
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: DdE+gbIZOo1tLad5YDq/rCCUkH+ZVVbLHJtEdamA9fE=
Subject key identifier: C6:6E:3F:48:EB:37:D2:61:59:62:9B:FD:E0:D5:E1:57:14:FE:93:AC
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 0199FB0EC4DB64FFB8C0D051D363F9573C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 03FA
Signing time: Sun 19 Oct 2025 06:01:13 +0000
Manifest this update: Sun 19 Oct 2025 06:01:13 +0000
Manifest next update: Mon 20 Oct 2025 06:01:13 +0000
Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: rlqpFa9GN0raq/qMrCZg4e5qGodZTJ/mBJaKK7yz8Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c4:db:64:ff:b8:c0:d0:51:d3:63:f9:57:3c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Oct 19 06:01:13 2025 GMT
Not After : Oct 20 06:01:13 2025 GMT
Subject: CN=c66e3f48eb37d26159629bfde0d5e15714fe93ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:cb:19:02:26:71:be:73:3a:6f:a2:48:78:
10:5c:3c:e6:38:8c:b7:b2:43:d1:28:9e:0f:71:3d:
26:48:df:ac:14:a3:39:95:5c:dc:c2:70:f0:c3:4c:
18:2d:e8:95:b2:a9:6b:58:d1:1d:42:22:00:12:d9:
0a:d8:01:d4:02:9e:28:fb:90:5f:4c:eb:17:46:ec:
9c:52:09:81:29:5f:5e:61:ed:f9:d7:b8:60:7c:2c:
d0:ce:29:72:bb:c5:6b:46:53:e6:fd:4f:56:b9:3c:
ac:1d:a9:e2:f1:00:76:39:00:13:40:fa:cf:a7:da:
16:55:e8:16:77:20:09:6d:c8:ee:fb:80:d5:3d:a2:
b4:64:b9:79:c2:bb:b5:57:b4:2f:bb:b5:a5:65:80:
cf:d3:c5:45:f9:65:38:bb:7c:c2:62:d0:76:e2:51:
2a:ca:3a:81:1e:cb:3c:fd:09:4c:b0:eb:c3:9e:88:
c6:a8:8d:10:42:6c:57:7b:a5:34:63:a2:d6:d0:f7:
3f:61:25:a5:1f:7b:38:82:a7:d4:25:85:9e:3a:fc:
38:f6:79:dd:e8:b5:01:a0:9b:21:f0:7e:e9:13:38:
4e:ad:04:f2:18:9f:53:d7:a3:68:f9:7f:12:04:9a:
c3:eb:da:0b:58:d0:f6:a0:9d:ba:b3:a2:d0:a3:c2:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:3F:48:EB:37:D2:61:59:62:9B:FD:E0:D5:E1:57:14:FE:93:AC
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4d:10:25:ba:ce:95:1c:e3:c8:38:f9:00:b1:64:af:63:84:
2d:af:59:f8:6e:6f:af:7f:22:98:fe:a9:a6:7e:d5:31:a5:08:
f2:92:f3:8e:51:68:53:f5:03:88:cd:5c:8c:8b:ac:2c:31:19:
85:f1:d2:ea:fe:5f:a8:bf:99:12:be:cf:13:a7:4d:b4:a5:0b:
1b:4a:35:16:c8:19:00:87:86:09:4a:2f:9b:2b:be:32:40:e0:
e9:f0:71:d2:05:d1:da:69:4b:30:36:08:5d:05:75:84:39:08:
31:e5:65:22:75:7c:3b:37:52:15:df:aa:1b:98:bf:54:e3:61:
c3:22:28:a7:a5:2d:ba:ed:c4:a1:e8:8e:e9:96:92:6a:d3:f8:
cd:39:60:23:ad:42:4d:c9:87:d6:f0:25:f9:c4:eb:e7:90:f4:
6f:58:81:11:a8:ce:a3:3c:6a:d8:d7:a0:8e:7a:57:f4:1c:37:
ed:02:b7:6a:6e:9a:0b:0d:ee:2e:e1:31:be:74:36:c7:61:01:
d3:36:af:f2:ee:79:4c:0c:0c:e1:07:61:3f:a0:70:15:6b:1c:
1f:99:59:ad:c3:d5:07:2a:7b:2c:e1:a0:d9:c6:d5:37:ea:1c:
ad:fb:63:e2:6c:55:02:5a:3a:41:8c:8c:94:d1:69:13:02:c7:
31:2b:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:47 2025 by rpki-client