Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier: aMmp7soNQU95zFwa5GVMKcimyMNMJ4AvT24Fcv0Lf2o=
Subject key identifier: 74:3F:8A:6A:6C:AF:8D:F1:F6:3F:6B:0A:ED:FF:7D:0D:72:D7:50:F3
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial: 0199FC8F3FF7639DE1ACB72C18A32460FB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number: 07A5
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: GkDHtRXDOL8+eCrsD/f332t2axkDkElt/+fqaMHDfFE=)
2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3f:f7:63:9d:e1:ac:b7:2c:18:a3:24:60:fb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=743f8a6a6caf8df1f63f6b0aedff7d0d72d750f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:d3:d7:01:8f:59:2c:76:5d:96:ff:ae:c2:
a2:fa:fe:62:55:57:fc:c0:29:5d:c6:d1:97:9d:3a:
ab:a2:8e:a5:10:57:11:c7:ea:fe:00:50:aa:e7:fb:
ab:11:c4:a1:32:af:a7:f5:6e:fd:3c:ef:04:b4:39:
ac:f0:c2:02:06:78:73:1f:8c:2f:f5:60:4e:c5:13:
98:fe:61:72:aa:cf:a4:8e:cd:05:70:fa:10:6d:1f:
b1:66:a2:48:31:5a:3a:79:7e:3a:19:9a:71:26:c2:
b6:ce:3e:8f:2a:84:c8:40:7c:56:40:fe:1a:4a:25:
91:53:90:5f:ce:f2:28:88:56:bc:35:e4:ab:b0:7e:
13:52:22:f2:25:04:45:5c:70:1a:9d:6e:b9:47:ab:
88:bc:ea:8d:af:21:c6:7f:af:67:52:95:37:9c:b6:
51:f1:74:0c:2a:38:42:26:fb:58:07:06:37:3e:3d:
3c:96:74:f8:8b:67:95:c6:3c:79:c2:57:ce:59:4b:
73:27:21:05:c4:36:a0:1f:2b:47:2f:b9:71:1b:70:
33:70:a2:7c:6b:05:0b:f1:34:fa:45:fd:b3:e4:2e:
e9:06:b3:6a:46:d1:57:5f:ba:66:ef:48:46:b6:2b:
b4:08:a8:11:9a:aa:5b:3f:89:de:33:c3:20:7f:2d:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3F:8A:6A:6C:AF:8D:F1:F6:3F:6B:0A:ED:FF:7D:0D:72:D7:50:F3
X509v3 Authority Key Identifier:
keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9b:b1:0f:4d:ce:5a:35:07:26:df:f4:0f:ba:9c:a3:b0:e8:
73:d5:2b:86:6d:da:79:a1:c3:84:0d:d6:26:37:8f:39:fe:24:
5a:16:9b:cb:d1:28:59:db:ea:29:05:12:47:ec:d5:75:fb:7f:
66:97:26:c6:a7:87:5c:7c:26:c0:c6:a0:50:87:c9:21:57:6e:
8b:50:4a:12:35:75:a6:2a:32:fe:e2:5d:b9:79:04:28:fb:79:
f3:34:7b:0e:09:54:9d:f7:d4:a7:88:d7:93:c4:d5:ec:d6:f1:
49:75:01:47:68:8d:ac:c5:55:fc:60:83:63:10:05:a8:6e:f6:
57:79:c0:54:b3:11:af:16:94:49:31:d6:c3:d0:6b:08:04:1c:
8a:59:27:54:48:3d:39:1d:54:15:a5:11:a6:d6:de:e9:bb:ae:
2d:fb:78:7a:d7:a4:08:02:c1:ee:ba:1b:69:c3:2a:3f:68:4b:
66:6e:e5:60:d1:0d:a9:c3:87:3f:c0:69:70:5c:22:f4:54:02:
80:f4:e4:0b:0d:2a:47:ba:94:32:cb:c6:44:e7:74:10:7a:15:
25:c7:82:ee:6c:9d:4a:11:8c:3e:5f:a5:ef:3b:6c:5f:28:09:
4d:b1:f6:83:1b:18:73:1b:e8:ba:4c:ac:8b:84:5a:ac:7c:ef:
3d:08:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:01 2025 by rpki-client