Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: bxqPX3zKVXzExvKrilJQG+4XG5nxs+dwhFfnS2SnX+M=
Subject key identifier: 19:EA:4B:94:30:FB:99:2D:30:2E:A4:3F:F7:C0:98:29:DD:73:95:D3
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 019A1F5162C957FFE376E9D9111BBAD2538B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 07:00:18 +0000
Manifest this update: Sun 26 Oct 2025 07:00:18 +0000
Manifest next update: Mon 27 Oct 2025 07:00:18 +0000
Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: 72kj+/7INkCIi6dp5rIDtCReJUPUXi6x25IIb44Cito=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:62:c9:57:ff:e3:76:e9:d9:11:1b:ba:d2:53:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Oct 26 07:00:18 2025 GMT
Not After : Oct 27 07:00:18 2025 GMT
Subject: CN=19ea4b9430fb992d302ea43ff7c09829dd7395d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:88:bd:fb:2f:d6:21:92:d8:19:05:a4:ba:
e2:5b:8a:1c:05:bc:88:77:38:41:0a:f1:3a:03:17:
2d:ac:47:ee:ed:14:37:c8:1c:a9:c2:a5:6b:04:ef:
21:a2:f9:70:af:09:11:9d:55:66:6f:39:5c:b9:ce:
bf:1c:4c:9e:ae:e6:c5:af:f2:72:27:a4:da:bd:c4:
04:6a:b3:89:42:b7:c2:bf:d2:5d:6e:08:2a:8d:fe:
f4:4b:25:82:e8:4a:c1:51:98:d6:cb:49:da:1d:be:
02:a1:67:58:91:f5:00:f5:6e:96:22:f6:3a:1d:a3:
0f:2b:54:65:86:e3:c2:30:61:77:2d:90:05:c9:d6:
8a:f9:9f:85:b7:72:b0:f7:c3:1b:f5:85:d6:43:5b:
85:5c:d6:af:91:e7:b8:d6:57:1e:7b:7d:87:e5:34:
af:dd:d0:7d:78:49:33:e0:25:4b:af:38:52:dd:97:
32:b8:9e:d3:87:da:a7:b1:99:62:c6:5e:63:65:d2:
a5:42:fa:e5:ae:39:e6:8e:14:8a:b5:2b:7b:0a:9e:
cb:9e:e2:d1:04:3f:44:28:83:14:f4:a2:d9:36:25:
f2:0a:b1:d9:f4:08:ff:42:ec:25:53:fc:35:f9:10:
92:fc:e8:d6:ae:a5:29:c4:0f:66:88:33:2e:07:14:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EA:4B:94:30:FB:99:2D:30:2E:A4:3F:F7:C0:98:29:DD:73:95:D3
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9e:25:b1:2a:d4:c2:36:91:79:08:6a:fe:88:44:36:5a:56:
d7:1d:5e:61:4d:ba:82:00:03:d0:fd:50:8b:b9:84:1a:87:cb:
4a:a0:4b:48:fa:bd:3a:04:73:05:6d:98:cc:ee:8a:c7:52:f6:
69:4a:a4:c1:f8:00:73:4d:ac:ab:02:66:35:c6:f7:19:5d:cc:
76:34:9a:9f:75:15:01:4c:04:ed:c3:30:a7:a4:45:66:e3:d2:
4e:ee:2e:bd:63:b2:db:2d:05:5f:21:42:2e:a9:a1:18:4b:98:
95:e2:b6:39:20:cf:e0:5f:06:da:8b:74:38:14:e6:d1:22:2f:
64:f0:c9:d2:b5:b5:bd:4f:9c:ca:bc:21:9c:f2:22:1f:82:93:
33:c3:53:ac:4c:75:8e:ed:15:ca:0b:98:bb:34:2e:f1:19:df:
54:59:43:46:db:ba:49:d7:b0:f4:ab:bb:b8:6f:b0:26:1e:20:
53:d4:95:97:bd:b8:46:1e:e3:48:b0:bd:6b:41:67:ee:2d:c3:
60:fc:40:75:51:4e:28:6f:ad:87:80:7b:fd:d8:19:a3:d7:50:
a1:53:cf:44:f6:fc:77:1e:7b:92:34:8e:85:79:8b:43:15:d5:
ce:ab:71:11:22:ad:f5:4b:31:5e:f2:b6:bc:13:2b:7e:1d:86:
83:fc:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:29:10 2025 by rpki-client