Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: Hnus9WDFM7y5o4bv0688IQZHSXFNG7MEN61sIq+e9QE=
Subject key identifier: B2:8F:CB:C3:7A:CE:86:D2:4F:00:7E:D6:73:DA:45:C6:E5:83:02:A6
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 0199FB0ED9B4CC471299D34F02E9E4399C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 0893
Signing time: Sun 19 Oct 2025 06:01:18 +0000
Manifest this update: Sun 19 Oct 2025 06:01:18 +0000
Manifest next update: Mon 20 Oct 2025 06:01:18 +0000
Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: 1VYIypVfIL1egM0b6PeCjmDao1qiimpJ9uI7TBS0XwI=)
2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d9:b4:cc:47:12:99:d3:4f:02:e9:e4:39:9c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Oct 19 06:01:18 2025 GMT
Not After : Oct 20 06:01:18 2025 GMT
Subject: CN=b28fcbc37ace86d24f007ed673da45c6e58302a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:58:ef:07:4f:51:e9:39:2f:2b:89:51:fe:
29:dc:ef:ca:61:c3:e6:4f:4d:87:39:ac:ad:dc:9c:
a1:ea:d1:84:db:fe:83:66:d5:b0:b3:3c:0d:60:ac:
c9:8e:4f:00:0b:1a:0e:64:29:c3:06:1a:db:2b:ac:
24:1b:90:12:4e:4c:12:3f:bf:00:73:77:de:43:91:
91:d3:10:1c:a3:76:8c:31:c4:a1:94:83:31:3d:d3:
79:71:b1:58:36:84:1d:ac:65:af:a9:a4:15:06:64:
69:f5:a5:eb:98:00:2e:b2:b6:45:f1:ec:3d:43:6e:
ea:ef:60:db:1e:cc:74:5c:61:1b:16:c1:7d:54:f2:
7a:7e:83:10:8a:82:da:fe:e4:70:d9:58:99:fb:eb:
d1:65:40:ed:e2:31:ce:7d:71:f3:bf:9e:06:ea:ad:
43:46:e6:49:b6:e2:af:11:ef:18:d2:62:9b:cd:ea:
73:d9:79:5f:53:18:31:ee:59:63:7f:aa:b2:bd:2b:
cf:61:0d:0e:6e:d9:26:53:90:12:21:94:53:5c:ca:
3b:6a:9b:36:13:d6:25:bd:cb:15:26:de:51:91:4e:
db:8d:d0:ef:32:00:4b:41:2c:5a:ee:14:70:4b:dd:
de:9d:0d:b1:91:23:d0:ca:67:25:c0:ec:6d:31:98:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8F:CB:C3:7A:CE:86:D2:4F:00:7E:D6:73:DA:45:C6:E5:83:02:A6
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4b:fb:3e:c8:63:a8:73:3f:56:cc:3d:54:ec:5f:d0:a0:d0:
e5:1b:06:75:b0:69:e8:7b:9c:07:87:05:27:6a:a0:1f:6a:9c:
fb:fb:99:0a:14:27:79:43:0f:21:b8:87:d6:c1:c6:91:6c:13:
fa:55:2c:53:67:ae:d3:56:97:cf:1d:09:57:55:97:a9:95:2e:
be:76:d4:f8:66:25:f3:8d:27:78:31:f1:5d:61:ee:65:c3:31:
4b:00:5d:44:db:51:ca:04:de:47:b8:ef:4e:f5:0d:a8:45:f2:
32:e2:fd:b4:07:93:95:fe:97:d0:31:45:72:c2:4f:29:8c:b7:
a2:94:77:44:a5:55:bb:c8:20:9c:98:1a:40:77:6f:ad:6c:b6:
62:eb:b0:b3:a3:51:23:93:e8:06:c9:81:47:02:f9:30:cf:90:
bd:e9:15:cf:a7:b3:27:e7:6c:be:73:09:60:51:d5:63:dd:3a:
f1:e4:fe:64:cc:98:25:12:79:6d:6e:b1:f9:63:f5:e6:11:58:
6a:4b:1e:a5:4d:4e:83:41:75:10:46:cb:bc:f8:d2:fd:e7:43:
f5:7d:f6:bb:a9:c0:1d:8e:8d:9c:95:7f:ea:ba:9c:ff:c5:6b:
a7:ee:33:dd:4d:fc:37:b8:65:50:09:42:4e:89:a2:c8:d9:2a:
07:75:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:42 2025 by rpki-client