Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
File: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft (raw, json)
Hash identifier: e12abKOS5E+rZxq2WhrPRVY7NlilnWFBfur0N+Z4zzM=
Subject key identifier: BE:E3:63:47:51:54:82:32:93:92:9D:DB:BC:29:E4:52:D4:40:26:41
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 019A00D9EE355A58570AEEBFA50E509F98F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
Manifest number: 1642
Signing time: Mon 20 Oct 2025 09:01:13 +0000
Manifest this update: Mon 20 Oct 2025 09:01:13 +0000
Manifest next update: Tue 21 Oct 2025 09:01:13 +0000
Files and hashes: 1: 0YWWGLY2ws5dEm_54FSQZ1sndS4.roa (hash: NrM8b8iTRjQj/SggeT540k8LBz4kUfRyQupPzxIyzNo=)
2: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl (hash: 5G8m3IU2/NDGEm/MCCBfSZHbUkhVzToIiLwcCw1pv3s=)
3: QvYuctjlOUmpEgpvzgB4c1se_Qc.roa (hash: eYNoK8Wy+9Zr1JqWLRbHBLeE5t+d/AXQdx/gVhz5wA0=)
4: SgIFzdX6JcgyEvIi1tU7tEpqzs0.roa (hash: p6RL3L68zCciLtwZlC4lGEQ9Tf1FF1+MJetEEftOp98=)
5: WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa (hash: IM898uPAV6VmuESMyy3MG48B0cB42EspCAHOuXpg7Io=)
6: wW0iKtg9bPCx0wfkjNfecHkB2Ck.roa (hash: UM3eZveIrytl53yxFS6AdW4CNHF0JEQaT47qsF3G7tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:d9:ee:35:5a:58:57:0a:ee:bf:a5:0e:50:9f:98:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: Oct 20 09:01:13 2025 GMT
Not After : Oct 21 09:01:13 2025 GMT
Subject: CN=bee363475154823293929ddbbc29e452d4402641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:fd:36:c7:44:ce:5a:52:25:1b:f6:ff:a5:
4d:0a:99:e4:bc:3a:61:6a:f2:0f:53:28:08:fd:42:
47:be:ae:68:af:23:f9:b2:20:00:6a:5a:0e:b6:69:
c3:43:53:34:f4:c7:f6:f3:b9:ef:37:01:27:50:35:
1d:d3:45:95:0e:08:76:6a:cd:75:58:9b:bc:13:be:
1f:e1:07:69:2c:cc:58:32:71:5f:64:df:2d:d5:0e:
d4:e2:3a:8c:ba:fb:04:ba:fe:13:eb:9f:46:19:70:
5e:3a:37:11:08:c9:20:d0:9c:1c:46:2e:13:e1:2b:
3c:ed:60:9d:62:7c:49:6d:a7:73:92:7e:63:ae:d5:
c5:0f:53:42:80:56:9b:85:52:db:4b:19:37:dc:6d:
ac:d8:4c:60:6a:7a:c5:e2:5e:2e:d8:ba:96:85:68:
8d:11:48:48:54:ea:ce:fc:13:e4:4f:1b:23:58:2a:
a5:36:33:bd:8d:bd:2b:e3:81:e6:e2:ff:d8:49:c2:
57:2e:5a:37:fa:cd:13:b0:02:d7:29:8b:e7:a1:73:
cb:38:ba:d6:84:f3:31:c9:ee:f9:f8:80:dc:07:4d:
4a:94:86:89:53:a9:2b:bb:c5:96:74:a7:68:90:62:
a7:6a:e0:c6:fe:c0:59:6d:fb:69:b3:d9:0f:c5:16:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E3:63:47:51:54:82:32:93:92:9D:DB:BC:29:E4:52:D4:40:26:41
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b5:89:63:8f:1d:ee:19:cb:20:19:1f:65:fa:75:40:75:d2:
1f:0a:11:17:8f:20:33:c0:0e:77:93:36:85:33:eb:01:20:45:
0b:61:f3:cc:29:46:8e:c4:85:c5:61:00:67:a1:29:10:66:fb:
7c:a3:f7:43:53:7f:ea:41:18:3d:24:a4:52:b1:13:02:59:77:
94:75:6b:30:d5:d6:c6:e5:e4:a4:b8:38:1b:c5:a0:55:fc:54:
3c:ab:2f:af:86:8f:a7:80:91:84:96:c7:f3:7c:74:c7:91:54:
a4:3e:35:2f:7e:0d:b2:47:40:5f:35:5e:79:ab:c7:ea:b5:3b:
c0:b0:1f:3b:c4:3a:22:40:fb:3f:eb:76:97:17:a9:09:a4:c5:
00:4e:61:f7:e0:c1:7b:d8:02:bf:c0:33:45:1e:21:4b:43:c4:
24:75:a1:f4:bf:75:a6:8d:db:41:8b:7c:85:74:4f:d9:1e:40:
eb:43:88:91:74:e1:91:5f:f3:f9:d0:6e:27:0e:b0:eb:d1:43:
8f:3d:b9:c7:bb:96:7b:aa:a5:67:41:45:63:2a:49:12:08:d8:
eb:82:1b:08:6b:ce:54:59:57:bf:b1:eb:3a:c0:1f:4a:02:5f:
ed:d4:7a:56:f9:fc:c7:77:81:f1:99:1e:a2:89:07:23:3f:68:
f1:fd:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:53 2025 by rpki-client