Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: qHo44c5amYO4z0qGDgMnzf9gy1flBfVxT0wSJSbLExo=
Subject key identifier: 4C:93:B5:A8:43:77:5B:1E:7C:01:F4:9A:EB:34:92:5A:DA:4F:41:E2
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 0199FCC627904958914AF73AAE9870FDBAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 0654
Signing time: Sun 19 Oct 2025 14:01:08 +0000
Manifest this update: Sun 19 Oct 2025 14:01:08 +0000
Manifest next update: Mon 20 Oct 2025 14:01:08 +0000
Files and hashes: 1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: c+MnRm2XhPmPzrH5223Z91tPUscvc0nDFoA8+OPuZAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:27:90:49:58:91:4a:f7:3a:ae:98:70:fd:ba:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Oct 19 14:01:08 2025 GMT
Not After : Oct 20 14:01:08 2025 GMT
Subject: CN=4c93b5a843775b1e7c01f49aeb34925ada4f41e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:07:9a:39:a9:d8:4b:7e:3f:17:6c:34:ff:
a8:86:fe:88:4c:ba:d7:b8:e1:9f:18:5a:0d:58:c3:
ee:e4:5a:6e:06:43:49:99:f7:11:71:d0:e4:8f:0e:
00:73:f9:93:9a:8b:b2:7b:c0:5d:8c:64:fb:4f:06:
a1:e8:9e:82:1a:7b:48:d2:5f:2c:46:90:f9:ad:18:
50:f8:8f:d4:4d:4e:ad:74:93:d6:83:7b:08:0c:91:
a8:42:7c:d0:36:cd:14:fe:28:12:7a:9e:c9:a0:41:
cd:d3:1c:aa:6f:95:d6:17:d7:44:1e:a4:bc:b2:a9:
5e:72:b0:d0:81:87:32:52:5b:c2:3c:76:08:b7:b6:
dd:c4:f8:ef:7d:0e:43:ca:03:df:17:95:bf:9d:89:
13:17:80:b8:ec:3e:26:45:57:08:f2:75:af:33:0f:
bf:54:d1:9f:0b:e2:05:6d:3d:ad:18:7f:de:d3:11:
8f:00:e9:5a:2d:e7:05:73:83:78:74:b3:17:3e:64:
73:56:d5:ef:f9:9a:e6:85:de:f1:8b:fd:2a:99:19:
d4:01:6c:1c:c1:c1:b5:7f:81:10:94:ac:dd:15:e0:
9e:42:27:24:65:a6:71:2c:60:a3:1b:66:cb:ef:c1:
d0:4a:6c:7e:ef:c1:55:a8:78:ce:06:a0:7b:4b:09:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:93:B5:A8:43:77:5B:1E:7C:01:F4:9A:EB:34:92:5A:DA:4F:41:E2
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:72:77:f0:6c:2f:12:a6:55:e4:58:62:d1:7e:7c:6d:b5:c2:
1f:d9:c8:f0:3a:12:d7:cd:bb:6f:aa:bb:bc:1d:f9:ff:98:ec:
bf:11:1f:1e:92:8e:73:74:17:9e:e4:73:df:39:f4:b7:b4:0f:
e4:b2:b8:c0:5f:51:69:02:26:e4:fc:df:94:98:40:84:1f:66:
f9:e7:c9:77:a6:87:c6:8a:0b:3c:8b:a8:5d:0a:91:ca:a4:ac:
90:84:41:de:1a:8e:cc:a5:67:f6:10:85:d3:c0:ce:d6:10:0e:
43:91:2c:e3:d7:5b:e9:9a:bf:2d:d9:d0:46:1b:2c:cf:1e:2b:
1c:9d:1d:15:37:47:31:aa:bd:44:2e:8e:43:47:63:38:19:21:
c2:88:30:b0:fd:3e:58:f9:17:29:1d:ae:66:34:40:d3:51:80:
4c:da:29:cb:df:db:63:e5:16:f3:9a:b7:62:a8:12:da:df:5e:
f5:cf:a4:e8:77:16:a3:aa:e6:ac:13:8b:e8:56:78:3b:1b:f2:
8c:11:ce:46:7e:be:a0:93:f1:87:79:18:c6:1e:08:42:dd:cc:
79:14:16:b1:30:af:9e:c2:7d:d8:61:41:16:1f:29:8b:fb:01:
82:bd:e7:92:d0:de:35:2e:a8:93:3f:d5:b1:66:bb:3f:2a:10:
38:9f:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:09 2025 by rpki-client