Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
File: rz9wBQP0ByCoL3bvFc2mICLx-ak.mft (raw, json)
Hash identifier: 925IgkqhgXLIyCIUlPFqZAv3NhCye34Sk4nUVQJsAko=
Subject key identifier: F3:9F:D8:22:A4:62:5B:C7:4D:DC:B5:8E:13:83:C7:3A:43:59:57:69
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial: 0199FC8F8B5927D030CA0A93E757F39FCB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
Manifest number: 0DA8
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: rz9wBQP0ByCoL3bvFc2mICLx-ak.crl (hash: nVZZbqhRCTVB/eOgt7GKHwJSxWi55YIIkmRIbtSGZCA=)
2: zHaHHwpWkvwMR4EBkRKLj2nL7g4.roa (hash: dEmOAj28ftGGpyQRnDV2quElsA9Yrv1JJIOo7l9XjEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8b:59:27:d0:30:ca:0a:93:e7:57:f3:9f:cb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=f39fd822a4625bc74ddcb58e1383c73a43595769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:4e:54:cb:0b:99:7a:53:b5:21:8f:4c:55:
eb:90:b2:2c:ed:b5:e3:11:20:42:20:ad:9a:3c:96:
c0:cb:48:fe:f1:bf:11:3c:34:8c:79:8b:90:37:1b:
b8:c7:7e:2a:3d:a0:37:a1:a4:af:5c:0e:4e:af:e8:
12:e8:b5:84:41:e0:da:02:7b:c3:2c:41:f6:f2:6c:
98:f5:a1:33:9c:ae:e1:ba:c7:c1:58:6a:98:05:c0:
b9:12:cc:91:91:7a:f4:19:d3:e5:94:5b:65:c5:a9:
b5:d2:5f:a3:ee:d3:78:a3:72:cc:4f:58:51:53:06:
a9:cc:03:15:40:06:1f:49:66:79:01:88:c4:d9:a9:
72:83:bf:bb:5d:03:db:50:5b:a5:f6:ef:e1:f6:19:
12:30:5e:fc:fb:50:4a:e9:a6:73:b9:79:0f:12:f9:
70:98:95:a3:89:44:48:eb:6b:fd:57:e0:22:7d:d3:
c5:b7:cd:d0:ef:f7:e2:50:b9:98:39:cd:9a:a8:9d:
26:6a:92:4d:cd:00:b4:c8:41:73:3e:2b:1c:a3:02:
f9:94:07:e3:64:6f:58:24:31:0f:7c:34:38:69:d3:
c9:a3:14:c3:10:55:7e:16:18:9c:5f:ac:14:a6:26:
ae:c6:c0:ce:84:c0:35:79:72:0b:5a:a0:d4:76:2c:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9F:D8:22:A4:62:5B:C7:4D:DC:B5:8E:13:83:C7:3A:43:59:57:69
X509v3 Authority Key Identifier:
keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:30:bb:8b:ca:3c:5a:46:df:27:eb:e8:c5:88:e0:d6:21:f4:
6e:a8:83:9f:e7:80:37:69:86:24:9e:9b:80:57:5a:1d:5f:56:
79:64:68:ee:20:88:1c:18:e9:de:91:fa:fb:c7:b2:26:93:7b:
76:72:43:2c:0f:6b:53:5c:2d:15:68:90:d2:3c:2a:8f:40:1e:
52:ae:26:5d:6b:61:1f:df:25:90:7d:71:73:3f:17:c8:94:20:
20:78:54:b7:e0:7a:87:e9:ae:1b:d1:79:4f:d6:b8:0f:71:8d:
d7:f6:04:3b:44:e6:6f:e8:0e:13:fd:25:a8:9e:59:33:80:83:
c8:e0:8a:bc:df:b9:d4:dd:bf:44:9b:52:d2:f9:9c:ae:03:80:
ca:21:79:70:d3:6f:71:1e:81:32:57:5e:29:c6:9a:ae:f6:98:
d3:31:94:bb:b5:4c:d9:6c:24:9a:4d:39:1e:e4:6a:1e:62:43:
dc:82:c2:3d:3a:9d:c4:31:af:1e:85:85:e6:54:c7:83:02:04:
b4:78:2b:bf:a9:64:d8:fd:13:b0:da:00:d1:b8:97:11:a4:39:
f8:91:99:99:01:38:3b:bd:2b:96:64:0d:ea:0c:0e:ce:6d:8c:
04:75:b7:ad:31:54:d0:28:d5:d1:c8:48:0c:21:4e:e6:9a:09:
40:6d:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:31 2025 by rpki-client