Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: YpVSxGk0Ioqqn3+80vNlUYjbf3ZiQSxZa0CKCIzqGsM=
Subject key identifier: 59:88:50:FC:AC:BB:8A:BD:A6:70:89:3A:E0:99:D0:73:81:7C:06:0A
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 0199FB45A955484DDC2CF09C39F90CAB5E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 1024
Signing time: Sun 19 Oct 2025 07:01:10 +0000
Manifest this update: Sun 19 Oct 2025 07:01:10 +0000
Manifest next update: Mon 20 Oct 2025 07:01:10 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa (hash: U8WrE9TGTdUjZFCB6O02ti+OPe0fB0Uw0kiiaV4z4N0=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: 2MgfSxtqCVKYtCOA1AzzVC5GRLXwrig89ad+l3umWnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a9:55:48:4d:dc:2c:f0:9c:39:f9:0c:ab:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Oct 19 07:01:10 2025 GMT
Not After : Oct 20 07:01:10 2025 GMT
Subject: CN=598850fcacbb8abda670893ae099d073817c060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:60:0f:0f:e1:db:13:f0:95:6b:0c:89:cf:
a7:89:92:1e:d0:b6:66:64:d7:a5:e2:85:e3:c6:d8:
eb:fe:d1:e8:01:36:33:43:33:7a:a2:93:62:6d:71:
ce:c3:d7:43:b1:9f:a1:43:cc:8c:2d:fc:a7:b9:ce:
14:49:34:eb:13:3f:e0:96:34:60:a9:bb:74:07:28:
ae:f5:7a:8d:15:bf:77:ad:e7:c0:b5:22:62:60:83:
09:71:9c:15:88:a3:a6:c3:38:9f:c6:34:c9:7a:0d:
7d:5d:89:d4:3f:9b:c6:52:c6:b6:7d:d8:bc:77:67:
83:27:6e:19:b3:2a:f5:b7:01:9c:e8:e5:3c:47:e3:
5d:99:82:02:6f:0d:72:fd:04:f6:87:3e:ad:c0:45:
46:52:99:9c:f1:51:c3:dd:88:16:22:fa:05:d6:c7:
07:97:a0:7d:98:22:41:04:a4:d1:e7:8a:f4:34:ca:
4c:54:41:1a:91:1e:ef:c6:ed:3a:d8:4b:26:61:ed:
2f:df:b4:0c:4b:b4:67:ab:c2:79:9f:40:96:e5:f9:
48:fd:ac:27:87:6c:bf:1f:59:f7:69:da:15:f2:14:
5a:ed:99:81:95:e4:61:66:cd:a2:7b:01:f4:17:b1:
50:71:f0:82:12:1b:3d:72:a1:ad:d0:d7:22:78:38:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:88:50:FC:AC:BB:8A:BD:A6:70:89:3A:E0:99:D0:73:81:7C:06:0A
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:34:f0:7c:4c:50:05:7e:98:af:e4:f8:19:2a:7e:bc:4c:fd:
a9:ba:1f:16:f1:29:57:d7:a6:b6:28:f9:26:2e:be:c8:14:d9:
15:2c:fb:4d:f2:37:85:64:4b:b2:b9:ab:9f:35:a9:81:f5:07:
2a:7a:75:9a:be:db:74:cb:93:26:11:1b:48:ac:d2:b0:c4:b9:
80:cf:50:9b:ee:c4:f7:f8:b6:b2:bb:37:69:ba:d1:12:87:d6:
96:52:ab:9d:dd:c2:10:41:66:15:6a:48:08:bc:c1:a4:ba:9c:
63:5b:47:57:cc:17:63:2d:68:84:be:46:dc:b2:7d:ba:c6:b1:
d1:83:93:3c:78:1b:f9:04:04:5a:f1:ac:ef:a3:24:22:f3:20:
5e:c5:ec:1e:9e:a4:95:ad:b6:4f:08:7c:98:5e:94:94:25:bf:
13:4d:60:79:4f:7d:e4:82:07:65:ba:cc:ad:72:ca:0f:06:3b:
60:78:a0:10:f2:92:5e:dd:c9:91:d9:a8:eb:45:5a:19:9a:34:
84:9e:e5:90:7a:35:4e:61:23:db:de:16:b8:43:34:52:9b:23:
5f:df:c5:6f:33:bc:a8:70:37:59:06:52:cc:7e:23:00:88:47:
7f:98:cf:a6:ee:46:17:66:18:1d:7f:33:bb:ce:45:6e:97:70:
ac:74:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:08 2025 by rpki-client