Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: NVbE2nrkGehtXugnZZW2PW32EuFYkXd4x05vF0pp2Yo=
Subject key identifier: 89:04:EE:8D:A0:06:20:85:77:55:28:65:1E:C8:97:35:0C:3F:D6:F6
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 0199FD3440C765574139A3CFA07792DEB01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=)
2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: gAP791FwrA0ldGV/Tl0sG9/b8dWxv67jfYWLXRI+A3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:40:c7:65:57:41:39:a3:cf:a0:77:92:de:b0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=8904ee8da0062085775528651ec897350c3fd6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:5c:4b:72:a0:55:d5:0a:43:22:06:09:bc:
51:43:4b:e8:8b:9b:a3:f0:f5:7e:e5:3f:af:4f:7e:
73:c7:f1:f1:78:17:22:2d:e5:d6:4a:53:4f:1d:1c:
df:d7:76:bf:ed:8a:37:6c:6e:de:40:b7:0c:2a:c3:
39:eb:20:f5:dd:5c:5e:77:d5:eb:f5:5c:4a:be:f8:
89:58:4d:f8:ed:c3:18:b0:ae:4a:75:7f:71:35:44:
ec:8c:30:b3:4f:cb:53:26:aa:16:91:2e:70:9f:59:
c9:03:29:2c:94:47:ba:42:a6:ba:5f:bd:01:2d:23:
5f:22:e7:87:63:47:66:76:be:73:b4:70:b7:ba:4b:
14:e0:fa:33:c5:73:43:f8:95:09:29:99:5f:86:75:
97:9d:4e:de:8b:14:64:e3:f5:2c:42:d7:d4:a7:ff:
1b:fc:80:fc:9e:2f:15:a4:96:89:e2:03:92:cf:36:
78:52:bc:66:91:ca:a0:30:15:8c:f4:85:ac:25:c2:
b5:e1:9d:da:aa:30:07:33:4a:93:b0:39:51:a1:0a:
8b:bd:90:c0:f7:26:bf:6a:84:79:0e:8b:0e:85:b2:
9e:c5:92:18:da:37:6c:d1:ed:8f:75:65:54:e0:81:
97:9c:c2:23:50:9f:e2:d4:40:b9:c9:b8:f8:ce:29:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:04:EE:8D:A0:06:20:85:77:55:28:65:1E:C8:97:35:0C:3F:D6:F6
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6a:5b:47:1c:8c:4c:15:d8:2b:7e:c2:94:41:70:bc:44:c5:
b8:c0:f6:04:fd:a6:84:8d:fb:d1:be:94:49:af:8f:7b:e8:93:
fd:c7:41:49:2a:f3:f3:4f:8e:75:0e:74:4c:61:5d:a0:fb:00:
26:3a:16:56:1c:67:14:61:75:66:f6:28:bd:9f:97:b1:ca:45:
e7:8c:71:c3:65:2b:4a:c1:5f:d9:3f:20:ff:31:29:1a:01:b7:
37:60:fd:cd:56:de:84:40:f4:d2:b3:40:d7:ed:f4:4e:87:d3:
e4:f9:51:d1:1f:47:a6:ce:10:ad:10:73:9a:21:60:a2:07:77:
5a:d6:05:04:38:c2:4b:96:30:8c:7a:b2:0a:14:db:b5:f5:0c:
2d:d5:34:90:34:3d:e8:25:96:60:db:49:d8:e1:18:67:cf:0c:
ba:35:80:72:76:f5:6c:2f:ff:8e:c4:d8:77:bd:e3:d6:b5:2b:
e5:fd:54:c3:dc:39:73:e4:6d:ac:4a:a0:5e:fe:83:c1:11:58:
cd:0b:5c:0b:ca:52:a5:73:2d:96:79:fa:35:31:d7:84:24:3d:
26:b5:d7:18:bd:30:d1:4f:2f:d2:a1:23:b4:ed:df:9b:e6:7d:
4e:79:2c:19:d8:3e:f8:93:46:b6:e9:82:cb:4e:f9:3a:2d:2a:
70:49:5a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:43 2025 by rpki-client