Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: /9BptnJEpGPWrGL5Og9OUrhWvmOuAykLarmHwKbirrw=
Subject key identifier: 65:44:84:0D:E5:2A:9F:2D:AA:74:F9:A0:A5:F9:EE:16:55:08:87:21
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 0199FBEC66D66185A6506EDB85F5F3627751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 09A2
Signing time: Sun 19 Oct 2025 10:03:17 +0000
Manifest this update: Sun 19 Oct 2025 10:03:17 +0000
Manifest next update: Mon 20 Oct 2025 10:03:17 +0000
Files and hashes: 1: YDAV-stFbBYknK-MHQjAFGKIviM.roa (hash: SdDeY9dzrBZujPQFvilvXbGOkdZa6vv8FLkLN5jjZVw=)
2: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: iSm50Mxnzc/9rRJ1imsVYUsbOBCWagKfDjn7rdW6Pcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:66:d6:61:85:a6:50:6e:db:85:f5:f3:62:77:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Oct 19 10:03:17 2025 GMT
Not After : Oct 20 10:03:17 2025 GMT
Subject: CN=6544840de52a9f2daa74f9a0a5f9ee1655088721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ba:0f:07:8c:aa:1a:fb:cb:55:d7:7c:27:60:
fe:a9:15:31:25:18:92:b6:79:ae:8c:05:b2:b0:18:
a2:a3:d6:7d:4f:06:74:39:95:5c:d3:6c:fc:a6:c4:
2d:32:63:f0:de:c7:5a:c1:20:97:38:0c:0a:a8:a3:
c4:e5:bc:a4:b5:f3:88:f2:ee:e2:4b:35:2c:e7:38:
4e:db:95:b0:43:69:c3:73:60:69:9a:ed:54:96:ba:
bf:61:d4:2d:73:10:8f:f1:68:78:b2:97:ed:fb:e6:
38:bc:80:67:f1:f7:b2:8a:c6:cd:48:cb:10:cb:79:
8c:cd:ef:0a:b9:dc:45:4b:8c:0d:37:04:89:b3:8d:
ea:53:38:42:ad:e5:6e:c4:ee:82:a3:14:bf:a3:d8:
a0:5c:af:17:cf:89:bf:52:2d:26:36:72:3d:5f:d6:
49:ff:01:0d:0f:8b:16:6c:48:6d:40:30:d7:96:fd:
9c:ee:60:18:5f:7e:37:9b:98:40:b5:ad:81:19:dd:
96:51:76:87:e9:b3:0f:9b:5d:2b:34:af:5f:80:a0:
c9:67:66:42:90:e4:52:f0:cb:1e:32:6e:bd:a6:d5:
22:d0:98:77:55:6a:e5:56:71:39:e8:80:33:55:66:
de:3c:f7:0a:65:92:71:5d:00:33:46:8d:8f:0f:dc:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:84:0D:E5:2A:9F:2D:AA:74:F9:A0:A5:F9:EE:16:55:08:87:21
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0d:4d:32:12:f5:d7:e6:92:59:2c:15:c0:b0:59:7d:9c:11:
2c:3c:9d:4d:e6:39:e4:5f:96:66:8a:42:e5:50:d5:c2:ff:9f:
a0:b2:dc:44:23:46:ff:ec:d1:70:a5:ca:c7:08:3c:02:dc:82:
96:68:4b:63:71:d0:9a:49:48:c1:cc:7c:c0:bc:79:0a:f4:6f:
60:b1:48:e0:2a:3e:86:a1:66:5a:a5:b6:03:aa:f8:36:06:6e:
2b:77:a9:67:ae:64:e5:17:12:ce:78:1e:02:84:17:7c:e4:32:
51:99:9a:49:85:13:91:f0:16:1f:4e:43:65:96:9b:94:fc:79:
57:4f:2e:6e:cc:07:79:c0:68:b4:88:56:26:28:c1:9c:cc:a9:
02:04:9a:7d:af:ec:26:bf:0c:d5:20:a6:ff:81:79:f5:7a:cb:
53:f3:84:66:c0:0b:8d:81:bc:cd:46:49:c3:30:79:b3:f6:17:
71:7e:6f:56:9d:9b:ad:75:44:85:59:f0:7d:a1:31:65:38:b9:
2b:fd:a4:f7:e0:66:27:9c:3f:86:ff:76:bd:93:f5:44:a6:17:
ee:ad:bb:d4:31:28:8f:09:ba:65:85:01:0e:f2:ef:97:84:38:
1a:d3:48:23:6b:d9:a8:1c:2e:b3:e9:55:aa:71:9a:1a:a8:98:
af:12:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:49 2025 by rpki-client