Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: wkexDIDaf1ntyf4phAAsmxTQ0J7/8JhfYN7t/JidAko=
Subject key identifier: 55:E0:4B:DB:23:43:EC:21:9F:E6:50:4C:EF:1B:5D:40:AF:2E:F8:72
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 0199FE4738C703D678540F2DE1FBA8A34430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 03FC
Signing time: Sun 19 Oct 2025 21:01:44 +0000
Manifest this update: Sun 19 Oct 2025 21:01:44 +0000
Manifest next update: Mon 20 Oct 2025 21:01:44 +0000
Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: bif1sUjbh2E8bK80fdjjlB/TzPShV3Y6tJ6xHwxAAck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:38:c7:03:d6:78:54:0f:2d:e1:fb:a8:a3:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Oct 19 21:01:44 2025 GMT
Not After : Oct 20 21:01:44 2025 GMT
Subject: CN=55e04bdb2343ec219fe6504cef1b5d40af2ef872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:f0:9f:48:ba:64:5c:10:fe:5c:68:0e:e8:
61:a6:13:48:32:bf:84:7e:21:29:dc:35:e7:f7:7e:
c8:97:03:3c:9b:df:02:da:f1:0a:6d:58:a2:a9:ab:
fb:c6:3e:9c:6b:03:73:97:4e:4a:d3:62:21:f0:ee:
46:46:c4:7d:cd:56:6f:31:1d:cc:c5:00:f1:a1:91:
df:0e:37:78:15:41:67:4a:09:7d:09:3d:30:2b:5b:
65:17:e2:5a:79:71:67:e1:9d:df:c4:94:38:84:82:
df:d8:a5:1c:e3:9c:47:f3:b4:ab:25:2c:ee:e5:0b:
af:c5:4d:a2:d9:3e:6b:d2:b2:1c:29:f1:fc:a5:40:
52:28:ba:b9:c3:cd:d2:8e:d1:1a:cb:ae:e1:86:a0:
6c:2d:cc:8c:43:8e:cb:a6:6c:76:f1:e6:8b:e8:72:
25:2e:fb:bd:8f:11:8c:82:75:a4:90:88:ba:1a:9d:
ec:5a:2d:82:83:84:3e:7e:15:ce:4a:96:23:c5:88:
42:68:b2:4d:e3:17:48:bf:63:f8:f3:de:ee:a4:4c:
bf:de:93:63:dd:06:4d:0c:68:de:91:7b:dd:fe:6c:
5f:53:12:f4:15:0f:5c:57:31:0d:d4:e5:2f:2a:49:
3d:e7:d3:b4:51:d0:78:a7:59:e4:77:ad:e9:41:8a:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E0:4B:DB:23:43:EC:21:9F:E6:50:4C:EF:1B:5D:40:AF:2E:F8:72
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:24:86:30:d5:c7:8f:fe:bb:5a:ec:3d:8f:43:8f:bd:fd:5a:
a6:70:c3:24:fc:97:2b:b6:45:c8:fc:d9:d1:54:5f:90:89:02:
0e:52:3e:75:cd:4c:d4:ab:7f:9a:72:d6:a3:23:23:02:00:64:
54:ae:49:e6:e1:d3:3b:1e:f7:97:2a:1d:04:ab:4b:40:c6:8c:
9f:fb:68:51:e1:b6:33:43:47:f7:1c:e9:b8:4c:a4:a7:8d:8d:
e2:77:ab:95:9c:c8:fd:79:60:76:6a:7f:e2:0a:3b:61:19:6e:
cc:5a:ca:94:de:21:ac:f5:7d:20:26:34:a9:f5:ce:42:7c:7f:
d6:2d:e3:52:f0:c2:18:6f:f0:92:04:93:ed:34:6a:57:8f:94:
38:0e:24:6f:f1:99:0f:af:01:3a:2b:23:d4:8c:63:57:2d:34:
8f:30:23:d0:5b:4d:e3:25:0c:7c:dd:51:f2:db:9e:91:06:67:
b2:a7:62:26:00:4c:2c:6b:c4:18:90:61:e3:8b:10:c0:ca:2a:
91:2e:b6:f2:78:c0:7a:e3:56:58:10:93:01:f7:0a:64:91:ff:
0f:18:ec:1d:e0:7d:3b:a4:09:6a:03:cf:f7:b1:a6:44:de:d8:
f7:c0:da:65:30:6f:c8:b0:cd:9b:19:c8:ae:e7:bf:1a:22:29:
0f:e0:cd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:06 2025 by rpki-client