Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: +ITCWgnUuG1yGKrA/FbbY22Chj3fcxzBRkl9eVaM3VA=
Subject key identifier: F1:20:DE:A0:E5:2F:63:88:31:41:17:AE:16:24:07:15:76:8B:B7:7C
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 0199FD34697D182E7B288BCE9156FD322389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: 7wXOwJj7KtQtTPPweCDfpdyH+WQbFiGG2cL62q7SG+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:69:7d:18:2e:7b:28:8b:ce:91:56:fd:32:23:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=f120dea0e52f6388314117ae16240715768bb77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:e7:14:a6:69:b9:4e:1a:3b:1f:d0:6e:cd:
19:fc:99:76:17:b8:a2:57:63:31:b9:ca:41:ad:f6:
7a:84:39:3f:37:27:ee:10:43:13:f4:0c:c7:da:3a:
71:50:fc:7a:c8:c2:a2:70:33:52:01:1b:bd:ce:6d:
b0:a2:52:01:94:94:6d:3e:3a:04:97:a8:cd:bf:2e:
36:73:4f:58:ed:da:20:25:3e:73:ca:75:6a:9e:21:
dc:7c:d4:1c:bb:37:ca:df:b3:10:8b:25:0f:78:9b:
b1:e0:14:69:6c:4c:df:dd:13:72:11:c0:88:45:74:
ef:5a:46:b6:76:d1:a7:0a:30:fb:bb:d7:6d:a7:77:
2b:02:f0:42:1a:c0:6c:a6:a8:f0:d8:61:8f:ed:32:
cd:f6:23:9e:02:0b:c1:fc:0c:1f:4b:8c:e8:aa:b3:
68:cb:69:9d:31:e4:41:6f:71:15:3f:61:aa:c4:e6:
a5:fe:d9:45:e4:91:86:fc:4b:88:16:d8:9f:1f:ac:
dc:b7:18:d9:0b:1c:49:9b:e1:97:14:90:d4:0e:7d:
c5:52:0f:7e:0d:ae:ff:54:65:76:3f:14:2d:be:d8:
bf:8c:2a:06:33:46:54:14:7d:b4:97:39:90:22:5c:
b2:f3:36:85:fa:37:5f:1b:ed:d3:65:78:b5:35:e9:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:DE:A0:E5:2F:63:88:31:41:17:AE:16:24:07:15:76:8B:B7:7C
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cf:11:fe:27:e7:5a:ae:5f:e0:69:5a:d2:b9:de:64:a2:f6:
0b:32:6c:84:0c:e9:fe:cb:f6:65:7a:d6:bb:20:57:6c:9a:32:
0e:92:d0:3b:bc:d0:bd:ae:c4:41:42:3d:dc:7e:cf:b5:d3:03:
2f:0f:1a:5b:45:20:d8:03:d4:02:5c:d5:03:ae:45:d8:b2:83:
88:3a:c7:84:6c:03:d3:41:d8:2e:d7:8c:23:d2:e1:da:a7:83:
e4:6b:d7:4c:7e:5c:d6:cf:91:cb:33:f5:48:3f:40:02:52:87:
73:d8:60:23:d2:f8:2f:b4:bb:cf:3b:ab:2d:af:78:ed:af:b7:
77:e1:9c:5d:e0:78:69:37:a7:89:e7:f9:5b:5e:86:7f:09:29:
dd:2e:93:f6:6c:ca:1e:8a:16:c6:5b:fc:2a:f6:79:e8:57:87:
a3:a0:6c:0f:ee:11:c0:9c:a9:03:fb:59:be:90:ed:5c:cf:ea:
d4:bd:6f:97:9d:cd:60:e9:6c:2f:99:50:48:6c:e7:14:e5:9f:
ef:15:d7:0d:ab:3f:eb:34:83:4f:47:47:a7:4b:24:d5:95:4c:
0d:93:8a:cd:f5:0a:6a:7f:97:ef:1c:8d:1b:77:c2:09:d4:46:
ef:10:3f:4a:d5:6b:f7:ea:a8:62:25:2a:75:dd:9b:70:36:33:
e8:fc:5f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:21 2025 by rpki-client