
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
File: sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json)
Hash identifier: c/92PBqa2zdCJDc/z0WNYYbc8+CIe12EWOqJLioXP/8=
Subject key identifier: A1:CE:9F:14:CD:21:33:E8:BC:D8:76:65:65:9A:8C:16:5B:8C:2C:FA
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial: 0199FE1058BD7EE01E51CA9A0A9A42EB55D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
Manifest number: 0B5F
Signing time: Sun 19 Oct 2025 20:01:48 +0000
Manifest this update: Sun 19 Oct 2025 20:01:48 +0000
Manifest next update: Mon 20 Oct 2025 20:01:48 +0000
Files and hashes: 1: pp7YHiA9bCcV4n9KXbmtGvXw0Hw.roa (hash: xXtqKC6cCm9cF/kgqDQZlMKjBn2ULr5S39vUn/a3JHc=)
2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: gks/E4GOYmeM/IhXaFYpJbyZEQ04QU00axs9L3fDnHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:58:bd:7e:e0:1e:51:ca:9a:0a:9a:42:eb:55:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Validity
Not Before: Oct 19 20:01:48 2025 GMT
Not After : Oct 20 20:01:48 2025 GMT
Subject: CN=a1ce9f14cd2133e8bcd87665659a8c165b8c2cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e7:9e:2c:38:a9:0f:09:83:b0:c2:60:3f:69:
a1:e7:c7:2b:66:99:30:e5:08:0b:89:f1:b1:aa:24:
28:32:1c:2d:c3:57:bf:81:aa:fc:86:75:66:93:63:
ac:92:4a:d3:26:6e:86:44:6a:66:7b:dc:04:2a:cc:
c4:ae:91:d8:8d:67:c1:5a:68:8e:eb:8c:c9:a9:e0:
3e:8a:88:5e:c6:c4:b3:36:db:32:60:ef:c6:f2:8b:
f7:4f:ef:a5:3b:f7:a4:d8:45:25:03:b4:70:31:39:
6f:f0:4a:17:67:70:a0:30:7d:35:85:ee:db:fb:db:
e3:30:ff:32:7c:1a:69:e5:75:52:62:2e:72:56:2c:
5e:4a:2c:14:74:57:60:43:ab:bc:b4:a4:65:94:71:
82:14:b9:e3:8b:55:d6:90:b7:a8:dc:d7:b6:0c:07:
38:5e:da:a2:27:88:c4:6c:af:8f:36:8d:b7:e8:9f:
e9:c5:30:22:2e:8c:75:86:19:17:5c:a1:e9:27:b2:
0c:0e:9e:2e:d9:ca:23:72:5f:bb:d7:2d:4d:9e:ed:
b9:f6:a8:d4:5f:1c:63:f9:90:3f:2a:c8:bf:12:52:
7e:85:b5:fc:59:1c:64:f2:64:78:3a:87:72:c7:8c:
b3:d4:77:1e:29:3d:9c:0d:e3:82:9e:c2:f2:be:8e:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:9F:14:CD:21:33:E8:BC:D8:76:65:65:9A:8C:16:5B:8C:2C:FA
X509v3 Authority Key Identifier:
keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:88:40:e6:7a:49:d0:3f:f4:55:61:11:c1:0d:0b:dd:fa:45:
8a:04:37:d3:6c:d3:cf:11:41:01:27:da:e8:17:bb:ec:1b:22:
4b:fa:af:d1:f7:d4:de:d4:a6:95:06:0a:fc:ab:89:60:8c:55:
71:b2:46:67:97:55:8e:b2:9e:19:96:f4:16:12:34:f9:b6:b9:
cf:ce:e7:bf:ec:2a:fa:48:fb:a7:1e:85:b0:fd:d1:3d:90:75:
f5:6b:ec:67:fe:94:fe:0d:13:3d:1a:fb:38:f3:02:5d:f1:ff:
c6:c0:d6:46:79:b9:85:48:d6:37:18:ae:99:11:02:ca:df:ed:
b3:29:91:ba:87:7e:d9:9f:2f:fa:1f:69:01:cf:70:7e:65:34:
cb:c8:6a:a0:c7:eb:81:9a:db:77:47:07:88:f5:b9:47:08:95:
fd:80:db:18:b7:cd:12:19:1b:2f:ee:08:69:ef:55:8d:03:07:
72:5d:d4:ac:8e:5a:e5:49:da:2c:ce:81:dd:86:a6:6c:2d:b1:
38:01:21:8a:94:55:90:e5:0d:72:46:7c:2f:04:a7:7a:98:be:
9e:84:65:c9:24:10:7c:8f:ce:b0:77:06:bc:e8:95:d6:71:a7:
c2:86:32:00:fe:8c:30:50:b1:33:c5:3a:27:e5:23:ce:50:c8:
9f:12:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:14 2025 by rpki-client