Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: e5ikYMsmUIH48UN391G+GdeV9eupH/DGJjLZDQ5JXLQ=
Subject key identifier: 35:82:D1:59:C6:AA:0E:31:49:BF:63:5C:B4:65:6E:29:E4:11:22:8B
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 0199FC21719722F12015E5D932E33D5A711F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: NCn1uy+zlYSrb9hC7fAet68q+UGWPKaI7VsKKD26kZY=)
2: g2292tg5HkQKxN5v3A20HQE7HPE.roa (hash: 8kwF0PMfxaM4q7cGmN1tVvvHsfTo4uOxn6Qw92CswWg=)
3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:71:97:22:f1:20:15:e5:d9:32:e3:3d:5a:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=3582d159c6aa0e3149bf635cb4656e29e411228b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:f2:ae:b4:f0:f5:77:29:50:74:56:b9:63:
0c:24:3a:c3:2f:60:8d:1f:0c:8e:05:2c:09:f8:56:
cf:4c:20:fc:80:b0:a1:a4:ca:8a:73:c8:ee:8b:15:
40:d2:c4:5e:a0:6a:8f:6d:41:bf:72:5c:41:a5:a6:
c6:a5:d6:c2:4c:18:fd:08:b1:c6:6a:d2:a1:18:2b:
2a:61:e4:ba:c6:7d:a6:56:f7:b0:19:63:57:85:7b:
1d:81:58:0b:72:da:eb:fa:fa:25:6a:9a:cb:8f:4a:
5b:74:5f:68:e9:38:82:c2:01:da:35:4a:33:91:f2:
5e:9c:97:66:04:51:a1:bc:77:71:9a:7f:4a:cd:e5:
a0:07:0e:84:8e:24:e2:b2:2d:a7:02:89:aa:fa:79:
fa:86:67:54:a4:08:cc:76:78:41:b8:37:b8:5d:69:
6e:e7:9a:9e:5b:ad:31:f5:8b:00:a7:47:9c:1d:06:
92:1e:f2:7a:36:11:b1:13:ef:e4:48:ac:9d:54:7c:
0f:61:b5:a2:a1:42:87:21:72:57:33:6d:1a:11:03:
b9:25:8d:f5:e3:5f:a1:81:a7:26:d0:f2:37:32:3a:
e3:d6:f4:e2:a0:65:05:6e:f7:95:d4:98:c6:37:67:
08:d9:d6:dd:3a:06:5f:44:7f:36:a5:d8:c2:00:4b:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:82:D1:59:C6:AA:0E:31:49:BF:63:5C:B4:65:6E:29:E4:11:22:8B
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b2:b1:14:13:63:76:98:83:98:e7:fc:fa:c0:c0:c7:19:a0:
4f:31:3b:fa:84:ea:40:c3:c1:b7:45:19:98:2d:82:52:cd:41:
f2:cd:f9:ed:26:e0:f4:96:7c:98:0a:e7:fe:6d:a6:92:69:b2:
46:ff:d2:bb:3c:01:8f:1c:4b:fa:c4:47:61:bb:38:67:e4:c7:
d6:4e:7c:f4:2f:53:53:ac:93:96:75:a5:75:0f:4d:37:75:5a:
fc:d8:0e:7a:1d:68:d8:bb:bc:48:8b:03:82:fa:a7:a5:6b:66:
e2:b1:4d:72:25:45:a0:90:37:59:47:04:46:c2:45:2f:7c:bf:
45:63:05:79:67:6a:bf:0c:d2:ab:42:c6:a7:2f:47:13:13:bb:
41:02:00:70:5e:fc:a7:2b:a4:e5:87:6a:c4:b2:d0:83:34:bd:
07:0b:be:6d:a6:5c:d5:1d:13:4a:c4:ef:56:57:af:5a:89:e1:
49:5f:0f:5e:4a:ca:5f:de:88:db:1b:0f:29:58:9c:48:b9:7c:
7b:17:cb:3d:5b:8e:2a:ff:5c:6f:6b:14:0f:9b:0e:0e:fa:22:
46:c3:6f:2f:4c:4a:f0:3b:76:5b:4e:20:e8:e5:1a:55:1d:b8:
d5:c9:8f:72:be:c1:b3:8d:83:09:a9:de:7d:06:25:aa:e6:59:
54:e0:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:09 2025 by rpki-client