Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: QKjgu+NR+RWCLv+OZg4K6VsLrUeAtInSisydl+7ham8=
Subject key identifier: B2:7B:2C:E3:49:5E:78:E5:A4:80:48:52:71:01:3E:38:8A:5F:2A:9C
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 0199FBEA7A5C49D70EFCF13182662880A353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 1180
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: E7khi_dy64NAplQCGIYWONm6XWs.roa (hash: B7pDURftKO1TVaIjuNJYi/KUiJRc83FFsiFwUHpeKCw=)
2: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: cyhuAggtNKhlnNMUAczSeS7gtYrGURM3BZx5ZBK9tPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7a:5c:49:d7:0e:fc:f1:31:82:66:28:80:a3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=b27b2ce3495e78e5a480485271013e388a5f2a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:80:7f:e6:b0:b6:47:b5:f7:a3:ae:ea:3f:
e2:cd:a8:c9:50:27:eb:5b:e6:46:96:da:25:fe:46:
fa:28:5e:a3:ee:f3:0e:ba:00:76:e3:c4:ca:ae:54:
02:47:8f:c9:26:d8:a2:7e:ea:b0:22:06:ff:23:53:
cf:52:ab:d9:76:7a:68:c5:92:f4:db:89:4f:42:e1:
91:a0:48:93:7e:5c:fe:92:06:88:40:1e:3a:13:f9:
ec:01:86:f8:f2:e3:97:83:0e:ac:4b:e9:7d:6d:21:
46:ec:f4:6b:6d:de:1a:d8:55:ff:2e:b9:46:fb:6b:
fb:a0:6f:7e:3c:e0:a2:1f:cc:ad:94:4a:7b:f8:73:
29:a3:d7:8b:ea:81:76:44:17:af:8b:ff:cc:a5:d7:
b9:f5:5d:ff:f5:1b:ec:a5:37:32:f9:eb:b2:54:69:
10:65:56:63:97:af:70:65:82:a5:1f:2a:b5:e3:c0:
d4:11:3f:64:93:69:03:25:da:c8:b8:db:63:39:9c:
58:86:d5:2b:f2:d9:a9:fc:86:04:b4:39:25:37:eb:
a2:de:7f:2f:93:9f:17:b3:1a:b2:74:63:84:7e:21:
fd:bc:c0:81:f1:d0:4a:a5:5c:7a:27:e0:43:06:a9:
7f:36:ed:33:64:e1:46:9e:59:b2:db:e6:dc:56:08:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:2C:E3:49:5E:78:E5:A4:80:48:52:71:01:3E:38:8A:5F:2A:9C
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:52:bf:1b:6f:08:7b:cf:7a:e7:a1:2c:a0:f7:53:55:30:07:
c9:58:46:0b:29:b1:59:8d:d0:a0:70:6e:b2:e2:25:af:aa:77:
cc:62:b4:83:aa:84:4c:90:df:6a:7a:40:6c:51:24:cf:ac:ae:
67:4d:f0:9b:22:e8:1e:8e:12:99:18:5d:57:08:3b:e8:9d:d5:
2d:6b:c5:a8:ec:f1:c9:03:f7:a2:54:af:ef:43:8e:f9:64:35:
d5:99:c2:11:2b:fa:11:c6:db:52:2e:ef:ee:08:5c:b3:33:bd:
ee:37:62:fc:0f:e8:37:af:d4:79:83:6b:07:88:33:b9:34:4b:
9b:d5:39:b5:9e:a9:4a:f5:9c:e7:13:e0:03:23:aa:79:05:53:
35:a9:a9:05:9b:38:6a:17:37:d2:e2:e7:c4:f9:3f:95:1c:de:
84:2d:13:e9:74:4d:07:e5:d9:bd:44:6e:fd:0f:31:4b:56:e3:
08:de:63:b1:98:f8:12:04:6d:0a:eb:32:77:ea:33:37:e8:3e:
f8:2f:1f:c9:21:ea:ac:ba:d8:5a:56:e8:23:47:c5:83:bc:7f:
23:46:09:f6:11:fd:fd:23:a9:73:35:84:8d:b8:6c:30:2b:7f:
b5:34:b1:32:fd:3c:c8:88:55:7c:91:20:aa:9a:aa:78:17:67:
c6:c0:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:57 2025 by rpki-client