93:e1:3f:b7:17:38:
11:ce:c2:2f:57:3a:25:57:7a:ed:db:20:30:49:b7:35:e0:a2:
0b:a2:6f:4c:17:4d:8a:b0:cd:70:bf:a8:51:0f:9c:a1:f8:38:
6a:14:45:1a:52:7e:76:44:1d:a7:81:26:1f:83:77:f4:0d:6b:
63:69:41:a9:6c:62:b0:54:85:e1:95:4c:e1:04:c7:91:cf:33:
9b:5a:5f:0b:b5:8b:77:f5:64:21:5f:0c:d2:af:26:2c:e8:01:
9d:d5:7e:6d:9b:78:57:bd:67:1a:8a:38:78:40:e5:77:d8:db:
ab:9c:68:c0:20:d5:90:8c:15:1f:a5:5c:cc:6d:79:2e:8c:d0:
dd:d1:dd:4b:09:16:2f:2d:4a:8e:69:72:7a:72:e8:cd:cb:66:
d8:36:87:e0:11:a1:60:6e:2d:c7:57:17:2d:38:a3:aa:4b:a2:
20:12:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:45:35 2025 by rpki-client