Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: Oh3lZKuzQc6POZ7uQ8AvVww7Jd4SwFBNtkJGJxUHXlA=
Subject key identifier: C9:BC:22:A9:00:91:B6:95:4E:71:D7:03:D4:A0:63:2F:CD:E9:F6:CA
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 0199FCFD8D722BE8445B3466CFA815052FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 04D5
Signing time: Sun 19 Oct 2025 15:01:39 +0000
Manifest this update: Sun 19 Oct 2025 15:01:39 +0000
Manifest next update: Mon 20 Oct 2025 15:01:39 +0000
Files and hashes: 1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: 9S9oI8cV2F7hb+sNqr+4EtCzBgGbTCoU5i4FWZxFsPA=)
2: bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa (hash: CuuNkCn7ATc07S7puEJg/6wk+lxa5wMurXD4UWOiLPU=)
3: ktlX3SLAF-YNCTgumZIXLbUnbdQ.roa (hash: zK0y4Hfa+Cd7i8O+iE+DO6cd+9VnESfA1kHZCk8+iwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8d:72:2b:e8:44:5b:34:66:cf:a8:15:05:2f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Oct 19 15:01:39 2025 GMT
Not After : Oct 20 15:01:39 2025 GMT
Subject: CN=c9bc22a90091b6954e71d703d4a0632fcde9f6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:70:94:12:7d:6f:96:85:c5:63:17:78:54:
b3:fb:20:d7:be:7f:a6:fe:7b:55:f1:59:8f:fd:a3:
ff:7c:f2:f9:c5:e0:46:d8:ec:cd:6b:e6:22:37:d8:
36:b8:eb:d5:07:19:06:ae:27:08:82:73:8f:eb:52:
ee:72:c6:9c:14:df:c3:9e:3b:e2:b1:74:3b:d4:29:
7e:36:96:36:56:d6:99:a2:3a:c3:3d:73:fb:28:7a:
c6:26:66:8b:0d:76:d1:9b:20:53:9b:35:d5:58:9e:
1d:a4:5f:34:9d:1b:fb:82:66:95:69:ec:d2:70:a9:
80:90:eb:29:8d:08:f4:82:1f:ae:9e:18:81:75:6b:
d0:cb:89:ca:1a:df:28:ec:47:20:ec:2a:da:a7:da:
c8:6c:ee:19:1d:62:74:ca:63:2e:7a:6a:d9:5b:35:
64:9f:b4:1b:91:ed:73:55:97:e2:cc:c1:f1:2a:58:
69:05:af:1e:8a:ff:58:f0:71:6c:18:a9:4d:da:73:
d9:99:be:12:1c:29:2d:e9:bd:14:cc:31:e8:0a:2f:
e0:41:fd:95:99:ff:83:ff:ca:31:8b:78:c2:e9:36:
9d:33:04:ed:38:28:6f:91:a6:de:4c:53:66:c7:a3:
f4:94:4d:53:a1:a1:5f:ed:41:2f:a1:41:75:cb:b6:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BC:22:A9:00:91:B6:95:4E:71:D7:03:D4:A0:63:2F:CD:E9:F6:CA
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ce:1f:85:45:58:94:0d:4b:15:52:f0:41:cb:96:de:e9:f9:
5a:e6:99:e0:f4:5d:29:ef:c8:b5:66:b3:93:c4:9b:39:4a:3a:
f2:5a:25:b7:9c:d9:be:9a:c8:33:29:f9:fa:05:bb:22:96:c7:
ec:a3:6c:f8:7b:f7:16:05:18:ee:1e:63:ef:fe:73:6f:51:80:
2b:d9:a3:ec:ce:17:5e:bc:71:40:03:1e:70:79:a3:60:66:c1:
f3:ec:e9:7b:e2:40:80:4f:96:fe:12:14:fa:a5:41:57:7d:b3:
c5:32:4e:5f:b6:34:37:07:c3:5d:a0:a4:c0:08:6e:60:a3:2d:
e8:00:65:47:43:45:38:63:02:d9:28:11:fe:f9:96:59:11:39:
10:9e:46:c1:b0:07:0d:ba:f3:0b:61:0e:bf:ab:da:06:ce:bd:
07:d7:f6:03:44:d4:c8:31:bf:86:59:d1:39:34:e3:87:ca:3e:
4e:e7:25:53:6c:b1:39:5a:31:98:36:bd:30:e9:fb:52:a5:84:
cd:df:20:7e:ce:d6:a0:5a:1a:87:52:8f:67:54:0c:24:7b:b4:
0f:32:6c:c0:93:78:77:d8:c9:2f:d5:47:4f:58:97:07:94:c2:
d2:d6:ba:74:52:0d:3b:ce:d6:3e:8a:9e:db:21:bf:75:75:3d:
54:09:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:05 2025 by rpki-client