Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: RTohktfcVxGqkv7wo9hE6HqNMd8BHc0FEzRxHKavqGc=
Subject key identifier: 23:45:E3:7F:6F:7C:12:26:F3:37:1D:1F:E7:38:C6:B6:86:EB:D8:CC
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 0199FC58C046599F2D3CFD08BB13265F72E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: YPHnhPW1eJT/b3TqWBaLNfUg7n1a3JXSvkrRBUyxraE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c0:46:59:9f:2d:3c:fd:08:bb:13:26:5f:72:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=2345e37f6f7c1226f3371d1fe738c6b686ebd8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:42:6c:25:9b:7d:17:81:27:93:7b:ab:62:
e9:69:14:8a:b7:f6:b6:35:18:60:45:dd:c5:73:8c:
aa:e8:fb:81:33:83:36:f2:09:85:8a:ef:97:d8:95:
a1:d2:ac:38:52:9e:03:27:b6:3e:32:d7:d9:02:44:
c8:f6:88:e4:58:3e:df:ef:53:d0:e2:95:89:7b:79:
5b:8c:9e:7d:6f:70:07:ee:60:73:eb:f2:79:91:bd:
bc:6d:c2:d7:49:3a:a7:35:c1:6c:06:4a:62:4a:e4:
ef:cc:3e:da:aa:32:d5:7a:6f:be:73:f6:0a:f0:2d:
1b:d2:2c:87:b8:20:9a:f1:d0:8c:91:cf:d2:2b:52:
ff:42:a4:45:5b:8a:ac:49:5d:a1:ee:e5:dd:25:9e:
77:90:a8:f6:23:4b:a9:ff:8e:88:ef:7a:4f:d6:06:
27:88:0d:aa:c9:2e:51:4f:64:ac:d9:72:36:af:f7:
dc:6d:cf:93:09:4f:9e:f0:50:b6:ce:37:5d:c1:81:
11:af:96:f1:63:3d:0d:74:e1:21:32:dc:75:31:21:
b7:11:86:5a:58:81:b0:3d:2e:d6:ee:0e:4c:f6:47:
dd:cd:d2:6e:14:06:8c:cd:bb:24:43:eb:df:5e:37:
23:7b:60:7e:01:d4:64:23:5d:36:b8:a4:e2:19:d8:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:E3:7F:6F:7C:12:26:F3:37:1D:1F:E7:38:C6:B6:86:EB:D8:CC
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:35:49:2a:3c:fd:5b:b5:a5:d6:20:a3:4e:20:eb:1f:a1:f5:
28:c8:14:f0:64:fe:08:27:6e:38:aa:e1:d9:f0:3e:17:23:07:
c6:e2:d1:ca:6f:6c:dd:33:59:d0:80:de:e4:85:27:d3:ed:5c:
cc:e9:bc:ed:d2:2b:73:35:f4:e0:60:cb:81:88:6e:45:4a:d3:
9f:5d:b3:b8:f5:a3:47:96:88:ab:57:be:ea:fd:fe:33:b6:00:
98:bc:7d:1b:e7:6e:ce:dd:ba:34:18:f8:8d:d9:27:32:82:84:
11:82:b2:90:3a:01:eb:38:ea:87:20:aa:8a:88:1a:90:8b:48:
0e:20:ea:85:c5:bd:81:51:a5:73:1b:5a:46:be:ed:9b:e8:ef:
69:b0:52:2e:8c:ac:60:a4:06:85:4a:a9:e6:a9:3c:53:18:d4:
1f:61:aa:61:1b:15:43:85:0d:cb:5a:8c:08:d5:76:be:1a:1e:
f2:20:2d:fd:76:d4:87:d6:7f:2e:92:a2:68:e9:5f:53:61:4a:
3d:7c:83:38:03:53:ab:9b:61:d3:fa:c7:58:5c:2a:ce:d4:1b:
a6:b8:bd:45:e8:b8:a5:ed:0f:fd:28:cd:74:b7:40:ed:9b:72:
1b:19:e2:ac:72:3d:ed:54:0d:ba:1f:15:23:73:7f:c7:39:9c:
a4:7d:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:38 2025 by rpki-client