Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: o2f6p3aicTM1QJYPJuesaqfsM7jPaXCL7Tu0e4pCKhs=
Subject key identifier: BC:62:92:56:8D:3C:B5:0B:0D:C1:40:0E:90:B7:AC:0F:45:39:81:44
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 0199FBEBFAE1FF3F697B3EA8082D56E85FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 1428
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: JLmy4TR8RrUtQURM0_SunkucXNg.roa (hash: tyjdJ+wzrKeWzDFxJ16QXw9ZyxjFDWvObDxvX6J8AjA=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: svStTUg1CywlIDschMItZIryQPE7N1wd4d7oW5blwHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fa:e1:ff:3f:69:7b:3e:a8:08:2d:56:e8:5f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=bc6292568d3cb50b0dc1400e90b7ac0f45398144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:d8:f5:c8:6e:21:44:47:c4:e8:98:7b:7e:
53:64:7e:3a:e5:bd:08:92:58:40:e9:69:f0:8f:34:
e1:8d:df:03:8e:f3:df:b6:fc:8c:7b:cc:cf:8e:15:
88:71:f0:4c:d2:2c:44:ec:08:ed:07:64:85:7e:95:
5d:03:21:ba:17:49:a4:1a:ca:4e:10:3d:a8:53:d6:
08:2c:ec:eb:d7:cd:42:cd:1d:e4:27:da:cf:35:d2:
fc:24:63:a9:b2:b2:52:d9:70:7a:14:54:29:11:0f:
d2:a8:cf:38:48:22:49:e6:71:2f:3b:61:c9:61:c5:
00:3e:3a:22:98:05:fe:51:f7:6b:29:18:a1:51:7b:
2d:8c:2f:79:73:73:9e:4b:3b:7a:bc:bf:f9:af:2f:
44:cb:fc:ec:bc:5a:f2:6f:ee:ad:c7:91:b2:08:9e:
98:c6:2d:f3:4f:cb:b3:07:30:fa:43:31:36:cf:8b:
01:3f:60:6f:b9:6b:29:f5:63:89:00:4f:d0:3a:17:
9c:26:59:40:c7:32:1b:7d:66:9e:3b:4b:6a:51:8d:
ee:8a:ce:6f:ec:50:fd:a3:6a:d3:ea:4f:45:fc:4c:
74:97:63:2b:d8:53:56:75:6d:a0:96:d7:8c:87:16:
c4:fa:cd:67:2f:00:94:ef:bd:b0:12:bf:18:b0:24:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:92:56:8D:3C:B5:0B:0D:C1:40:0E:90:B7:AC:0F:45:39:81:44
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a0:ec:b5:9d:26:9f:7e:20:e7:7e:51:6e:a8:8b:5c:e3:aa:
21:1a:63:cd:59:b3:c4:91:f3:e1:c1:f9:34:04:af:a2:9a:25:
66:53:fd:5c:99:b0:74:4c:8c:33:eb:01:d8:a2:2f:0b:f1:44:
7c:5e:93:86:11:8b:d9:95:79:a6:9e:0e:60:b4:b8:e5:cb:5d:
5f:da:2a:25:04:70:a8:2c:26:5e:eb:7a:da:52:05:f2:52:63:
9c:20:8a:7e:c6:89:ca:25:ba:d0:88:34:0b:14:39:06:16:15:
bb:99:b5:46:e5:da:29:22:aa:a5:00:b6:ec:8e:a0:01:06:22:
ae:de:67:06:6e:3d:d0:c6:5c:aa:87:66:4a:0d:98:a9:f9:2c:
9b:18:cf:0b:88:c6:cc:42:df:f3:4a:42:93:92:8b:73:ec:1b:
4e:87:38:cf:3b:9f:59:f8:b5:b9:53:f5:b4:0b:0a:75:fd:6f:
ab:bf:97:e6:a4:05:17:31:64:c9:a7:c0:1f:ad:1d:d9:dc:eb:
25:d4:c7:ea:24:b9:78:ba:08:1f:db:b3:40:62:de:68:75:cb:
a8:53:cd:6c:89:4a:4f:3a:6c:2c:54:f7:a1:d7:f5:a4:a1:d4:
3a:1d:20:ff:11:07:c7:b5:3d:17:5c:d8:c2:84:45:18:cf:0e:
e1:16:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:37 2025 by rpki-client