Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: ZHQh2d2tzlRxZFR1VPCwqY2zs1nTULpz9nvxoo20kGU=
Subject key identifier: 41:DF:68:2A:FC:F5:64:49:25:9B:C6:F0:AB:C1:38:70:78:34:AE:19
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 0199FDD9D26E420C937F25DE5BDD638EDC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:14 +0000
Manifest this update: Sun 19 Oct 2025 19:02:14 +0000
Manifest next update: Mon 20 Oct 2025 19:02:14 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: G5ROrxW005h6y4Nt8CKhNWr5Wh/6oiVu9x+/0zhxI3Q=)
2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d2:6e:42:0c:93:7f:25:de:5b:dd:63:8e:dc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Oct 19 19:02:14 2025 GMT
Not After : Oct 20 19:02:14 2025 GMT
Subject: CN=41df682afcf56449259bc6f0abc138707834ae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:6f:2a:a6:87:1d:db:b1:a3:72:96:04:35:
9b:b0:59:7f:56:8c:8d:89:79:ed:89:80:2c:28:1a:
f5:57:20:dd:4a:73:45:0f:9b:23:ad:5b:92:a7:ca:
eb:2d:1a:ba:2a:71:bc:dd:6f:b0:d1:21:67:c5:9f:
90:43:36:2c:ff:38:28:89:60:d7:cf:6f:b7:74:e6:
26:33:58:f1:92:a0:1e:cd:a3:67:e6:7f:95:d5:f4:
a4:12:f6:cd:14:68:b7:c3:67:c0:7b:71:4b:14:1f:
9d:75:45:99:55:e8:5d:9c:7b:b5:b7:6b:ca:79:4e:
b3:55:8b:13:cc:98:9e:20:66:12:fe:b4:b1:92:a4:
25:5c:bc:28:43:2b:a5:5c:a2:4b:35:e0:8c:38:f0:
ac:be:8c:9c:fd:8c:48:30:ec:54:eb:1c:63:1d:49:
80:84:ec:c8:0e:61:c2:42:1f:97:6f:9c:a6:5c:0a:
40:82:95:15:97:b9:23:75:10:e9:d4:2a:62:fe:78:
85:95:c7:7e:29:9c:97:5e:8a:5f:82:59:b1:fe:ab:
07:fb:dd:e9:d4:3e:23:71:26:bc:c6:d3:54:a4:1a:
cd:f4:e8:23:bc:4b:34:81:b8:80:d8:29:20:dd:a8:
6b:bd:17:d4:69:6f:69:79:10:ec:10:59:7c:2e:10:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:68:2A:FC:F5:64:49:25:9B:C6:F0:AB:C1:38:70:78:34:AE:19
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:79:14:21:d2:fe:10:ee:10:08:8f:6d:b4:6a:8f:4f:60:95:
aa:59:69:5f:43:60:27:01:8c:8a:42:65:59:bd:1e:48:98:99:
1d:35:92:bb:84:ae:7c:3a:26:35:3f:4b:92:f6:39:41:be:09:
3f:04:46:7d:b4:eb:4c:90:5c:43:e6:bc:cd:37:f8:97:e7:cf:
93:b5:0e:77:d2:0d:8f:bb:30:a0:90:29:56:d7:48:d2:64:0f:
64:e5:67:4a:69:0c:a1:2c:7a:d9:c3:5f:86:d0:54:1c:e8:34:
02:f3:38:47:43:1c:23:70:da:13:fa:f2:d5:b8:e7:84:67:c1:
24:a1:78:3c:0f:0a:92:a5:7d:97:0c:dc:20:32:63:bc:e6:ef:
56:b3:f6:c7:1c:b9:ce:31:e7:17:f1:e5:91:ca:6c:00:dd:29:
1a:74:4f:81:c0:b0:38:f4:c4:c0:26:5b:b6:ba:12:88:92:f2:
76:bc:2b:5a:2e:f1:0a:ca:dd:71:90:5e:b9:12:bb:9b:0d:8f:
b4:2c:18:24:97:9e:33:1e:09:ce:dc:40:4a:24:03:86:40:a9:
19:14:61:fa:b0:00:c8:97:01:b0:c4:09:08:69:77:7a:46:f6:
15:73:6f:c4:9a:e5:19:50:9d:5b:8c:8c:5a:36:51:28:72:10:
ff:73:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:28 2025 by rpki-client