Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: 3yvoFAoP6II1q5OG2UD+iCqj2QKfmcGXgQlp1+9OuOE=
Subject key identifier: D0:85:3C:31:2E:11:63:8F:8D:66:8A:F8:33:20:FC:D4:87:D7:D8:0E
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 0199FCC6059B588BC9CE2D632F490C131185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0D7E
Signing time: Sun 19 Oct 2025 14:00:59 +0000
Manifest this update: Sun 19 Oct 2025 14:00:59 +0000
Manifest next update: Mon 20 Oct 2025 14:00:59 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: 0p6bLuHwRCP/ZmG3rqi5lZtNv7mSB5qsaQr6D6r8+lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:05:9b:58:8b:c9:ce:2d:63:2f:49:0c:13:11:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Oct 19 14:00:59 2025 GMT
Not After : Oct 20 14:00:59 2025 GMT
Subject: CN=d0853c312e11638f8d668af83320fcd487d7d80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:90:55:7c:4a:bc:5c:e3:64:49:bd:25:1b:
9c:fc:e6:63:ad:96:c8:7c:59:86:7c:49:c8:b4:a2:
df:11:e8:eb:02:51:73:18:c5:19:38:f2:b4:3b:2a:
70:fd:fa:8b:fd:ec:61:6a:83:16:df:75:69:73:c3:
06:8a:bd:55:59:27:e6:de:20:28:b3:1b:7c:07:18:
55:af:50:79:81:99:82:ee:ad:19:c3:ca:46:a6:74:
8d:d7:36:23:0b:5d:77:d3:d8:63:de:18:cd:3a:42:
0e:8e:ea:2e:96:b0:6f:bf:03:9c:30:a0:cd:98:eb:
49:af:83:22:4c:f5:87:5b:54:a1:33:50:28:b6:a1:
21:bd:32:6a:ba:6c:d7:1b:6d:f1:65:3f:3b:9c:4a:
f5:b2:5e:1f:7b:22:17:4d:0e:9c:d8:53:fa:9c:6a:
60:46:a1:85:50:0a:da:73:48:ba:a2:b8:0b:fb:a6:
f1:ec:0f:39:c1:3e:0e:c2:8b:ed:dd:c8:7e:4e:0c:
37:07:c6:f8:06:a8:30:ca:de:9e:18:35:c0:69:7f:
dc:06:25:fc:d9:c0:ac:2a:8e:4b:c6:37:b5:fb:c9:
c8:8f:69:61:af:20:0a:1a:2e:13:4c:b2:c3:91:5b:
22:ca:22:d8:f0:63:31:7f:b2:98:f1:12:40:69:a8:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:85:3C:31:2E:11:63:8F:8D:66:8A:F8:33:20:FC:D4:87:D7:D8:0E
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5b:fb:87:14:67:2c:e7:b0:d4:a8:20:c0:d2:8a:3d:c4:65:
51:fa:4c:6d:51:bd:66:18:f9:a5:a8:b0:ae:f9:25:d0:d6:dc:
36:45:d1:76:fd:eb:bc:5a:8f:0d:5c:12:b7:fa:97:7a:45:b8:
03:f3:33:e9:08:cf:d4:9d:42:8f:8e:da:3d:e6:c0:d2:f0:78:
50:bc:89:2c:f9:d9:08:c1:6d:88:b9:1e:bf:b6:32:2e:78:01:
e3:5c:fc:34:de:47:df:ec:9d:ee:b8:43:7f:0c:16:7f:18:60:
8a:2d:97:9d:e4:1c:10:da:ff:79:c0:cc:46:26:e3:96:fc:f1:
3e:4a:54:41:64:34:95:93:89:b0:5d:05:32:df:86:2b:88:a8:
b5:f8:07:a3:3b:04:ad:c2:47:bc:92:d2:04:8a:cd:29:a7:fa:
f2:eb:a0:ff:71:6b:60:06:e0:99:20:e7:bd:ee:65:d3:cc:88:
9e:05:dd:1c:a2:45:95:b5:89:f8:fb:d7:fd:b3:5c:10:d9:0b:
76:84:13:ed:03:39:55:3e:5e:5f:8c:a1:c5:a1:59:cc:4b:02:
10:2c:53:fc:7f:ea:da:50:07:a5:35:02:28:cc:7f:29:5f:e0:
cc:8a:15:2b:4e:20:40:51:00:31:a1:55:30:d2:0e:e5:b7:61:
e3:ef:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:26 2025 by rpki-client