Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier: +tsta6PmvfUSZ9XhYlixilzyLZ5Cx2ZYbpTWpTOX7rU=
Subject key identifier: 9E:1E:51:95:20:20:92:2B:22:3F:92:D6:64:9B:66:76:B6:F1:D6:D5
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 0199FD33EA583C99AC3F2A939F12610B280A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=)
2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: 8K6bBwviGntljdrd6HL3uFmLcSCHWxNfbeOliITFfwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ea:58:3c:99:ac:3f:2a:93:9f:12:61:0b:28:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=9e1e51952020922b223f92d6649b6676b6f1d6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:62:53:2a:ad:20:90:5d:e2:7f:89:2e:30:
93:01:af:5d:f8:6a:2a:73:91:93:69:7d:e8:67:de:
e2:3c:e0:7a:3e:ff:ed:52:a3:86:da:de:16:f3:3b:
1d:d0:e0:24:6f:50:84:14:92:60:22:0c:54:14:8c:
8e:f4:e0:6e:f2:5b:0f:d2:28:2c:a4:b9:6d:b9:0e:
1c:4b:0b:ce:44:8b:50:83:54:27:4c:a8:2a:23:a4:
9d:d9:7e:9b:33:ad:54:37:bb:0f:16:b1:97:b3:4b:
b3:8b:68:e4:f1:5d:1a:aa:69:72:32:88:96:bf:8d:
53:ae:60:84:44:29:62:e9:42:48:6a:62:c2:54:06:
f5:af:aa:90:67:b1:38:99:0e:88:cb:70:f2:df:62:
96:ca:89:2c:f4:ec:4b:a3:a7:e6:f9:61:96:88:57:
65:bd:3b:fd:db:9b:7a:e4:a2:82:c1:9e:4d:cc:f6:
d2:ad:30:28:93:31:c5:04:58:4f:df:85:7d:be:03:
f7:3d:61:03:22:7d:8c:62:31:55:e0:9c:39:7e:ce:
aa:0d:4e:43:9c:f7:97:e2:71:be:e9:c9:3a:8d:f9:
a9:69:0f:ce:ba:1a:6d:cb:6b:2f:5f:fa:6a:45:88:
e8:1b:21:fa:e8:e0:e0:7b:b6:00:2b:de:f5:9c:a1:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1E:51:95:20:20:92:2B:22:3F:92:D6:64:9B:66:76:B6:F1:D6:D5
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fb:0f:cb:21:3d:34:96:3c:c4:47:61:43:ab:64:30:0a:34:
3b:f0:be:29:90:7c:94:9a:cd:21:68:cf:7c:d8:cd:46:fb:72:
ec:0d:1b:4a:4a:48:48:4d:f0:83:6a:97:c7:42:ec:92:13:5a:
d5:56:1f:5d:0c:36:32:c3:3e:e2:66:e2:b4:75:5d:55:ab:86:
fb:c5:45:98:c9:4a:09:da:db:23:3c:b9:9b:08:86:f1:f4:a1:
31:97:c6:13:ca:46:34:cf:2d:06:2b:d8:ad:60:40:0b:ae:e5:
26:e9:f3:01:ff:44:d7:08:66:c4:a0:7c:e3:d6:97:82:2c:38:
9e:3c:88:0e:b9:07:59:30:64:f6:32:cd:3f:1a:e7:95:90:dd:
10:1a:c4:31:6a:bb:f9:29:f0:7e:21:14:6c:c8:f9:69:83:be:
24:a8:76:d8:7e:fc:16:81:df:39:84:31:f7:cd:18:78:77:2a:
58:3a:f8:eb:23:cf:41:83:ea:d8:4c:d4:b7:c7:c3:a1:2d:aa:
14:6d:df:21:b8:3d:33:d1:13:63:28:83:14:6b:52:27:6d:eb:
95:28:f7:cb:d8:27:f1:a1:6b:c7:a9:f8:35:aa:dc:ce:38:df:
22:86:0b:5c:d0:5e:4b:37:59:0c:f2:b6:fd:c0:9e:44:26:a1:
49:42:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:59 2025 by rpki-client