Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: ssSgxVqp89YFc/6W+degUK/o4JkrIVa4oAiht1bNsAE=
Subject key identifier: 45:54:09:F6:E7:A7:EF:6C:4D:EF:A5:2D:2F:63:8C:91:F3:4E:02:9B
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 0199FA69D329F5EAF845E1538F21EB3162CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 1388
Signing time: Sun 19 Oct 2025 03:01:03 +0000
Manifest this update: Sun 19 Oct 2025 03:01:03 +0000
Manifest next update: Mon 20 Oct 2025 03:01:03 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: m2/zzdc4BJ5FRz3Ba+qO414E/jkv9oqyIEmL+CAm190=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:d3:29:f5:ea:f8:45:e1:53:8f:21:eb:31:62:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Oct 19 03:01:03 2025 GMT
Not After : Oct 20 03:01:03 2025 GMT
Subject: CN=455409f6e7a7ef6c4defa52d2f638c91f34e029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:27:2e:89:a2:9d:f8:23:0b:30:5e:1b:22:
47:e5:99:eb:51:b3:ec:90:fc:31:65:32:e2:a8:a3:
88:73:56:23:a5:db:bd:86:00:79:d7:36:65:15:18:
30:b4:25:cd:48:91:6c:19:a2:55:86:e0:17:ab:52:
0c:96:24:f3:d1:bc:c3:a6:57:79:5a:66:dd:c9:aa:
9f:3c:a8:6b:47:dc:4e:c3:a1:2b:79:5d:fc:a6:5a:
04:a3:55:63:be:74:d5:71:29:cb:1a:b6:71:0d:b1:
d1:3a:67:61:2d:a1:6e:f8:d5:1f:a8:a1:fb:f4:b1:
8d:25:fe:b9:f2:f2:81:4e:b3:e0:54:67:6a:69:16:
ef:d0:6f:1b:24:f8:90:1b:fe:98:34:53:00:c6:3e:
cf:97:f0:70:ed:1e:dd:be:7b:5c:2b:8e:d0:86:e0:
fa:1c:9c:24:bd:f5:56:ae:98:76:df:7e:81:b8:ed:
d0:f1:b8:f7:db:1f:64:1b:b6:d0:63:eb:01:15:0e:
6e:c6:7c:93:23:0d:a1:57:b5:5f:51:0b:a0:e6:5a:
9b:18:87:e6:09:b7:38:56:b2:cd:8d:7d:a4:51:51:
1b:e1:9d:16:44:be:11:db:3a:87:94:ed:c8:13:d7:
8f:02:25:ef:2d:6a:ca:55:81:92:a7:11:fb:2f:c2:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:54:09:F6:E7:A7:EF:6C:4D:EF:A5:2D:2F:63:8C:91:F3:4E:02:9B
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:3d:ab:56:a5:e8:64:55:cf:47:ec:9c:b8:d4:f6:ed:42:
40:c3:b5:a7:07:3d:0a:c3:fe:bc:0d:c9:23:25:ef:40:79:2c:
a6:23:7b:8c:04:58:dd:6a:14:d6:98:f4:3a:dc:23:e4:79:10:
d2:cb:13:e0:1d:d4:e1:0c:f2:b6:da:b0:ad:69:58:14:91:da:
de:4f:73:d2:bd:9a:3d:98:79:30:01:9d:2e:ee:58:91:40:ee:
1d:21:31:8f:70:94:1d:65:7d:29:be:aa:b4:55:b9:37:05:eb:
fa:89:35:40:15:43:cb:81:f3:29:2a:10:16:b1:ae:f9:f4:46:
04:5d:3c:56:c6:9c:09:c0:b2:c1:73:d3:8a:49:e0:ef:40:34:
48:42:22:00:24:dd:7b:45:ae:2b:97:f6:7f:9c:16:92:7d:8f:
dc:89:3e:4b:29:32:bd:29:63:f9:d1:0a:c2:67:14:95:28:85:
82:3b:96:a7:ff:f1:92:96:53:0b:f8:ab:87:02:c6:ff:fe:30:
69:c8:25:32:af:53:f6:71:b0:19:ec:05:11:d1:88:8c:30:61:
00:18:61:97:d3:05:6c:6b:7e:51:2a:19:0a:dc:13:f8:ca:f8:
81:7b:b6:94:31:be:85:03:4e:be:15:9e:89:0c:c2:09:39:98:
ad:6a:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:52 2025 by rpki-client