
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: /uzFpnvsdWCx6xjFYxdCvmxbgIDqj3QbxyPyVksycOo=
Subject key identifier: FC:6A:F8:1F:C2:56:52:63:3D:57:C8:49:F7:DC:09:97:81:34:10:96
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 0199FD345CEB8FA65FFB5037CDDC0CEAF3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: Nleevi_t1odK2SQMPlwz5kkpo1Y.roa (hash: DKM+JxDcrxSfZrM/04OPCw4rkiFmFEDYym5FUi8PCsQ=)
2: Vo2fmYOdwpsZlWnrLb9PR2qxUiU.roa (hash: ofRGxwyei53l51n5v+e08DV9i8dygPEuLXkTPl6qbNI=)
3: YCaEZB50rCphFHNs0SPFVykePLA.roa (hash: AXiMRnv2MY2eYU5zXOJ4Cp11rWQHmU+zWOZeXxL9Un4=)
4: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: VoLQTWIN2IG4OD49H4YF5CImSDWhlG3cG0qf+ow4WT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5c:eb:8f:a6:5f:fb:50:37:cd:dc:0c:ea:f3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=fc6af81fc25652633d57c849f7dc099781341096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:8f:7a:25:64:0c:12:e4:9f:79:d1:70:49:
11:af:4e:e2:29:34:f9:37:ba:65:f6:8a:7c:03:4a:
42:25:6d:4b:da:ed:7d:52:9c:6b:df:a2:9c:e7:41:
a6:e2:56:5e:a4:42:bc:f1:54:a3:e3:07:15:82:53:
fe:ec:35:23:a9:3f:e6:ee:36:50:46:bb:4c:06:2d:
ab:71:03:82:71:f7:19:91:b3:90:f8:21:f1:72:dc:
02:4b:48:75:76:22:63:a4:c0:66:7f:a7:bd:90:bf:
d5:36:23:26:4b:22:25:7f:a3:56:20:26:b8:7b:7b:
00:dd:8e:4d:29:63:36:ad:60:51:14:33:c9:69:2b:
61:b9:10:82:f6:84:20:b6:6f:2e:e1:71:0f:85:54:
f6:17:db:0c:13:9f:55:da:7b:0f:99:88:56:be:a7:
0c:0e:df:10:33:b2:98:ec:bd:89:09:6d:a4:a5:8f:
01:06:82:5c:f2:f4:0f:46:da:23:b8:46:8b:76:b8:
dc:ec:d6:f3:72:0a:4c:a8:ff:be:c4:a8:d3:f0:0f:
e4:19:eb:17:98:e7:a2:e8:1c:74:cc:42:c8:6a:df:
ae:ae:62:4a:75:16:c2:5a:08:71:bd:04:2a:0c:4d:
75:15:ad:10:66:58:06:6a:65:25:1d:85:5b:2f:2e:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6A:F8:1F:C2:56:52:63:3D:57:C8:49:F7:DC:09:97:81:34:10:96
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:5e:09:03:0a:14:c8:5e:99:4f:94:51:53:4d:77:36:72:
8f:87:c2:80:ed:df:85:72:11:53:10:c3:49:6a:cd:e7:48:50:
bb:bc:9f:a9:ca:31:8e:d9:e7:1d:cd:36:07:e6:bb:cd:4e:b4:
66:d0:58:10:7d:8b:03:a1:5c:b8:f0:b1:05:1a:ff:84:21:f9:
9f:b5:69:d6:7a:83:d4:f3:1c:5b:a4:e8:1e:cd:20:e6:d3:f1:
ed:cd:7c:78:1b:d3:27:17:9e:08:e8:11:89:c4:83:61:93:07:
88:e0:80:4d:28:a5:eb:d1:74:f4:91:27:5c:6e:45:44:64:30:
56:61:6c:25:dd:4e:06:fb:9f:18:98:b9:4b:83:79:16:f2:ef:
19:55:5b:e1:2a:18:5f:c2:d2:bb:39:da:27:6a:a7:d6:93:27:
b7:b5:fa:f3:ec:89:03:f0:fd:93:41:c9:3e:d7:7a:d9:0e:81:
f3:d9:5e:a7:2a:02:5b:23:4c:54:fb:ea:a3:cb:75:b8:a4:ff:
b5:ac:09:a7:01:7f:60:14:11:dd:8c:ec:e9:79:66:bd:41:74:
a2:72:41:77:2c:7a:75:5b:a0:6a:58:67:b7:94:8d:a4:b5:e1:
96:dc:5f:a1:4a:9d:1d:25:9d:54:3a:5b:23:c9:51:a2:7d:bd:
43:76:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:18 2025 by rpki-client