Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
File: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft (raw, json)
Hash identifier: z3PUlBUbG8tQHQMvRiI+UGp4L9E3/6rubL5YFp3sz2o=
Subject key identifier: C1:06:5E:36:68:04:BB:E4:76:2B:82:43:B6:54:6D:5F:7D:15:E9:54
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 0199FD344112F6B4E0D818A3DDDBDF232566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
Manifest number: 0D22
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa (hash: 7TRQZhECen5sQILgMQ/YVGL/75Sg6nbZxTLOGOZ3zSk=)
2: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl (hash: ia7nabkP6Z8GU/34llPtca3IPCglqeTYJNx4zb1QnyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:41:12:f6:b4:e0:d8:18:a3:dd:db:df:23:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=c1065e366804bbe4762b8243b6546d5f7d15e954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:d5:af:7c:68:09:f5:9f:07:d0:c9:5c:f0:
ec:f3:b7:42:0b:24:61:3b:ca:d8:1f:d8:e9:c6:8e:
0b:50:d5:3d:08:eb:c6:85:63:1c:56:46:48:cd:e8:
6e:a8:71:9e:8f:51:0d:8a:5d:e9:bd:3d:c2:aa:1d:
2e:e0:56:09:40:2e:a7:75:9e:bc:de:f8:ee:03:f9:
64:ab:81:08:4d:93:04:fd:a5:4c:21:46:47:1a:c1:
a5:07:f9:7f:18:5e:7f:d7:37:40:4e:52:1c:a3:b7:
44:86:f0:5b:f1:36:72:7e:8c:fa:d5:36:35:63:dc:
08:6a:9f:1d:2d:0f:2c:f8:19:7f:89:70:a4:0e:e7:
62:25:7e:33:7b:28:49:44:46:4e:79:9f:8d:b5:54:
55:28:8f:03:2d:ef:13:b7:0b:35:d3:62:77:c3:0b:
fd:15:24:71:79:3f:7e:17:82:41:76:62:b1:7f:8c:
24:d5:bb:74:ed:42:88:a5:71:49:26:76:3a:e3:64:
a3:05:ba:dd:29:e2:b2:c0:38:b3:00:9b:97:1b:82:
b3:00:9c:a8:40:63:d3:4d:82:bb:80:5d:51:f5:05:
54:75:06:4e:49:80:75:fa:e1:64:c4:2b:7b:a9:fb:
6e:54:3e:6c:47:af:eb:03:8d:ad:01:58:44:63:f8:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:06:5E:36:68:04:BB:E4:76:2B:82:43:B6:54:6D:5F:7D:15:E9:54
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:86:47:b8:12:c6:36:0c:30:37:a3:8b:f8:34:ca:02:a4:df:
36:78:25:b9:b4:bf:51:3f:32:35:0a:59:5b:e5:89:0b:13:35:
da:f3:d6:95:b8:a2:2a:0b:8c:e1:e6:62:53:23:f6:6d:c8:f3:
bf:66:4c:59:57:2e:cf:be:ab:c9:01:09:e1:8e:0d:66:b5:50:
e4:bf:17:51:fb:6c:0f:8b:1d:0e:48:a0:71:71:e6:2a:c8:66:
4b:bc:59:e2:6c:a2:8e:5a:e9:f4:ae:24:cd:50:80:43:57:62:
8f:c8:b4:0e:5b:80:43:18:79:fc:71:0b:8c:aa:1f:12:d5:e3:
4f:4f:39:21:2e:4f:37:51:4a:14:06:3b:83:5f:22:0f:c9:1e:
cc:34:ed:21:7b:d5:12:08:73:a7:71:37:e9:56:88:d3:ff:18:
ff:bd:20:61:19:8b:0e:b0:df:90:1e:4f:06:06:f5:e2:2d:ff:
4e:82:a6:0c:6a:16:1d:86:e9:fa:e5:5a:e6:71:a8:06:4c:2a:
b0:c8:bc:cf:d2:c1:1f:53:81:6b:b6:e1:a6:6f:3e:5a:b2:39:
5e:8f:43:5e:ee:d9:40:77:6f:db:16:56:dc:05:1a:91:3c:4e:
e4:31:e0:f8:a0:04:17:91:5f:ac:17:c9:35:de:ce:ee:89:61:
db:9f:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:54 2025 by rpki-client