Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: +BvGrLXTJvn0GE17dlSwjvxVMvFVGBw/im/WBr0Hq30=
Subject key identifier: 44:1F:DE:57:B7:43:4C:F2:FD:2D:74:E9:F3:A0:A7:B9:A8:62:2E:1D
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 0199FE47256E2AEC58925B176D106448948A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:01:39 +0000
Manifest this update: Sun 19 Oct 2025 21:01:39 +0000
Manifest next update: Mon 20 Oct 2025 21:01:39 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: p+25AJehBiAPbESMkfEBqQR+xexAu6JwMgrQJAb6Ztw=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:25:6e:2a:ec:58:92:5b:17:6d:10:64:48:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Oct 19 21:01:39 2025 GMT
Not After : Oct 20 21:01:39 2025 GMT
Subject: CN=441fde57b7434cf2fd2d74e9f3a0a7b9a8622e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:c9:0d:6b:b0:3f:4a:ae:a1:cd:b0:e7:f4:
95:5d:9b:f5:e1:20:01:f3:1f:11:ae:de:51:fe:8f:
c9:f0:a9:e9:ed:85:db:d2:83:e1:0f:65:3d:64:33:
bb:79:ed:61:26:b2:88:12:13:ae:c3:8c:41:2f:55:
51:78:e2:0d:b1:5d:27:52:8e:d3:24:d6:8f:a4:a7:
cc:53:62:27:6b:7a:af:32:bf:18:3a:b2:1e:6d:d7:
f2:7f:cf:fe:1e:96:47:67:24:79:22:b3:ff:c7:6c:
c2:4b:cc:0d:2c:f3:66:92:e5:9b:09:b0:12:e1:89:
97:46:45:3f:5e:e3:48:85:5c:34:d0:e0:fe:ed:ad:
e3:2f:9e:15:25:83:58:9e:f1:95:8b:11:bd:bf:65:
de:3d:aa:ee:a2:1c:ee:17:47:f4:0b:69:63:9e:02:
a5:72:aa:c7:d9:1d:ae:d4:2c:6d:57:1e:52:c2:3b:
d3:05:62:75:1d:ad:60:a9:94:23:91:85:18:ec:00:
df:32:bc:3a:bd:9c:3b:a8:bf:e7:e8:28:31:3b:90:
e6:c9:83:12:37:01:a3:ee:74:b3:29:47:0c:61:9c:
bf:2e:44:42:f9:5c:ff:90:08:41:4a:f1:6f:0c:70:
50:1d:11:8a:b8:f6:ba:8e:97:cc:d4:19:7a:a4:9e:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1F:DE:57:B7:43:4C:F2:FD:2D:74:E9:F3:A0:A7:B9:A8:62:2E:1D
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e9:dc:ff:e0:6a:95:3f:6b:90:08:16:7a:01:ce:db:6e:06:
24:a5:9c:25:0f:9d:11:f7:81:29:d2:9b:cc:c0:bc:5d:fb:45:
76:ed:21:2b:5e:a6:4a:e7:85:06:75:eb:da:51:8f:92:dc:cb:
05:ab:d0:22:15:99:56:3c:b0:2f:74:c6:5f:39:5f:39:0c:d2:
15:47:b8:08:b6:f9:a2:38:59:28:55:1e:fe:27:5c:2b:3a:90:
bc:64:e4:a0:65:de:f7:07:8e:e7:d7:f6:2f:98:49:ff:23:85:
b9:84:f7:2b:96:d5:b1:b2:93:9f:3a:6b:fd:0a:ff:67:37:37:
d6:fe:71:b6:45:3c:d7:17:b5:36:d3:f9:bc:12:2f:15:8a:0c:
be:0c:5d:11:79:a1:56:6b:ef:84:1e:b1:b5:b8:98:e9:00:a6:
d8:a1:f2:1e:be:37:7c:d5:5b:6d:3d:28:76:02:9e:17:82:73:
0e:2b:a0:b7:40:81:b4:a1:85:98:fb:bc:9e:a6:31:75:f2:34:
a4:02:6c:29:c1:02:f1:06:a8:06:ea:c1:67:1b:dc:fb:dd:97:
be:d3:43:0f:59:71:6f:9d:ec:89:0d:86:a0:5f:5c:67:9a:2d:
03:fd:da:52:25:3c:7e:64:65:fc:21:70:e8:12:4d:e0:6f:2f:
d4:cf:97:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:26 2025 by rpki-client