Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier: wCXBzZC2NxeY88WUd7QSNDgrVHwM3elrfhw0P7zraII=
Subject key identifier: 25:D5:26:CE:68:2C:ED:12:58:D4:CD:78:27:A8:50:E8:A7:A5:C0:B0
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial: 019A0F397A5A20D8477064ED0C4639872AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number: 12B3
Signing time: Thu 23 Oct 2025 04:00:16 +0000
Manifest this update: Thu 23 Oct 2025 04:00:16 +0000
Manifest next update: Fri 24 Oct 2025 04:00:16 +0000
Files and hashes: 1: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (hash: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=)
2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: QIPYcXbY+cI/o9TY15tTDG0IljCYG+NNRw4hkpMQrc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:39:7a:5a:20:d8:47:70:64:ed:0c:46:39:87:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Validity
Not Before: Oct 23 04:00:16 2025 GMT
Not After : Oct 24 04:00:16 2025 GMT
Subject: CN=25d526ce682ced1258d4cd7827a850e8a7a5c0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3d:33:72:49:98:48:92:06:ad:47:af:77:dc:
f1:5c:f8:df:41:eb:81:42:09:b9:51:d7:2c:67:07:
96:4b:38:34:dc:31:9b:1b:a7:32:ce:4c:a0:df:13:
9e:16:6d:eb:36:ef:03:bf:9e:03:31:d4:c6:e3:68:
18:07:79:6c:3f:75:4d:18:d1:d2:bb:79:09:24:95:
7b:47:48:62:4a:3f:25:ae:d4:1c:d9:f0:30:0c:c5:
fc:61:04:99:15:fe:52:27:05:2c:c1:c9:9b:11:3f:
76:20:ac:37:0d:4d:3d:f4:d3:39:87:fa:22:6f:c0:
cd:c3:3a:e3:a2:b6:7f:ad:54:33:7d:5f:f1:8f:10:
22:80:15:57:21:f3:02:cb:7b:84:d6:37:f8:d4:03:
fb:db:25:79:2f:22:45:41:79:fe:01:32:ba:0b:94:
b4:52:c3:73:ca:4e:2a:98:f7:2d:3e:22:13:60:bb:
92:af:71:95:2e:6f:f4:bc:4e:80:6b:ef:d7:31:e6:
a9:33:0d:c8:be:e6:21:f6:56:6b:bf:74:69:a9:8e:
5a:06:95:78:8f:8c:d8:7e:21:73:4f:12:2e:29:61:
48:4e:c8:4b:24:46:cc:26:2e:ce:c1:3a:0a:22:5a:
22:30:4e:4f:e2:cd:79:9b:e4:6f:35:5b:78:35:14:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D5:26:CE:68:2C:ED:12:58:D4:CD:78:27:A8:50:E8:A7:A5:C0:B0
X509v3 Authority Key Identifier:
keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:08:67:f0:76:db:95:9c:0a:3d:e9:4c:b6:75:d0:de:01:b8:
92:af:70:23:8e:b8:8c:8e:a0:ad:e2:20:0f:76:a7:31:87:88:
18:64:db:f5:a9:b0:98:50:26:f6:20:11:da:16:fd:61:41:7f:
f5:df:c0:11:7a:96:cf:4d:55:e3:41:31:52:b2:1c:68:01:7a:
01:b3:8e:53:41:17:96:39:3d:19:f8:b8:13:81:ca:3d:e3:8b:
61:cc:22:9a:3c:a1:66:b7:5c:ca:37:5c:21:e6:e0:ef:9b:9b:
75:ef:8a:43:8c:f9:a9:7f:9a:c5:f7:47:bc:14:67:f4:1b:8c:
85:11:f5:0b:88:ca:86:88:4d:d0:e1:b7:74:f5:79:09:86:62:
48:99:ea:04:54:e3:85:38:f4:8a:25:33:f6:bb:9a:b5:2f:e5:
a8:24:39:90:98:fa:25:c7:59:00:f9:9b:39:6e:e5:2d:71:3c:
1f:26:f1:ad:22:96:0e:1b:1c:46:d6:fd:39:38:2c:51:58:89:
24:1a:10:9e:df:04:f0:3a:d6:34:32:9a:33:2a:38:d5:c0:5b:
04:b4:30:0a:cf:d2:31:ef:a7:5a:07:8a:43:92:53:7a:d9:ac:
ae:e0:93:57:ba:a5:e6:c6:8b:68:be:ec:92:84:10:5e:76:94:
c6:ce:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:35:30 2025 by rpki-client