Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier: m3GTNo3X9WFsBpImThSY1b3f7c+LXPHUT8zu44MFMYY=
Subject key identifier: E8:A8:6B:4E:E2:CD:62:97:56:F8:BD:05:74:C6:D9:F0:3B:49:B6:0D
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 0199FC2164A64AF4C2360010FE6C22DA6E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: 7OXvgMwCIy0+HcF4HhRr1DRUm52KTmk5sVs1+fF9ER0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:64:a6:4a:f4:c2:36:00:10:fe:6c:22:da:6e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=e8a86b4ee2cd629756f8bd0574c6d9f03b49b60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:1c:41:2e:12:52:9a:17:f2:93:70:66:58:
4e:9b:4f:86:04:4b:af:cc:62:6b:af:36:20:6b:fd:
d1:c2:63:14:a4:71:08:dc:5f:55:33:49:ec:52:a4:
a5:2b:bb:78:c4:65:9e:9b:31:ed:aa:8b:f3:d7:9b:
65:d8:43:66:0e:0d:5d:34:01:e8:8c:34:80:e6:4e:
fc:ca:7b:fc:81:82:a0:d8:07:a1:e9:fe:0a:d3:52:
3e:3c:2a:f7:f8:f5:7a:2f:27:be:2c:eb:d7:78:d6:
fe:e9:5b:fe:5f:1f:d8:5b:4f:d5:e7:6f:a8:62:7c:
04:08:15:46:6c:b1:2a:45:4c:f1:49:fa:3e:38:d3:
67:6d:82:31:d6:82:61:c2:fe:c2:ac:ea:72:0b:56:
59:de:63:f0:66:b9:90:fd:b2:1f:ef:51:03:97:b4:
5a:54:52:96:76:cd:37:c4:10:85:b2:38:b9:fa:19:
46:98:d5:cb:92:c2:ef:c5:60:2e:6c:df:64:ca:ea:
b1:a8:2f:39:68:33:26:46:37:17:bb:9f:fb:1d:58:
b5:98:1b:64:15:4e:e0:71:ee:96:e1:6f:cd:69:98:
ff:96:c2:af:6d:15:9e:56:b1:55:b8:51:87:0f:26:
5c:cc:a9:66:4f:60:73:a3:c3:4a:99:8a:f1:37:85:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A8:6B:4E:E2:CD:62:97:56:F8:BD:05:74:C6:D9:F0:3B:49:B6:0D
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:33:d9:0a:ab:81:06:0d:1e:3a:00:55:4e:a0:57:05:ee:75:
d2:1d:ae:a1:f8:ac:23:6d:5d:8c:08:cb:56:25:d6:62:e7:65:
14:fb:f0:84:ba:a5:34:fa:dd:95:72:ca:8a:1a:15:33:bc:8d:
62:46:06:bd:7c:2c:62:72:e9:c4:96:ed:9b:85:cd:de:32:d9:
29:09:d2:e5:ef:c4:ae:83:67:85:34:68:20:23:72:e3:be:85:
d7:3a:44:ee:77:74:f4:07:21:11:95:50:8e:d4:01:16:ac:17:
59:e6:83:c7:4e:86:4a:de:80:c6:6e:ed:2d:b3:d1:18:78:6d:
fd:60:87:3f:bb:a4:ab:f7:40:74:82:72:b9:3b:dd:c5:83:ea:
98:1d:18:62:d1:2a:f5:c3:ea:80:2f:5f:f3:c0:4e:54:01:71:
3e:16:96:17:f3:93:1f:cc:e7:d8:c2:6b:9d:a0:82:42:9d:5c:
6f:7a:41:bf:2f:57:6f:10:d6:72:e9:40:5f:17:79:e0:3e:b2:
99:fa:73:91:3e:c0:41:2e:88:dd:46:89:b3:d7:33:39:c5:c1:
fc:62:a4:e8:f0:01:9e:c5:e3:7f:65:0d:e2:4c:1f:09:1c:89:
49:c0:b8:16:40:d4:46:8f:da:a9:68:f6:86:ae:bd:7a:41:c6:
bd:33:a5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:33 2025 by rpki-client