Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: tdWpEZ6rUU3omR0Cw3xNzy+Hkb8X0vb8jSP1VUhdghs=
Subject key identifier: 69:1B:AF:80:F7:FC:67:60:DE:BF:EA:5E:07:55:E5:D3:AD:B0:0D:4D
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 0199FD343FD8813AB9D8ECECF589F8881D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: 3OCzpqqGOlJ3RRPa9qcY9JxjkUo.roa (hash: InQFvxlV7A4HcZ9T6xcxQF/B13Yg7udCj77rsg046YE=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: l34A4fN6uIC6rfNFl+4xckffBzrgnEPmy6I6R9oZzRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3f:d8:81:3a:b9:d8:ec:ec:f5:89:f8:88:1d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=691baf80f7fc6760debfea5e0755e5d3adb00d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:04:60:fc:e7:2a:59:b6:d5:b1:8c:40:46:
c0:68:58:8f:47:53:81:38:93:28:21:3d:b1:6d:d1:
bd:6c:95:79:11:f4:e8:d6:f6:f4:69:eb:ec:aa:82:
57:f8:71:6c:79:c4:17:4a:74:e4:3b:b7:9a:1d:8c:
1d:d4:c9:1a:be:a2:db:97:b5:3f:de:92:0b:ef:c1:
40:32:1e:de:c1:11:86:12:a4:e3:2b:9f:fb:f4:cb:
b2:b4:30:5e:6f:4f:0f:19:31:38:87:94:80:a2:f9:
1b:6f:46:60:0a:2a:fa:5b:8c:10:f1:54:19:f1:c6:
35:72:8c:86:e6:ab:01:c9:f6:4c:c8:f9:a3:08:b9:
3a:12:48:db:7c:9d:86:04:f8:79:47:35:30:3d:74:
22:2a:c2:36:d3:db:e5:37:29:2d:52:f2:6c:2f:e6:
88:f8:5e:8e:b1:ba:f9:3d:f3:20:8f:18:c4:65:3a:
02:75:16:e6:bd:ae:7e:bf:c1:80:6c:81:00:2d:a5:
c6:98:31:d0:d7:13:64:b9:86:4e:4b:f6:96:77:b8:
26:e6:f4:c7:3f:f9:38:18:09:6b:74:dd:7b:1e:7f:
29:75:89:c3:16:72:75:08:3e:07:3e:57:83:d2:ab:
63:99:87:13:15:05:81:7a:9b:96:7f:37:dc:b8:70:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1B:AF:80:F7:FC:67:60:DE:BF:EA:5E:07:55:E5:D3:AD:B0:0D:4D
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5d:17:9f:d7:27:a8:97:b5:c1:19:de:94:18:9b:55:69:6d:
75:63:56:d0:45:0c:28:b8:47:37:8a:f5:90:b2:0a:99:78:e5:
1a:1c:e0:89:34:e5:e5:fc:ea:5d:fb:4e:ac:0b:83:39:26:9c:
e4:08:00:ea:40:08:b6:ff:37:98:4a:4d:6f:7f:dc:15:bd:8c:
c9:ac:21:51:c5:f6:21:ba:7c:f2:52:8d:df:2a:9b:b8:dc:0a:
ec:18:c4:79:1b:f5:cc:56:cb:24:eb:7e:0d:95:e6:c8:09:b8:
25:ea:04:78:9e:d0:5c:ae:2e:19:2e:68:f5:99:66:27:8f:fc:
4c:eb:bc:81:cb:74:4c:af:ed:7d:84:ad:35:84:12:af:07:94:
12:32:5d:72:01:e2:71:a6:82:42:ec:53:b8:37:01:23:0f:84:
e8:d2:49:46:1f:9e:f2:2a:94:c9:69:13:f9:c9:05:84:46:7b:
a3:42:13:3b:d2:03:90:74:11:27:e7:f7:5e:58:f5:d3:34:57:
ec:0d:21:64:7f:2f:78:bf:b5:87:8f:99:a7:82:14:ec:ed:00:
79:fe:69:26:86:91:da:4e:60:3d:c6:ca:fc:58:05:bf:bf:4e:
28:3d:65:18:71:24:5c:4e:e5:e3:89:6a:84:b5:ac:cf:2e:80:
4d:b3:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:31 2025 by rpki-client