Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier: 7TwFtWM8eEOf82VbrmuZ8S/5agbzpLEV/ozMOdBrKV8=
Subject key identifier: A2:6B:1D:5B:4F:6E:8A:20:0B:D3:BF:B6:6D:FD:FE:91:A3:47:25:39
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 0199FDDA401CD429186C995E780322A2BA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number: 1242
Signing time: Sun 19 Oct 2025 19:02:42 +0000
Manifest this update: Sun 19 Oct 2025 19:02:42 +0000
Manifest next update: Mon 20 Oct 2025 19:02:42 +0000
Files and hashes: 1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=)
2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=)
3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=)
4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=)
5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=)
6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=)
7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: PcmEh3+Gj9uLGtovYWLOLgCNzs9avo6LP4hJUIO0KLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:40:1c:d4:29:18:6c:99:5e:78:03:22:a2:ba:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Oct 19 19:02:42 2025 GMT
Not After : Oct 20 19:02:42 2025 GMT
Subject: CN=a26b1d5b4f6e8a200bd3bfb66dfdfe91a3472539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:aa:38:ff:52:f5:0a:40:d0:f5:ad:5a:70:
48:16:4e:bd:1a:88:dd:fc:5b:9c:c4:c2:b9:4c:c2:
9c:83:10:d0:ec:0e:f5:41:4e:c4:d4:ce:cf:90:b6:
61:53:74:3c:a6:ad:07:ee:d8:48:ca:55:92:ec:a0:
6d:e6:bd:b6:c7:68:d3:85:26:22:83:5a:eb:57:15:
58:9c:21:6d:37:1f:13:31:a1:a6:1c:5e:65:9a:c0:
ed:10:72:2c:b9:f4:40:d2:97:82:90:68:ad:14:17:
6f:2e:c8:4e:ac:bc:14:78:05:2e:06:24:01:91:45:
fc:55:e5:6c:67:40:b7:ad:cf:cc:44:e1:42:77:8e:
56:34:82:5d:71:76:81:e9:0d:16:84:2d:a4:6f:34:
de:4c:a3:9f:f8:3d:5f:61:a4:89:a8:59:d0:8a:9a:
3e:dc:6a:94:86:99:64:ee:0e:af:9d:5b:55:c3:05:
64:00:23:58:fb:fa:13:e8:80:7f:10:a7:28:ff:c9:
07:0e:69:f6:78:e3:09:e3:7b:6a:af:cc:30:18:7e:
9f:44:8e:ef:26:05:6b:f2:d9:fe:30:bf:b5:26:2e:
e0:b9:96:7e:5d:f9:99:b5:7a:03:3f:e5:43:95:f0:
31:2a:1b:c2:59:05:e0:47:fe:c5:8d:06:37:a1:11:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:1D:5B:4F:6E:8A:20:0B:D3:BF:B6:6D:FD:FE:91:A3:47:25:39
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:ca:0c:bd:b1:f6:f1:f6:38:ab:fb:34:33:17:d0:c1:0f:
13:46:e1:68:b4:7a:cc:d4:bc:00:d3:81:52:55:6d:0f:65:c5:
70:cc:d0:b8:07:27:0b:67:09:5f:f9:aa:56:5e:4e:b1:47:c2:
76:cc:65:b7:37:e7:b1:27:45:b8:82:0c:4e:75:a3:c9:ea:eb:
4b:87:c3:df:eb:fd:1a:99:95:45:49:7c:c6:1f:6e:bc:e1:e6:
0f:ab:f3:7d:ff:89:0a:3c:17:01:b9:26:9b:10:aa:32:bf:24:
fe:bf:bf:7c:ad:39:df:e4:21:0c:ef:7e:90:d4:7f:0b:5c:19:
7e:15:f7:4a:ba:88:93:82:37:31:48:d5:91:8a:8b:e8:01:ac:
5d:31:15:8f:a3:48:58:8a:a7:92:1e:41:b9:af:67:ad:a3:75:
f5:65:8a:02:7d:df:56:11:46:4f:0d:57:e8:52:e9:b1:03:9c:
2f:7e:21:40:15:ad:66:ef:82:cc:bd:9b:c7:d7:e4:5e:ff:7d:
28:e3:df:c0:b6:7d:c5:6d:21:e3:77:cd:eb:4f:ad:35:60:0a:
8d:a5:1a:58:56:23:53:f6:e3:98:09:36:c8:fa:9d:06:52:00:
d7:aa:f1:86:18:4e:5b:bf:61:5e:d8:4f:be:82:9e:c6:2d:eb:
7d:48:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:16 2025 by rpki-client