Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: v9OV6grFAeqWQ6GO5MCaEgHlVFqRDwod4snz1cozK8I=
Subject key identifier: B9:39:2B:1F:4A:00:09:A5:05:82:3A:0C:EB:2C:43:C5:5E:A0:27:64
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 0199FDD9E327E6AE6949E875AC220AE5372C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 0FE7
Signing time: Sun 19 Oct 2025 19:02:19 +0000
Manifest this update: Sun 19 Oct 2025 19:02:19 +0000
Manifest next update: Mon 20 Oct 2025 19:02:19 +0000
Files and hashes: 1: DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa (hash: o5jRgA59QPQWDTQLvIg+41ICmEKRDLb8Qb3vB5Fkcs4=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: asYZGJFLcEsBZHHfp5C14dmdNNNLZerEV1g1ujd3h7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e3:27:e6:ae:69:49:e8:75:ac:22:0a:e5:37:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Oct 19 19:02:19 2025 GMT
Not After : Oct 20 19:02:19 2025 GMT
Subject: CN=b9392b1f4a0009a505823a0ceb2c43c55ea02764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:94:45:3e:b7:c7:7e:34:13:74:2e:ef:7b:
b0:7d:9b:2d:b9:30:8b:9b:d6:52:62:ae:03:8d:8e:
42:3c:08:0f:9a:ca:d7:87:8d:4c:44:ec:9a:ff:c6:
b9:cc:45:ab:86:c4:07:99:0a:28:ef:54:fe:f9:3b:
23:37:96:d6:1c:fe:de:1b:73:59:0b:03:56:32:e4:
27:cd:57:dc:4c:a4:e0:14:1b:84:dc:31:26:7d:f8:
f5:40:54:19:ce:78:30:54:52:ad:1f:e0:b1:7b:c3:
01:64:c8:2b:b5:38:be:3d:7a:dc:88:c1:ee:f6:43:
3a:13:cb:58:61:b2:90:28:ba:fd:58:2d:22:69:4d:
a7:91:5e:0b:37:f6:db:59:02:c4:47:19:3d:dd:b9:
4a:02:94:c9:3f:31:b5:33:a6:cb:32:f4:f4:3c:4b:
b6:20:6c:a7:1f:c6:4a:88:3e:a7:e3:fe:6f:b7:16:
87:14:fc:29:66:a1:4d:40:a9:e1:f6:5a:07:97:00:
c6:88:f4:0a:b2:09:55:95:6a:45:33:a0:4b:8a:49:
b1:41:c2:d3:54:7b:d5:76:5f:d7:cc:2d:e4:4a:92:
bc:fb:ff:f5:f0:44:b6:b8:31:a1:91:d3:e6:26:a7:
34:ae:5c:b4:0b:f2:6f:3e:75:e3:8b:c8:69:88:fc:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:39:2B:1F:4A:00:09:A5:05:82:3A:0C:EB:2C:43:C5:5E:A0:27:64
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:57:d3:22:d1:5c:b4:c8:2a:80:e0:fc:99:e0:bc:4c:10:e9:
6f:18:51:31:77:c1:7c:ca:d4:a7:9b:4c:29:84:02:81:11:09:
10:f8:69:a2:87:af:bb:6e:dc:85:70:50:9e:20:0b:99:3e:a3:
f5:df:32:8d:9d:86:3b:77:02:9f:76:88:cb:ab:3c:7f:e7:4d:
50:c1:a6:b2:ee:ca:4b:5b:6e:bf:95:7a:81:bb:45:49:63:8e:
3b:8b:7e:25:8c:08:8e:0f:62:db:a3:48:87:16:57:aa:f2:0c:
60:d7:fa:ea:50:c1:85:b9:98:7c:d7:75:86:69:a2:8c:9d:18:
68:9b:0e:8f:e4:95:a2:de:6e:95:18:2f:1a:9b:d0:72:a8:0f:
29:1f:2f:32:26:69:e3:95:1b:fd:57:69:6f:83:37:f2:11:1a:
cd:e4:a3:14:d0:61:c0:00:49:bc:2f:03:a8:8b:4c:a3:4f:97:
0c:b1:0e:6b:89:0a:d8:a9:61:47:1c:6b:bc:e2:ae:b5:45:8b:
f8:86:77:08:b5:00:8a:b7:6f:cb:be:1c:0f:cf:40:57:64:6c:
46:56:38:c2:7e:11:18:01:cf:eb:91:ad:e0:3d:68:56:d7:82:
24:75:01:3e:37:ac:81:f6:d8:c9:38:b1:9d:95:46:06:18:8a:
3f:78:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:07 2025 by rpki-client