Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: R25nJCNcMdElzCbVmb1lrOEvwrp3psaIQk3D848ZnuE=
Subject key identifier: B8:7A:EA:E4:72:00:18:9C:58:2A:A8:40:FB:18:BD:DD:FA:71:CA:9E
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 0199FC5913312251B6C0BCBCB70A5A632EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 1622
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: pcktAXuQas2Zgo6DWP1hHyyK79ZECt6OsfjZoj1Xtb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:13:31:22:51:b6:c0:bc:bc:b7:0a:5a:63:2e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=b87aeae47200189c582aa840fb18bdddfa71ca9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:75:79:ec:1d:73:cd:81:04:a0:03:60:50:
b0:fb:5a:5b:31:15:fa:fa:74:c6:fb:5f:0a:08:8d:
66:a0:5b:6e:08:f3:cb:9f:6f:9e:c9:41:54:f6:f7:
ae:be:03:6a:1d:59:97:53:4b:c0:36:1e:26:e7:67:
64:94:e2:e9:17:68:e8:67:5f:1a:d9:6d:78:eb:5a:
a6:b6:bf:cf:45:2c:16:a9:d7:26:85:64:c3:10:14:
5b:b9:f2:1a:89:3e:6e:36:74:17:54:aa:6b:fb:7f:
f8:8a:6c:e4:f1:fc:d2:11:d1:e3:d1:66:0e:83:9a:
31:fb:d9:01:40:b6:34:dc:23:49:37:0e:35:04:1b:
17:5c:86:00:a8:5c:7e:21:ac:c3:f5:81:d0:a2:ed:
8a:e7:64:f7:f9:44:78:22:25:07:d9:a9:a6:ae:61:
43:16:cc:b7:06:8f:c9:9e:24:a1:fb:f8:3d:2a:59:
2b:29:ed:7f:c6:d3:a3:6b:0b:1c:7e:53:f5:e2:09:
ec:0a:33:04:51:cd:47:3b:80:7d:b2:09:9f:67:71:
32:e5:bc:82:8a:ba:7b:d1:8d:71:cf:ce:f5:94:74:
f0:e8:6f:da:41:36:35:b2:71:50:ed:c9:d6:d4:2d:
72:00:2e:00:ed:ae:55:ef:a0:b5:81:28:29:b3:4b:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7A:EA:E4:72:00:18:9C:58:2A:A8:40:FB:18:BD:DD:FA:71:CA:9E
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:44:0a:31:e6:b7:1d:3f:9f:81:36:ca:bb:87:96:02:24:8d:
14:85:54:46:2e:c8:8c:61:1b:74:4e:46:f6:b9:fd:2a:92:da:
85:27:ee:bd:9d:79:2a:c4:58:56:dc:aa:af:08:dc:07:c8:5d:
e7:f9:1f:30:4c:8d:f4:ed:d6:85:26:69:67:b7:47:fe:ea:1a:
a9:91:39:bc:7c:0e:8b:10:19:03:ec:4c:c9:ee:da:68:76:94:
c8:4b:9e:1f:42:c8:80:86:86:2d:92:19:ff:d0:2c:c6:f5:10:
a0:c7:1b:00:4f:6f:04:18:bd:b7:ba:ce:75:70:5e:c4:c5:cf:
0b:57:85:47:10:e4:73:a2:77:6e:6b:32:9a:fd:39:93:a2:f0:
e7:df:38:5e:2f:df:09:97:03:8a:1f:48:da:5b:dd:63:db:96:
cf:bb:76:2d:7f:ec:88:0f:74:df:5a:02:9a:71:e8:d6:08:65:
35:01:77:94:39:07:0b:a4:a4:7d:e2:d4:cf:8f:29:a9:df:0a:
f0:fc:59:aa:f3:9e:e3:36:b1:de:52:85:b1:84:4a:37:d7:fe:
6d:2a:2e:9e:4f:4c:04:b3:eb:7f:da:05:a5:8a:41:70:ef:0b:
5c:eb:b9:39:35:c3:c0:ef:58:89:e2:7c:d9:79:07:a7:ce:b9:
17:f4:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:26 2025 by rpki-client