Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier: LZH3D9pyn576gHhdcsIguunS4FcijBGWY3KLUWOYYX8=
Subject key identifier: AD:DF:19:F8:DB:D6:CF:05:CD:F2:A7:69:02:A7:C5:B1:47:D5:93:32
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial: 0199FB0F17DFCF82FC87C4C3DFFB2D377C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number: 104F
Signing time: Sun 19 Oct 2025 06:01:34 +0000
Manifest this update: Sun 19 Oct 2025 06:01:34 +0000
Manifest next update: Mon 20 Oct 2025 06:01:34 +0000
Files and hashes: 1: Fg0QsDS_oIn0AHFloFbOWLXLPYw.roa (hash: PCZ0sNE5BS8dEXbU+ksvDG3w1iOi7xIBrn9yDW7TZ/U=)
2: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: d1rM9t1MZCQAmp7R11jbph3u8psNRrpnWSPQ4Ykn0Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:17:df:cf:82:fc:87:c4:c3:df:fb:2d:37:7c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
Validity
Not Before: Oct 19 06:01:34 2025 GMT
Not After : Oct 20 06:01:34 2025 GMT
Subject: CN=addf19f8dbd6cf05cdf2a76902a7c5b147d59332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:63:7d:b1:54:2a:7c:19:84:88:a9:ba:f5:
4b:00:64:0e:34:b7:7f:18:de:62:30:5e:2b:01:db:
59:29:63:f0:58:73:f3:3c:9c:7e:d7:a1:57:a9:a3:
77:7c:0b:24:c2:94:1d:0f:fd:d7:f1:0a:51:a7:f9:
8f:03:7a:83:d2:58:ec:b3:cb:b5:a1:dc:c8:77:10:
b2:ca:0d:4a:20:31:28:55:c6:66:1b:80:7a:b1:b7:
68:55:17:9a:8f:26:25:df:ec:29:43:8c:17:4d:77:
28:dc:d1:71:da:9c:43:2d:01:83:d4:3e:2a:aa:81:
53:99:b6:f4:bd:95:50:bb:5d:aa:fe:6d:e8:e7:dd:
d2:f3:80:23:d1:2f:ab:36:e8:76:ab:e3:bc:74:21:
76:71:84:c6:e7:bc:0b:2b:c3:b7:22:e0:cd:7b:6f:
ba:76:e7:01:0c:af:12:fc:4a:25:0c:c4:58:11:2d:
12:9c:10:03:e4:76:68:04:c3:3b:3a:0a:01:60:d1:
ef:0e:e0:90:a3:d0:63:8e:84:72:2d:58:ce:7b:c6:
0d:bd:b0:33:e4:9c:bb:b3:24:d8:81:e1:8d:19:b6:
0f:17:ac:9f:c8:c6:9b:0c:e0:70:71:e0:a3:c1:6c:
12:4d:00:1b:98:9b:eb:10:10:62:b0:ad:af:7c:b8:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:19:F8:DB:D6:CF:05:CD:F2:A7:69:02:A7:C5:B1:47:D5:93:32
X509v3 Authority Key Identifier:
keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5f:2c:09:45:b3:e5:f7:98:e9:bb:c2:92:21:26:bb:f7:56:
a0:a9:3e:89:6f:e6:13:f9:7d:1b:da:e9:ad:a9:e1:5d:00:f7:
2e:e3:44:6f:8a:e1:85:59:55:55:85:63:06:39:1a:f3:fc:53:
94:6b:a1:24:61:28:82:88:0c:a6:b4:10:54:96:46:6f:a6:a6:
17:a0:40:7e:1b:26:30:af:13:68:b3:e9:e9:b7:f4:09:34:af:
88:8b:f4:40:9b:3a:41:54:15:27:2a:bb:5b:df:cc:90:af:c6:
3a:82:95:97:60:86:eb:00:ae:3d:58:83:06:1b:6f:93:1e:60:
a4:43:d8:8d:7f:05:bf:28:57:cf:ed:ab:c1:ac:a2:21:1c:6a:
8c:58:b2:b6:7e:f9:c9:8b:1e:1b:14:7c:23:ba:7d:88:e1:6a:
7a:43:6f:81:54:26:fb:6a:f4:69:d8:aa:52:1e:27:00:4b:6b:
eb:8a:cf:d2:1a:05:c8:28:63:7b:f7:b8:e9:c8:1f:3b:f2:96:
a3:08:f1:02:6e:f7:17:ab:a0:da:dd:43:b7:8f:a6:b0:b2:a6:
d3:de:c2:b8:b5:1b:a1:7d:78:8a:a9:35:82:f4:76:e7:04:63:
93:43:15:79:e4:dd:aa:c9:94:1a:4b:da:40:4a:58:b4:01:0c:
41:5b:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:43 2025 by rpki-client