Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: c9neT0JuSVOPkrAroFNO432nGC8l7wg6ULUSHNY+1gg=
Subject key identifier: F0:6A:C9:D0:5A:44:34:AF:2F:25:95:7F:A5:46:4C:B0:66:F4:AB:88
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 0199FB0F1D9CA2CD20DD06EEA6118BF0ABD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: bs7bg5RqVzcBMi56bitnDHEOqLLele2o1bJ4qvEjLNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1d:9c:a2:cd:20:dd:06:ee:a6:11:8b:f0:ab:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=f06ac9d05a4434af2f25957fa5464cb066f4ab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:c0:04:f0:b9:d8:f8:46:4c:24:3c:a8:87:
d1:1a:9a:e8:c8:23:8c:9b:b9:27:4b:8a:ba:52:53:
9e:b0:05:05:27:e0:a9:48:9b:26:ae:46:90:d4:dd:
56:33:3f:24:b4:6c:f3:ef:42:1c:39:fc:25:f7:c6:
e1:70:89:6f:c1:84:2d:8c:a0:fe:bf:02:e5:c8:1b:
5d:9f:35:80:e2:0f:50:f1:fb:d0:22:b6:af:34:3a:
64:a5:14:c0:35:9d:2a:ee:12:74:d2:75:b9:c9:5f:
d2:27:a5:5b:1f:5b:bd:1e:45:05:98:ef:0a:14:a1:
30:ca:ab:b1:e8:67:1d:33:af:85:b0:ea:00:c9:88:
7f:ac:0b:ce:12:a4:c2:45:c9:3e:3d:58:16:48:4b:
d4:d3:43:a5:d8:3f:02:ae:56:19:f3:7d:32:1e:c8:
a4:44:a8:27:af:88:9c:5e:52:13:c2:26:43:23:0e:
e0:a7:89:a8:1b:28:ce:ce:ec:8f:90:99:de:ef:5d:
c6:48:d2:4e:e3:20:29:17:cd:f2:8f:2a:df:f8:f5:
1a:d6:9b:c1:21:43:51:0a:40:fd:f4:1d:81:4f:a9:
dc:9e:0d:61:f8:1d:8a:14:cc:f9:09:44:65:7e:d0:
26:97:56:fb:d3:64:0b:ab:d6:b1:f0:d8:03:52:4d:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6A:C9:D0:5A:44:34:AF:2F:25:95:7F:A5:46:4C:B0:66:F4:AB:88
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c6:da:69:51:2d:83:3b:58:9b:1a:32:a2:e8:95:82:83:fc:
c6:aa:27:36:29:ec:04:4a:f6:e1:aa:34:a2:cd:88:df:b2:cf:
2b:62:ad:0b:9f:f8:c8:1d:a2:f6:45:87:59:d7:dc:b5:8e:74:
ae:5a:bb:b8:f1:8f:5b:0f:7e:e6:95:82:6c:bb:25:45:e3:43:
df:0b:17:f9:3e:c4:e4:47:3a:78:86:04:9a:68:a0:51:96:c6:
d1:aa:5a:b4:f0:56:d2:1b:76:37:9a:1c:cb:ec:10:01:36:6d:
64:94:b0:52:7c:e2:60:e0:78:a7:5e:0c:bd:ce:9a:7e:ec:c6:
c9:a2:64:7d:f8:d4:0b:d6:29:af:01:01:6a:33:59:83:44:24:
0f:d6:76:b3:c8:b3:10:7c:b7:d3:a2:ad:be:97:bd:7d:95:ea:
74:9a:71:22:c2:8b:0f:af:29:69:6e:91:e6:fd:24:5a:30:00:
fc:b3:2b:cc:55:3e:36:96:9c:e5:a4:92:5c:ff:48:f5:22:38:
7e:22:42:fc:cb:84:98:9b:72:50:0e:d7:90:ef:8d:33:5d:c0:
d0:e1:c5:6a:e7:2b:4a:77:2f:46:d4:0f:d5:4c:13:2e:62:39:
8d:e2:1f:66:4f:a5:ca:c4:97:8d:a5:09:3b:b1:5f:4a:e5:9c:
93:d3:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:14 2025 by rpki-client