Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: zKiY6aD4d7oKRS8O1xWlJSfOlRNuHtq/xGzIxiCiHbk=
Subject key identifier: E5:AD:96:2E:B6:1B:7B:40:9E:67:7A:D2:C3:8B:F2:67:AF:CE:73:84
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 0199FC58DD7B1F1268613F04284291764BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: uSehoRHWOB+mQFF/fhdeh1MaKpkAmyJ6Xo/WYN/LttM=)
2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:dd:7b:1f:12:68:61:3f:04:28:42:91:76:4b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=e5ad962eb61b7b409e677ad2c38bf267afce7384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:1e:18:49:a5:24:1c:88:c4:58:fa:4f:f3:
2e:36:1d:c5:b7:ae:e3:f1:9e:ad:e0:88:6b:43:b5:
95:da:92:d4:c9:8a:d7:fb:47:37:59:f9:e0:27:e5:
3a:5f:b7:30:72:09:d3:f8:f4:e2:d1:86:09:f0:65:
bc:d6:9f:c6:86:aa:35:2b:83:ce:81:1c:fe:b6:ed:
99:36:d7:1a:68:c5:1f:cd:44:98:c6:ed:0e:87:62:
05:fd:d9:1f:46:90:31:30:14:6a:72:d8:d8:1b:ef:
2c:54:94:8b:45:28:32:02:33:34:ca:d9:ba:58:42:
57:1e:a2:dd:bb:71:2b:8b:44:17:b2:7f:dc:32:56:
4e:49:05:3c:bd:b7:cd:1a:4c:6e:56:10:aa:67:2f:
32:1d:ac:1e:05:51:e4:c0:ce:f8:76:7f:23:29:33:
a1:2e:8b:8d:73:41:14:62:e0:dd:87:7f:21:e2:e7:
ad:44:56:4e:77:0f:c3:ed:3a:4e:72:8d:42:b7:61:
62:19:75:06:1a:62:d6:ec:71:d0:e8:96:6f:ba:8b:
c5:30:62:4d:a8:dd:55:9a:7d:60:16:71:9f:1e:df:
a9:c8:6b:ee:0c:db:77:1d:a0:a8:ee:a7:37:df:e7:
cb:38:ad:6d:41:d0:7d:80:e9:a9:8c:ca:fa:4c:f6:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AD:96:2E:B6:1B:7B:40:9E:67:7A:D2:C3:8B:F2:67:AF:CE:73:84
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5f:f3:2a:68:30:4c:17:f2:53:fd:9a:fa:7d:56:b2:8b:04:
5f:79:56:c5:95:75:78:47:41:07:40:9b:5f:a8:fe:64:47:f4:
b4:80:b6:b3:0a:db:00:00:1f:a0:1b:16:5d:db:64:72:b7:82:
06:40:bf:69:e9:44:4a:2e:7b:38:ba:5f:cb:bb:9f:2e:d5:9e:
27:14:18:26:34:13:4a:bc:ac:27:42:be:ce:f1:06:ea:cb:48:
4a:0f:3b:b8:fa:f8:80:cb:aa:aa:f1:bf:b7:1a:2e:5d:43:11:
db:ce:8a:91:26:2c:9c:ac:a3:15:b1:5f:2b:0b:4c:24:3c:68:
cc:c9:bd:86:d7:c0:00:23:84:13:80:4b:9f:e8:73:b8:a9:02:
ca:69:ef:b8:2d:49:73:8a:b2:19:ff:b3:77:1e:56:f3:44:3e:
89:71:e7:68:ca:09:a6:36:37:1b:69:ec:a9:36:43:f9:fb:bd:
c1:3c:dd:c4:6c:44:65:8a:d8:ea:6f:ae:c5:3b:65:56:63:a3:
1b:c0:07:82:14:19:9d:30:d6:2e:77:1f:e6:7d:c1:8d:e8:0e:
e0:2f:11:40:45:45:90:33:2d:ed:48:24:d1:4e:f7:bf:4a:8b:
4b:95:d8:1c:dd:ce:0a:c2:5e:75:d0:30:ed:38:d0:33:dc:58:
fb:e0:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:37 2025 by rpki-client