Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: gsSdyhCt9p+oRBzAFi12VlZDBMQe4FEjJWrDvEjmtRU=
Subject key identifier: CE:4A:01:77:4A:01:88:8E:1F:95:31:3C:07:6B:CB:4A:6C:D1:9E:3A
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 0199FCFD2DCA59633C72E2796B12494FE8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 1408
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: aRuUA3EI2JQ+EfWxDS4sLnlXD1nY5qPMji1MtTc7ekg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2d:ca:59:63:3c:72:e2:79:6b:12:49:4f:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=ce4a01774a01888e1f95313c076bcb4a6cd19e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:85:ac:9e:8c:5f:b9:39:ca:45:aa:11:fd:
5f:87:e0:77:24:62:d2:d9:70:38:a1:50:0f:cb:8c:
76:75:df:85:08:35:6b:48:fa:5e:93:1d:d3:1d:3c:
fa:33:c4:d5:e9:49:01:0d:54:ab:5c:21:6c:a3:78:
5b:0c:84:dc:f3:33:66:5b:27:67:42:bd:7c:5c:2b:
59:66:03:bf:e2:84:eb:30:d4:83:bc:5e:b6:02:c3:
1c:e9:f7:40:31:71:98:8e:6c:7e:01:8b:0c:76:74:
c7:78:56:d6:57:e1:e1:aa:cc:18:d7:0b:18:70:a7:
4f:34:d2:35:5d:af:11:6f:40:1e:e6:09:13:7d:ee:
ba:ad:c2:80:12:2b:fc:aa:c8:06:74:fc:ac:3c:52:
28:93:bc:bd:a3:fb:18:51:0e:40:45:58:a9:ee:0c:
70:d2:9c:5b:d2:c7:0d:42:6e:6d:22:76:67:6f:18:
e7:6d:61:6a:cb:64:e3:55:81:7e:58:27:36:c2:08:
28:44:ee:45:03:82:f8:c7:e5:0b:99:e9:c4:85:c2:
d7:2a:09:05:5e:ff:76:97:5c:a0:5e:b4:59:76:2f:
42:b0:b3:b9:2a:08:10:59:fd:90:37:19:d7:a9:a4:
be:5b:21:c3:89:8f:4b:19:8a:bc:6c:a6:bd:22:79:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4A:01:77:4A:01:88:8E:1F:95:31:3C:07:6B:CB:4A:6C:D1:9E:3A
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c6:f8:70:6c:cf:71:5f:84:a9:d2:e7:b3:f5:33:5d:a0:69:
e6:a7:49:cc:54:92:d3:6f:85:33:eb:a5:9a:5e:69:f8:69:c5:
88:cb:98:b9:68:64:d0:7a:4f:de:fe:bf:3a:f8:89:5c:76:4b:
76:79:0d:e8:83:b9:0f:7f:f7:20:de:4f:cd:80:8f:f5:49:3e:
e1:ad:74:3c:95:05:79:b6:44:95:6a:bc:b3:0f:44:9c:7b:0d:
03:86:e0:ed:dd:1d:b3:e2:35:09:6e:dd:18:b6:b0:4f:d9:b0:
b4:e9:3c:51:18:de:da:ef:28:2a:76:59:2e:1e:72:44:39:68:
c4:86:e9:c9:9f:2a:31:51:2f:61:e4:ae:b6:30:10:08:c4:1a:
d8:3e:0d:82:3c:bb:76:8c:b0:31:0f:71:48:4c:ad:58:a2:11:
bd:d9:89:94:1d:bc:4d:be:27:b4:cd:77:f6:b7:08:c5:74:d1:
26:a0:ab:e2:15:fa:69:a3:c7:8f:6b:31:2d:73:f9:fb:da:25:
ca:ab:e8:07:c2:2b:89:0e:eb:7f:ed:1c:4b:74:a1:30:d2:69:
6b:6c:1f:7a:17:21:1a:88:aa:44:d4:b0:76:be:26:bc:d1:0d:
a5:65:b1:b9:70:3f:c7:23:ba:5a:74:f7:00:c4:c0:e5:9d:45:
cd:8a:4d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:15 2025 by rpki-client