Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: m/drBvZJPO6kFV7kcI14Azx1kSVQdKipV52GBLXg7VM=
Subject key identifier: DA:17:9A:E8:9C:AF:5A:AE:A7:8E:0D:10:DA:B2:B0:3A:F2:3E:F7:6B
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 0199FCFD85044729A0C76DD3D2C9B48085FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
3: JYtV1xya2PeTYSiqPGeg1v3D1hU.roa (hash: jSaIThGpGsn1CtL3kupT6o9d7MS0BOry41A4muvp5uA=)
4: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
5: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: CvXfjUtwjVMQqO65vJEbNwe/87yPbQwY0liRnaUSo88=)
6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:85:04:47:29:a0:c7:6d:d3:d2:c9:b4:80:85:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=da179ae89caf5aaea78e0d10dab2b03af23ef76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:e1:21:ee:73:08:d9:35:af:ed:d1:13:fc:
b9:ad:08:8c:c4:99:82:a5:d8:dd:31:a5:1d:49:b6:
39:cb:c9:1a:0d:6a:0c:46:29:c6:d0:15:21:ce:38:
3e:8c:00:fa:09:ee:4a:39:4e:17:ee:36:1f:fd:ac:
32:4c:31:f2:c3:05:c5:02:29:06:f6:26:2b:21:2c:
29:ac:6d:f2:e9:05:f9:36:15:47:55:46:97:92:20:
ed:f6:c9:2c:3b:2f:54:e3:e2:d1:5c:2e:48:21:b1:
19:88:d0:15:a8:cb:06:c0:b5:26:8d:ae:ad:12:e6:
3e:22:84:85:9a:bc:91:41:af:ce:cb:7a:cc:14:b5:
c8:c4:2e:f9:07:ca:ae:d9:a9:6b:76:a0:48:5b:fd:
71:bc:73:d6:0e:af:e0:71:b0:34:3e:02:52:42:c0:
0d:9b:3e:fa:20:d7:5e:a6:63:59:2f:42:da:03:3f:
62:ce:8b:90:ed:6e:29:49:e6:ff:c3:a8:f5:4f:bf:
57:95:cf:f7:e9:74:a0:c4:a4:6b:39:fe:eb:5e:e2:
92:0f:bf:86:cc:54:83:d7:3a:7d:ff:20:a8:d8:eb:
15:d9:13:dc:d7:48:f1:8d:c5:1f:fe:cb:e6:f4:67:
59:fe:bf:17:48:b6:b0:d6:ee:4f:0e:94:94:cd:d4:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:17:9A:E8:9C:AF:5A:AE:A7:8E:0D:10:DA:B2:B0:3A:F2:3E:F7:6B
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:85:98:cf:80:52:3f:e3:3d:a8:46:cf:e8:ab:ef:67:89:
ec:1f:9c:7c:8e:d3:c2:fc:a8:a2:f1:b3:ff:e2:d4:7f:b3:c9:
f3:a7:00:35:42:2f:e4:71:8c:45:e3:fb:af:27:76:3f:61:46:
fc:28:3b:c6:79:81:d0:e9:95:87:c4:f0:5f:1e:ce:5c:d6:68:
2b:df:ec:fc:db:6a:1e:81:47:22:83:dc:8a:b7:57:3a:28:b7:
a4:30:44:8b:54:24:19:61:d3:f3:12:cb:a0:1a:3a:88:2d:03:
0f:8b:c3:0a:c1:bc:5e:12:8f:19:58:bd:7a:10:cf:f0:6e:a5:
3c:c2:91:1d:81:b7:30:43:05:ac:2d:c7:03:5d:5b:37:c8:82:
9e:5f:6d:5c:e7:4c:b4:f1:cb:43:5a:4a:85:87:47:f5:b6:1d:
58:c3:1a:da:41:57:72:22:e5:fb:c5:23:31:8d:f1:76:37:06:
92:03:95:20:69:ed:e2:ef:1d:85:12:b9:9a:8b:69:4d:78:8e:
a3:68:ff:9d:00:39:96:6c:b0:34:3a:2f:b8:3b:aa:3d:69:53:
81:46:c3:9d:3d:d6:cd:4b:65:3d:b4:08:ec:da:6c:28:51:c4:
5c:70:26:0b:72:96:dd:83:45:30:44:81:a6:58:c3:87:cc:ab:
a4:92:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:47 2025 by rpki-client