Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: AF/MingcBRY/e4hLar7iHMcTVZQjljV4IdjMv7nb/kg=
Subject key identifier: A9:93:BB:D1:01:75:9F:F9:39:D4:A2:80:41:2A:81:8C:46:AC:C3:08
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 0199FCC61C8B4BC0812FE4B1EFE1AB17DD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: DA
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: ay2UhLb9gVwOGFcPuT7u3po7GlY.roa (hash: Nc0lcUmEx3NfjhiK/z5Wio+LmihCcurK5+zIFKzkR30=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: uyPD5kcqDHYyit2SwsT+VpDtsZKPCib+RWw+tZ/TsHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1c:8b:4b:c0:81:2f:e4:b1:ef:e1:ab:17:dd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=a993bbd101759ff939d4a280412a818c46acc308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:b1:50:fb:b7:79:d5:42:96:f4:80:8a:86:
e5:44:ef:ce:f0:6e:7a:fc:43:52:63:5f:9b:f0:f5:
7f:a4:72:2f:e5:01:72:aa:78:54:0c:e4:9c:3d:37:
5d:46:a0:0a:16:92:91:90:eb:ca:e9:18:e4:2c:c0:
b5:53:74:08:2d:84:82:60:82:64:b3:69:9f:34:4b:
08:a2:a7:fe:b3:01:07:de:c6:07:8f:d8:9e:79:36:
6b:61:02:f4:91:00:b0:7a:e6:73:34:9e:4e:1f:fe:
72:e7:eb:68:fe:1c:6c:e2:8c:c3:0e:32:22:20:a0:
94:9b:d1:e0:4d:1b:fe:13:cb:39:69:fa:2d:cf:0b:
b8:27:23:52:5a:ea:bb:ce:7b:fa:16:c5:cd:4b:7d:
ba:05:6a:81:7a:b5:48:20:80:f0:15:38:11:19:b2:
9a:f1:2f:5b:0f:5f:5b:04:81:8d:ce:b2:a6:a1:15:
69:ff:9f:b3:0b:81:03:92:f3:00:5a:24:7c:65:5c:
a2:d9:c4:f2:cb:f7:98:b1:89:39:81:66:8d:c9:c2:
6c:25:56:da:05:c5:5c:1c:24:b5:9a:9f:86:fb:22:
79:7b:06:fe:9c:2c:cf:4c:87:07:60:f2:17:08:c0:
c8:ae:17:47:d6:96:73:aa:b1:61:69:98:2c:af:8c:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:BB:D1:01:75:9F:F9:39:D4:A2:80:41:2A:81:8C:46:AC:C3:08
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:43:f0:ec:5f:29:f1:d9:6c:90:c3:ba:d9:74:7f:5f:06:d1:
9b:97:c0:59:8a:dd:a7:cb:46:3f:06:25:47:02:b5:a8:5e:f5:
54:8a:76:d2:74:73:d5:13:2e:3e:53:4b:8d:cd:c5:d7:f7:e5:
a3:c6:3e:5a:2e:35:ec:ba:6b:10:9e:db:c3:e7:7e:ec:c4:39:
58:57:6a:98:5a:79:a1:7a:99:47:e3:60:a1:d6:fd:87:57:bd:
02:a1:14:ed:a0:df:11:1a:93:1a:28:9c:ca:b9:78:63:dd:10:
b8:01:e6:ae:68:c4:c8:2b:52:e5:95:06:fe:84:23:fe:d8:96:
53:5a:c4:ab:89:98:45:d9:00:97:88:83:65:8d:f2:93:74:a4:
6b:fa:b5:5c:89:8d:d5:c2:b4:a2:1f:5c:40:a7:19:cf:b5:80:
ff:22:7c:1a:3c:90:e6:b9:ec:db:50:e1:96:11:c7:36:b2:4b:
ce:20:2b:6e:5f:d2:bf:07:ed:59:2e:ff:b0:22:83:5f:72:71:
65:89:91:20:18:5b:de:db:7f:98:8d:d6:08:22:ca:31:04:85:
75:52:1d:f5:62:14:41:6c:46:70:2e:c4:c9:d2:58:c6:11:29:
cf:98:cb:40:98:07:e3:af:ea:1e:95:be:7f:fd:1a:f4:67:1c:
2e:c0:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:41 2025 by rpki-client