Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: dBBE0Fe1pT3RYLNjwzweWQZ8OvcoK8/mZvZku65Ceow=
Subject key identifier: AF:F0:F4:24:1B:E9:1C:06:60:37:82:DF:AC:9C:F9:34:56:EE:F1:7F
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 0199FC8F3536DCD8AB51CC103816DB98A98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 0569
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: 0UKc3c6_AlpjqrUNJh3DwStXrec.roa (hash: OhWloYhHA/1vQyymMhBSWvWrUFfn2iV/XlUJ3vQrur4=)
2: 4gvK6UAte4i_DJjE1TPbFT1Ok98.roa (hash: GoLsyVhZqQfvGCGN6U4GMh9d59SyLh07nIkIOiePbx8=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: fe8rlV+Hq0KlHSQep5GQLMNLqm9b0U89r3nGrGjklzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:35:36:dc:d8:ab:51:cc:10:38:16:db:98:a9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=aff0f4241be91c06603782dfac9cf93456eef17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:bb:6c:f7:14:0c:01:1e:c8:98:de:b2:c9:
00:63:5a:85:cc:ff:80:09:39:8d:1d:78:b7:8f:ed:
1d:c7:b0:3b:68:17:c3:9a:38:a4:12:b2:c9:18:7f:
bf:44:a8:ff:2e:08:84:fe:cd:d0:ab:1a:59:d8:e6:
28:7c:bf:3a:a3:87:7f:8c:c6:2b:3a:c6:50:b0:36:
a9:56:9e:fe:84:2b:69:60:79:cc:f3:b6:d1:4f:1b:
ac:8f:6d:7c:84:7b:ee:39:ab:8b:0d:65:aa:9e:f8:
5a:5e:b9:16:c8:d0:82:3a:a5:17:d9:ed:ba:2a:f1:
f5:5f:d6:5c:fc:e7:aa:71:37:ae:cd:20:64:38:d1:
e9:e0:1e:c9:84:75:5f:52:45:ed:e3:93:14:a9:57:
c7:2f:b3:34:3a:76:fe:b5:72:d2:a2:41:9e:46:d1:
18:1f:25:44:9b:96:d2:ac:f9:bd:9a:9a:9e:39:7c:
84:ec:e8:ce:1f:19:a1:68:90:10:72:e0:4b:b3:b7:
44:e7:bd:11:06:16:3b:b9:cf:b8:2d:47:e1:b7:9c:
0e:2e:52:93:a6:4f:2d:57:fa:5e:3a:05:6a:06:01:
9b:a4:45:72:da:d9:ad:5f:09:84:33:97:e8:69:2b:
d2:5b:49:81:14:22:c1:9a:18:9d:64:f4:89:f0:8b:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:F4:24:1B:E9:1C:06:60:37:82:DF:AC:9C:F9:34:56:EE:F1:7F
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e8:18:09:1e:3b:70:a6:6c:60:e3:c2:36:1b:92:08:36:0c:
52:80:6a:23:34:62:ce:97:43:b7:3b:37:25:ea:67:c0:39:c7:
1c:60:e7:eb:d8:fd:7d:59:ad:d1:29:49:6c:f8:59:3a:c2:d0:
5e:c3:fd:40:af:8d:fb:14:ce:b3:52:1a:8e:da:ed:c7:95:7b:
fd:ce:bb:7a:e4:33:d4:a5:ab:9f:c0:d6:a3:74:e5:58:72:f3:
7d:3a:93:da:b2:30:12:a3:bd:68:17:ba:8f:8d:36:7f:1a:97:
dd:ac:5d:6e:bf:20:67:79:54:61:5e:e2:16:bc:e1:fc:5a:b4:
f6:54:55:00:0a:27:86:fe:ca:ce:1b:9a:8b:48:3c:0a:04:88:
fd:78:81:81:d8:96:15:b7:be:8b:76:d8:b0:f6:b4:43:60:4e:
a1:1f:cf:0b:98:8e:9d:09:49:df:43:0c:4f:66:fa:a4:0e:1e:
20:0b:12:55:5d:15:65:b6:f3:f0:11:bc:cb:76:ab:44:df:26:
21:e3:d4:d2:44:5c:f4:01:f6:3d:3a:8b:45:5c:dc:4f:01:b4:
f5:9e:a6:9f:f1:ac:70:9f:26:9f:82:ca:a4:ef:ee:5e:2d:c1:
6a:6e:fe:40:d9:85:b6:ed:b5:78:3b:aa:86:17:fa:e6:72:60:
82:98:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:47 2025 by rpki-client