
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: Ct9ccqGIQTp1NTIcTKFHJ2huuUeoWyKtJLQLw932M5M=
Subject key identifier: 59:36:58:D7:35:AF:D8:C8:F3:18:17:74:56:06:34:6F:39:63:46:E9
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 0199FB7CC34A886E755D55B2DC783602BB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 0688
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: GnRBgfOJgqgbCKfVmItzXv5DJ54.roa (hash: MiCCH7uvupnb1UHdVT5mWDwROiRyBunRSB+jjWhogas=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: vIG1VMXfHDGg8SFKYe1Nbsgv+jC/2lKRRwU9gEB2S/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c3:4a:88:6e:75:5d:55:b2:dc:78:36:02:bb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=593658d735afd8c8f31817745606346f396346e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:e5:c8:05:2f:f3:a4:7b:0b:d8:ba:5b:a0:
27:31:19:b7:e1:39:72:18:f7:5a:36:7d:18:73:68:
a8:ab:af:15:f0:67:a1:25:b2:9c:65:7d:f0:35:c8:
43:8b:ea:f3:f2:2e:ce:94:62:42:cb:c6:26:67:6b:
0f:6a:53:20:e3:94:ab:3a:2f:f3:f4:ca:15:18:8a:
96:e1:72:3f:6a:6d:00:b1:ab:7b:12:22:ec:36:a7:
51:64:f1:10:5c:7e:65:6c:37:bf:6e:26:67:d7:20:
9d:4e:45:e2:7a:f6:61:8c:90:82:ef:27:e6:60:cb:
47:a3:69:b1:5d:24:ca:8f:03:81:c0:bf:f4:d4:0d:
cc:70:6f:e0:4e:03:f6:1d:8f:b0:e7:4e:8f:9f:d5:
85:6c:46:47:2c:ee:54:ed:94:a9:ac:45:87:d2:9e:
b9:71:26:60:d9:21:e1:6b:91:7a:06:e6:49:f3:23:
69:fd:65:6c:51:8e:3b:6a:60:d0:5e:d3:d6:09:5f:
96:38:9d:95:6d:b6:07:c9:52:b9:0b:30:38:f4:eb:
1c:38:9d:29:e5:8c:23:ff:15:1d:d3:84:f6:f2:05:
06:07:42:f1:bd:69:91:8d:8c:b2:f5:e9:5f:2a:e2:
7c:20:3d:a7:d0:93:3b:28:1f:33:67:7c:c7:20:f3:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:58:D7:35:AF:D8:C8:F3:18:17:74:56:06:34:6F:39:63:46:E9
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b7:cb:62:81:95:de:73:80:ba:53:08:62:0e:00:44:d6:6f:
98:0a:ed:ec:1e:e4:af:41:55:db:b4:8b:97:86:ff:db:d8:80:
4b:26:cd:73:01:a7:f0:b3:9d:34:9c:01:8e:b3:d7:ef:56:a3:
5a:6d:78:c2:ec:1a:66:8b:a5:9c:0e:88:73:a7:75:c8:6a:08:
3b:99:80:f1:c3:8f:be:95:28:93:0f:47:88:0c:01:35:13:ee:
12:76:61:f0:c0:ba:35:94:27:43:77:fa:1d:59:45:82:80:2c:
81:c7:67:94:fd:eb:d7:11:4d:35:cb:9d:72:9a:e2:16:a4:77:
f6:82:f7:05:a1:5f:25:df:14:f2:f0:22:59:21:e8:56:69:05:
e3:12:24:af:ee:64:55:b5:7a:f1:17:71:bc:9d:5a:84:ea:38:
d4:7a:42:9e:6e:ef:a6:29:99:7c:6d:c3:47:d2:a6:8f:c4:b9:
11:a5:5a:51:c9:1f:59:ce:c5:2f:a4:de:1d:f9:9a:18:22:a3:
aa:10:b6:b5:e8:fa:0b:c7:5d:61:37:15:7c:ca:c8:44:ed:33:
eb:26:ae:4b:48:fc:6a:f0:3e:24:0e:bb:31:4b:be:c7:46:69:
bf:93:33:51:ca:85:59:3b:99:eb:23:ab:65:b7:3d:4a:51:7f:
ab:56:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:26 2025 by rpki-client