Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier: bLbPOjv7GJRncpwbdZXb9bDzNbU6ZIGTExm4Y1O7qeE=
Subject key identifier: 05:22:D9:21:94:61:3D:C0:A4:6F:C2:C3:04:3C:55:5E:CC:A1:FE:0C
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 0199FC585A6A2179EFDD387F2A89CD9FF38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number: 1152
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=)
2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: ADZGnCW1sJeDvhqNRXhodcgQh4oJycJAzhSIoCmaQLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5a:6a:21:79:ef:dd:38:7f:2a:89:cd:9f:f3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=0522d92194613dc0a46fc2c3043c555ecca1fe0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:ba:f5:30:31:e7:1f:a4:07:56:49:b2:5e:
66:9c:70:0a:81:e5:23:4a:85:af:27:a6:74:a3:2c:
af:be:60:3d:3f:eb:6b:fe:80:15:3a:4f:88:ef:0e:
1d:d2:b3:9e:7e:d6:b6:a3:91:a6:c4:37:08:c9:cd:
62:e5:5b:77:06:fd:c3:36:9e:84:00:bd:2c:44:2e:
34:31:1a:51:ae:14:f6:90:44:a0:30:ac:26:24:12:
a7:36:b8:7f:06:9c:24:74:e5:d9:79:9d:fc:1c:e9:
be:ee:d6:f9:90:84:1f:90:97:d9:40:df:ab:62:9c:
a0:87:59:2c:ff:44:ca:f0:0f:00:53:e4:a9:f3:af:
12:d4:55:b9:35:e7:52:8b:f7:72:e8:aa:91:0e:73:
de:34:23:7a:b3:8a:2a:61:94:6c:07:e9:63:27:92:
75:e4:4a:d3:2b:70:3a:85:f0:ec:70:73:c7:58:e5:
ea:b1:a2:72:a7:b8:e1:18:50:02:2b:3b:24:5f:a8:
bf:b0:9d:58:d7:57:f6:8d:4b:6e:9c:86:41:24:ad:
a4:48:a9:d5:e7:5b:07:e4:3f:0d:ce:ba:f1:0d:1d:
e0:cd:72:e0:37:78:f4:77:ea:c1:8f:6f:ff:9c:16:
b5:28:96:58:04:6c:4e:85:6b:92:f6:bf:f3:2d:08:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:D9:21:94:61:3D:C0:A4:6F:C2:C3:04:3C:55:5E:CC:A1:FE:0C
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a2:4f:e7:46:8c:8b:50:6b:c8:19:9f:48:f9:a4:ce:c2:ad:
4c:58:9e:91:5c:2d:a0:25:cf:7c:ef:0f:7d:c5:4b:88:fd:69:
06:2a:01:fb:58:22:c1:5c:51:cd:b5:1c:b8:6f:e4:2a:b3:ce:
5e:6c:a0:9c:a5:42:d8:07:04:90:69:cd:b3:c0:a8:10:e2:f3:
eb:95:84:73:02:64:f9:01:08:d3:05:e0:e8:bb:ad:f0:a9:74:
39:7b:e7:e0:2e:7b:44:70:56:f1:1b:7a:5e:61:37:87:fa:1b:
33:7d:7c:54:43:85:9b:82:ad:21:60:29:d7:0f:dd:2c:67:0f:
58:70:32:cf:a3:80:66:1d:33:93:4a:3c:ef:1e:24:82:26:28:
1c:3c:ee:67:4b:d8:36:78:e2:dc:34:43:e7:af:77:bb:96:6c:
d1:7e:d5:b9:f5:22:dc:e7:56:ef:78:e1:19:62:ef:44:f5:52:
02:f7:6f:2a:c9:ab:9d:3f:a8:21:bb:ed:fa:48:0a:59:dc:68:
bf:f1:72:24:c3:e3:da:92:e8:78:0c:a4:e9:3f:d2:fc:bb:24:
e0:62:84:1f:e6:fd:48:58:3f:20:ad:e2:72:68:ce:9b:58:62:
33:f3:e4:74:39:df:d4:66:7e:02:56:84:c6:9b:8b:cf:9a:75:
7e:d4:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:25 2025 by rpki-client