Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: VWO5PyjSgKAXuZmDLpdXJkkK2XyAD7WT7jTbTMaXgGo=
Subject key identifier: 3A:CD:F3:1C:B0:EB:66:1F:0E:93:7F:33:72:8A:17:5B:03:31:00:9E
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 0199FCC62A1B32730A610E31F43F8FD24A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 16F6
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: 9IlAbp1PimfMulUFBj5XJ2cHEhtQ88V5B1mWQvQcOcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2a:1b:32:73:0a:61:0e:31:f4:3f:8f:d2:4a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=3acdf31cb0eb661f0e937f33728a175b0331009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:57:fe:a3:78:43:ee:55:6a:f1:8f:d0:c0:
a4:c4:8d:f8:84:5d:a4:e6:b3:89:48:2f:e7:9e:12:
df:d7:bc:29:f7:00:94:f0:bf:b8:42:69:a6:eb:6b:
67:e1:80:a1:0f:17:c0:e0:79:59:d1:d6:4b:69:d7:
b1:d1:31:4b:2c:84:fe:11:c7:52:f2:70:e1:5b:a9:
52:85:76:ce:ce:0b:77:15:46:19:a2:24:21:2a:8e:
b0:35:71:ed:52:ab:dd:46:0a:f7:3b:b5:5d:ed:38:
c7:6b:47:11:6a:32:e8:73:85:95:d9:ed:a7:13:45:
c1:b9:81:35:8c:d0:fb:7d:b0:0c:26:f2:32:48:a6:
1c:aa:ab:10:c5:8b:c0:bc:38:d0:cc:68:06:c3:6a:
8c:93:68:a1:19:bb:7f:19:91:53:1b:2c:54:e2:f9:
12:9b:5b:3b:a7:51:57:81:9b:55:7a:15:8c:ed:ae:
63:77:b8:c9:66:48:a9:f2:bd:15:42:b6:26:85:1b:
fe:2f:a9:dc:f6:63:4b:d4:6f:f7:0f:ef:a7:35:45:
cc:20:ea:20:40:6a:e2:ae:cb:e0:6d:66:b2:b6:f0:
e3:d0:c9:74:72:66:66:9e:b8:89:f2:1e:bd:15:49:
e8:42:9e:32:57:3b:a9:06:2e:1b:1f:ca:15:1c:e2:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:F3:1C:B0:EB:66:1F:0E:93:7F:33:72:8A:17:5B:03:31:00:9E
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a1:62:d8:25:6f:3a:70:14:fe:be:96:5a:3b:a0:7e:2c:d1:
aa:35:e2:00:a6:98:d5:c3:c6:29:bb:62:14:17:db:a2:18:38:
b5:f6:e0:56:52:a4:be:fa:98:6d:b7:62:a8:cc:14:a4:94:cc:
7b:b7:2f:ce:12:2a:39:1c:3b:fd:ce:5d:67:3b:24:22:2e:8a:
d6:c9:67:09:04:10:2d:10:f6:ff:24:25:7c:15:68:30:17:ae:
ab:e5:e1:bd:61:a7:ed:b8:45:21:79:21:26:d6:54:17:2b:3a:
64:96:33:d7:76:35:17:e9:b8:b0:5a:6c:25:e7:d1:a0:bc:59:
4d:2a:02:28:ea:17:f8:e9:b8:2c:ba:31:e1:a2:0e:25:1a:54:
22:21:d8:d9:87:69:19:6c:ca:eb:0d:ec:71:d0:f5:2b:34:95:
c7:89:93:0e:e2:d1:1a:62:2c:90:aa:2d:e6:bc:a5:2d:f4:43:
e6:d9:0c:5f:3a:ba:01:7b:b5:2a:a9:c5:71:ec:79:1c:0b:e1:
82:cc:39:f6:b2:74:53:ff:47:a5:19:5e:ed:4c:37:37:2b:74:
e1:13:64:c4:68:8f:03:1c:fe:4b:33:f0:41:b5:b3:61:a2:81:
78:b8:0d:97:ed:0a:ea:92:af:70:43:f4:24:9b:c9:c0:4d:b3:
12:f7:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:49 2025 by rpki-client