Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: IPOE7LM6jbeB4W40sNsYvsTlhcNKXFIvG4EJFWScfPA=
Subject key identifier: 32:88:82:0B:AC:7A:BA:33:4F:9E:F4:09:88:0B:6C:E8:5C:DC:68:A3
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 0199FDD8FFF9D58AB48C1D814972BED485F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 10E2
Signing time: Sun 19 Oct 2025 19:01:20 +0000
Manifest this update: Sun 19 Oct 2025 19:01:20 +0000
Manifest next update: Mon 20 Oct 2025 19:01:20 +0000
Files and hashes: 1: R-2EUht1MZT2vSRQIg2K5xtL6XA.roa (hash: MfRYL6Yg+Lw0VNLBgt+qTUomESKAUsKuRF6e7JHJD14=)
2: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (hash: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=)
3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
6: zVdth24X5nqjsfHBDas52yk14is.crl (hash: F5Xal98pvCKGdm4oskJOXGxtIHMEshIMlc5/SqohZV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ff:f9:d5:8a:b4:8c:1d:81:49:72:be:d4:85:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Oct 19 19:01:20 2025 GMT
Not After : Oct 20 19:01:20 2025 GMT
Subject: CN=3288820bac7aba334f9ef409880b6ce85cdc68a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:c8:0b:44:9d:d3:65:b4:84:8a:da:81:b6:
cb:57:8c:23:f6:96:fe:82:a5:a0:94:f0:72:0c:29:
02:3c:25:e9:79:42:86:fa:c7:8d:a4:45:a7:a2:ef:
87:30:52:da:4e:7e:10:b8:e7:f1:f2:1b:6d:01:26:
66:8d:e5:e3:5f:d1:86:8e:a2:06:5a:89:60:b7:c8:
28:12:68:d3:3f:4b:6b:18:2f:8e:0f:fa:05:20:a7:
a2:6c:06:a2:2f:75:cb:43:74:cd:3f:1d:8b:94:8f:
c2:33:58:4c:85:9a:f9:b7:0e:79:57:30:ce:b9:9d:
32:65:1e:f4:49:28:46:7d:d0:bb:e2:e3:0c:0a:c6:
c6:f4:9d:f4:7a:3d:b8:69:af:45:4d:14:e9:5c:c3:
96:8f:ce:83:26:4c:c4:a1:93:a4:d3:e2:2a:d2:69:
9f:12:2b:d0:a5:0c:bf:bf:0d:7b:dd:7a:9b:65:4b:
d9:30:bd:5b:58:b0:2a:81:46:0e:b7:05:19:af:e1:
ff:7b:e5:44:0a:f3:3e:d0:ad:36:63:db:01:7c:38:
c2:05:f2:08:b1:e4:34:dd:21:f1:2a:1f:55:c0:e5:
8b:5c:15:ee:62:03:d4:62:c9:c7:a8:f0:ba:9a:f6:
40:e1:76:ca:5f:00:c4:37:c6:e1:d5:fa:99:23:5a:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:88:82:0B:AC:7A:BA:33:4F:9E:F4:09:88:0B:6C:E8:5C:DC:68:A3
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9a:ba:d4:de:ec:b5:74:bd:3f:22:8a:b4:97:bc:60:82:27:
cf:a4:e6:b5:8b:a1:2b:72:46:14:1a:8c:47:ca:1a:0d:f8:be:
c3:ba:f3:17:cb:79:27:d5:2b:8c:f9:66:b3:85:00:39:d2:ad:
a2:2b:04:b1:4e:fc:1d:c8:d0:c7:12:c7:63:d3:f7:5d:8b:a6:
0b:3f:74:29:10:86:de:d8:01:78:7b:8f:00:9b:95:b1:a0:86:
b0:7a:92:5d:5e:5a:51:34:6d:9b:f4:29:68:fb:31:7a:ba:9d:
c0:c5:f9:29:2f:f9:b2:1b:e4:fc:5a:41:f1:e5:fd:bd:d3:84:
9e:95:75:7f:43:d6:17:f6:41:c2:62:44:d3:37:25:9d:39:8b:
85:c2:c7:3b:c2:67:69:c2:89:12:2b:47:da:7f:3d:2b:e0:9d:
55:a1:dd:db:88:a1:0e:f8:18:69:c6:c9:0e:11:30:a9:e9:00:
2a:0e:16:6e:59:85:dc:b0:2c:d1:0a:b1:ef:c4:c1:ff:79:76:
62:db:c9:ce:b7:ff:6a:96:06:cf:4a:b8:ea:c3:67:69:5c:92:
ed:7f:5d:33:97:7d:79:15:98:d8:59:01:af:ff:02:44:46:05:
ea:4e:1c:5c:a3:e9:ae:c4:de:bf:02:9c:f0:d1:87:2f:d5:c9:
eb:fb:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:39 2025 by rpki-client