Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: 21vm5zrMUHjrL24QSx+Wm9onQ6GAxOuqV6mUta4eA3o=
Subject key identifier: 5C:A5:01:21:6B:22:87:42:3F:CA:1D:40:B9:EB:47:3A:5D:21:9F:28
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 0199FCC6B02444B16014F454F1FF9269DB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 0E97
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa (hash: nQWhe0fyffCN2quQfKSQ56T2rfLrYZUxC64fwkrxixE=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: XLNKcl9vdnK/IZ5osoGrzRXRe1iYWj5UlOaU0RtTwmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b0:24:44:b1:60:14:f4:54:f1:ff:92:69:db:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=5ca501216b2287423fca1d40b9eb473a5d219f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:fa:f2:3d:a6:59:b2:dc:e5:0c:f6:6e:50:
39:c6:4d:26:79:42:9c:b6:30:94:ba:36:a4:80:5c:
34:02:cf:b7:1f:c1:11:2f:44:28:a0:19:a8:39:04:
f4:7f:d2:72:e9:13:90:f6:cd:d4:0f:b0:bb:65:b0:
a0:4a:ab:0e:d0:5e:93:be:cc:5d:2b:fa:5d:bc:23:
9f:0c:f2:44:bb:23:49:d9:84:f4:f2:b9:48:26:82:
64:a1:8a:05:a0:8f:73:77:9a:53:a6:c7:3d:32:ee:
a8:e7:ef:0f:06:61:5b:34:f6:26:21:f0:88:9d:f7:
b4:f9:30:27:4d:61:1c:e4:b0:f1:39:e2:ea:fd:04:
85:bd:40:0e:65:7f:ee:e7:f8:3f:76:e3:e4:ad:0e:
1e:57:b7:15:05:49:e7:0b:84:9c:11:88:4a:02:ef:
0e:46:eb:2a:83:9d:0c:7f:81:a1:57:71:7b:7f:c7:
c0:1b:67:77:6a:31:d9:24:45:57:3e:f4:df:9f:d8:
d0:d9:ff:32:e3:32:e8:04:19:59:96:22:16:0b:d4:
ad:1f:6f:8c:c4:44:c3:ec:d0:c0:0f:8f:ba:7f:fd:
5a:54:37:21:c1:57:89:87:54:89:86:64:5b:57:ad:
5a:dd:bb:1c:2b:50:a3:33:7b:55:ad:44:7f:af:8c:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:01:21:6B:22:87:42:3F:CA:1D:40:B9:EB:47:3A:5D:21:9F:28
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b8:e9:50:1e:eb:22:30:b2:4c:86:23:9b:6e:b5:ce:f1:5b:
16:57:93:1a:ef:8a:8e:f6:46:aa:a7:30:6e:05:c6:77:c2:91:
f1:cd:76:15:9c:3c:c4:c7:d4:2e:3b:cb:d0:0f:9b:fd:00:54:
30:82:81:6e:a4:77:1e:6c:7a:8c:83:78:65:84:87:0b:fa:6b:
ed:f0:b0:3b:84:2f:72:08:e3:8f:ef:99:e4:f8:10:fa:2e:62:
05:4f:66:d3:65:d4:52:ce:93:cc:9e:1b:57:e1:25:d8:e5:b6:
be:bd:3f:2e:fd:7c:91:cf:c7:24:a8:d1:f0:f2:17:21:dd:a1:
59:7c:52:cf:c9:93:1f:d2:08:30:ee:34:15:2c:a1:d9:63:c9:
b8:38:4e:55:5f:ca:a0:71:55:12:69:3c:d1:e1:ff:73:d8:17:
c5:f4:db:18:24:f7:48:c7:10:49:22:cb:55:fd:8d:65:1a:21:
f8:4c:f9:f7:b1:ed:dc:eb:a9:37:5e:98:48:4d:e9:ce:6e:85:
2a:5c:bf:04:03:86:c5:cc:c5:d3:0b:62:5c:3d:18:0b:fa:a4:
98:0c:12:8f:de:5c:a4:d4:28:49:38:0c:44:31:af:19:0e:49:
6a:8a:51:47:7f:3a:9a:19:4b:e2:8c:ad:5d:70:27:bc:67:c7:
9b:9b:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:36 2025 by rpki-client