Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: KR7Wq97ULqmepWPDw9Ob/5rTcZf5wtW1cK4pyFeOZrc=
Subject key identifier: 13:B6:F6:23:72:16:F1:8E:DD:54:07:54:ED:92:E5:60:A3:15:E3:94
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 0199FDD9596D7AE27C0DAB7D88D6D2D88079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 11B8
Signing time: Sun 19 Oct 2025 19:01:43 +0000
Manifest this update: Sun 19 Oct 2025 19:01:43 +0000
Manifest next update: Mon 20 Oct 2025 19:01:43 +0000
Files and hashes: 1: cTuB-ABZUf0AWR__0VF3CDRNo30.roa (hash: YL1vZUc95MXZVuCPTTh8OWx5ow2ebJPHUlFFR9eeynk=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: ei97mwByXR0qGdBnTTzcm1pREco0SVdUm8y9BpcX6AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:59:6d:7a:e2:7c:0d:ab:7d:88:d6:d2:d8:80:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Oct 19 19:01:43 2025 GMT
Not After : Oct 20 19:01:43 2025 GMT
Subject: CN=13b6f6237216f18edd540754ed92e560a315e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:b3:39:5f:e2:4a:ef:10:c1:4b:c2:89:58:
dc:04:6e:04:cf:46:c4:cc:5d:bd:09:13:20:37:5d:
eb:73:f4:79:29:02:15:d0:1a:b1:09:80:cb:00:a3:
fd:b0:61:c9:fb:17:b4:ef:40:53:b0:20:f3:25:b1:
14:d5:3c:71:7d:32:80:7b:e6:11:b4:c6:8f:b5:87:
f2:b7:a3:b9:c4:09:44:3c:5c:57:cc:76:a8:54:cb:
5f:94:cb:10:8d:68:3c:24:00:7b:b3:ae:32:d3:d6:
80:ed:68:0c:a7:8b:4e:7e:28:b6:d3:98:29:b4:da:
b6:51:f2:54:b5:fe:d6:ea:d4:9b:24:13:68:be:66:
a4:1b:82:46:81:c4:2a:0b:39:34:d9:55:c9:e7:05:
f8:55:b4:14:02:5f:6f:55:eb:06:a3:f8:c0:95:02:
54:ab:e4:ad:b2:7f:64:e9:05:f0:05:15:0f:00:ed:
07:3a:1f:40:04:6b:cb:37:3d:e7:e6:99:58:af:1f:
2e:df:4b:d0:fc:0f:47:9a:04:65:3b:1f:0c:22:77:
76:21:7c:72:1f:3c:f2:6a:89:b8:b2:b0:6b:00:92:
81:66:c1:2c:b1:92:ef:fb:04:fa:4b:d2:25:7e:8a:
51:24:c8:15:96:14:ba:d1:b4:47:a4:f1:13:26:c1:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B6:F6:23:72:16:F1:8E:DD:54:07:54:ED:92:E5:60:A3:15:E3:94
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e8:18:eb:75:d6:f7:51:c7:49:8b:35:1b:4f:e8:4e:01:22:
96:0a:a1:ed:e5:ad:30:ed:40:44:41:4f:aa:65:43:af:ab:65:
09:c3:5a:b8:04:f5:69:a3:86:a4:f9:28:9f:fc:cd:1f:e5:f0:
57:e8:0a:74:12:ed:96:82:8b:d7:5a:68:47:0d:11:1d:70:c0:
ef:d2:f1:ff:35:53:0e:71:c1:e3:41:9d:83:ae:42:8c:00:ab:
9e:15:33:7c:33:be:d0:b1:5e:89:2b:cd:e9:4a:ba:a6:c9:f3:
f1:4a:7c:ba:26:94:73:a3:03:93:e2:02:35:ce:d7:41:1d:66:
a7:77:a1:55:d6:b7:f7:3c:0e:a8:15:74:e7:05:0f:c2:3a:6c:
50:e7:45:36:b2:10:0e:f1:f3:62:43:19:29:75:73:bb:4e:8c:
3e:95:23:b3:03:7f:98:09:de:88:cf:16:b3:12:97:95:89:f0:
88:a2:61:f0:4c:12:c8:bc:7a:1a:12:80:fc:91:b3:f1:49:59:
ff:b5:ec:ea:59:83:28:8e:1c:22:ae:f7:60:28:5f:e0:0d:a6:
20:62:6c:e8:ee:04:0d:40:f2:ca:1e:0c:38:72:bf:2c:cf:bb:
18:e4:ff:06:4e:0a:85:b5:87:b5:fe:c8:c1:fd:ea:c1:c9:e7:
e7:bd:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:50 2025 by rpki-client