Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: Jx8l7+MXyDukh5Li9dlzAeM9Sg/CAFqG/TIsHAFU7z0=
Subject key identifier: E2:84:37:B9:10:5B:D7:B5:71:DC:E7:0F:DC:2D:E8:05:98:71:10:17
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 0199FC21908A62593D977595C0C992150087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: UAOKS7RWrFwleAnS+yRK9rH0cMc7oTIA4AcAj7JF3uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:90:8a:62:59:3d:97:75:95:c0:c9:92:15:00:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=e28437b9105bd7b571dce70fdc2de80598711017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:56:82:4f:ec:7b:12:0b:03:14:2b:e5:32:b5:
fb:28:3f:82:f4:11:44:d3:5a:ce:28:9d:82:dd:eb:
49:58:c2:7b:71:22:42:2d:63:b8:1b:42:33:e0:06:
e2:b8:37:a5:cd:a1:3e:af:26:1a:12:9b:23:c8:90:
bc:2f:57:26:ea:7c:e4:03:02:21:a2:53:04:af:a1:
00:22:5a:f9:ef:5c:a3:2c:ad:e7:0f:31:62:29:fb:
fc:df:10:1c:14:ef:fc:06:65:5b:2d:39:29:6b:53:
e7:30:16:66:62:ca:5d:e5:5f:e4:2a:d9:da:ae:42:
78:39:5c:9d:8b:5a:47:f0:24:00:56:8a:09:d4:8f:
6c:f9:a7:5e:ca:e5:b7:b1:e4:e4:b8:9c:ca:b5:54:
e3:d9:6c:47:6c:37:96:0c:2e:ba:b3:9a:9e:0b:c2:
2c:16:0a:02:ab:b7:75:61:ed:e9:c5:21:ef:98:45:
ac:58:51:d8:ff:ae:45:aa:7f:3c:4a:d9:9d:a3:fd:
fa:18:84:c3:03:9d:8b:cc:fc:fe:02:6a:9a:03:7d:
77:f1:51:2f:f5:4d:46:d1:59:11:8a:73:1a:c2:46:
f5:4c:0d:4c:b2:15:ba:14:70:0c:05:1f:a5:bc:b4:
f5:a6:32:37:30:fd:9d:b5:58:95:24:0d:55:c9:4d:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:84:37:B9:10:5B:D7:B5:71:DC:E7:0F:DC:2D:E8:05:98:71:10:17
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ce:1d:03:31:ee:26:38:6c:e7:11:09:0b:54:1a:3c:0c:17:
e4:06:06:13:74:eb:73:e1:af:3b:39:38:5d:61:72:67:31:24:
b3:c5:03:da:8f:c2:f5:66:25:a1:14:fd:50:df:0c:06:8b:6c:
ea:99:81:66:76:cc:2c:eb:c0:7f:c6:03:31:a2:68:f1:e4:ec:
22:28:41:c6:cf:62:41:7e:1b:1d:d8:96:55:f3:d0:57:9b:28:
16:55:16:9e:5a:60:7f:9c:85:94:77:24:30:e8:fe:ed:4d:13:
40:6f:31:50:ea:a6:c7:49:22:0e:8e:1c:7f:d7:78:84:bf:12:
e2:61:ed:33:26:ff:81:d2:83:b8:71:80:4e:03:52:7f:a7:da:
b4:3b:88:5e:1d:94:97:1b:80:64:09:08:a1:6a:a7:dd:8c:8c:
aa:16:06:87:cc:b0:57:c3:97:b6:01:10:6d:01:99:03:0c:52:
d8:1e:2a:92:9f:24:04:75:91:b2:ce:9b:1b:e9:8b:ba:09:17:
7d:da:08:f9:59:da:a3:c5:bf:08:35:a3:36:fe:54:3c:09:a7:
a6:b5:cc:10:4c:78:06:38:69:dd:4e:08:cf:1a:9b:a3:9b:ef:
b2:1a:93:95:89:7b:af:f7:e9:41:47:6a:35:7f:e0:15:96:16:
18:63:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:28 2025 by rpki-client