Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: SmSp62uoRU6QP+ECSukPfG7FFBZcOTQQkHxVJ9wBW5w=
Subject key identifier: 00:59:C8:F5:07:DA:48:BE:7D:08:F1:BA:54:00:B3:87:E7:7D:2A:0C
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 0199FBEAB2ECC7A4A6B1F4D0E3A2381BC75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 0350
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=)
2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: rpTWapEbgNSgn9TDf6FpTXilFp66FjMoEx/bg1cecow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b2:ec:c7:a4:a6:b1:f4:d0:e3:a2:38:1b:c7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=0059c8f507da48be7d08f1ba5400b387e77d2a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:09:2b:22:83:da:2e:00:a8:52:36:60:27:
59:f0:49:2e:8c:86:05:58:4e:d3:04:14:dd:b8:81:
67:d1:b9:66:49:b0:e1:27:72:5b:9e:37:2b:56:e9:
41:6a:0f:69:10:e2:60:d7:d8:18:3b:7d:ff:ca:6e:
8f:2d:8a:03:4c:d3:e4:75:70:99:70:e0:bd:16:36:
3a:6a:cc:5e:2f:69:2b:6d:07:48:8c:6f:01:8c:46:
ee:c8:0d:51:a4:7b:a0:78:e9:a5:3f:3a:2c:e2:6b:
9f:ce:cf:14:d6:bb:2d:dd:de:aa:c3:7c:e2:ec:1a:
c9:1f:75:08:7e:be:b7:1b:8d:24:64:a8:09:89:c4:
1e:56:b8:bd:c7:bd:3b:c5:8a:5a:2e:cf:7a:66:0d:
6d:8c:cb:d9:3d:9d:5a:13:31:a0:b6:c1:2f:c5:41:
65:73:d8:fb:ac:c7:fd:62:0f:28:0f:a2:de:d6:ca:
55:47:94:1e:78:00:94:84:25:15:4e:fa:a4:fe:7a:
56:6b:46:e0:c0:1e:d6:fb:6b:36:3d:f4:ef:50:16:
aa:55:f4:81:03:5d:54:7f:47:f9:d8:79:d9:93:24:
e9:f2:92:39:09:c4:bc:3e:74:2c:00:66:08:62:42:
19:d4:b0:1a:71:fe:32:66:45:72:f2:c6:c0:a7:0a:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:59:C8:F5:07:DA:48:BE:7D:08:F1:BA:54:00:B3:87:E7:7D:2A:0C
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:91:db:2c:11:e1:22:b1:8e:aa:71:3f:80:03:22:bb:56:7b:
76:ee:06:f6:1a:58:82:5d:7a:9c:1b:30:1a:93:86:6d:ab:3b:
55:8c:cb:55:e4:3a:34:14:84:f0:2c:f8:cb:c3:dc:bc:a5:98:
b1:f0:1f:1e:c5:ae:97:22:3f:3b:d5:6c:25:93:66:64:cc:e7:
d0:04:ef:95:bc:ab:6c:86:3d:c0:6d:30:ff:47:94:cd:d8:6e:
bd:72:b8:2a:af:87:e4:e3:28:95:e9:36:4d:f3:d6:dd:52:b2:
94:c7:ac:63:d0:1f:03:04:ae:45:50:2c:87:0c:22:fc:25:e9:
0a:2b:10:a4:a9:54:d2:83:ef:db:ad:19:d2:3b:b8:36:d0:04:
35:06:63:43:52:35:3b:c0:13:4c:82:25:c1:c1:3b:38:32:1c:
4f:50:cb:c7:1f:60:27:88:9c:c5:ef:e7:89:68:66:cd:b9:e4:
36:36:2f:27:6d:3a:97:b6:af:3d:52:c6:fd:49:13:34:d0:bd:
91:30:67:89:e9:f5:b0:81:c1:6b:7f:97:dc:bb:ae:a5:ce:69:
c7:a7:97:61:f2:8f:c8:e6:6f:6d:da:a2:b0:ca:11:3b:3d:74:
a7:5b:ca:9f:5f:b8:88:44:60:3a:df:f6:b9:a4:3f:55:e3:9a:
e3:4e:50:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:25 2025 by rpki-client