Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: ZqcJzz0ibeUO+9JyLaFMJrAwHDFRUlDYToZ9c6TbN6A=
Subject key identifier: 7F:2D:12:F0:ED:D9:2C:93:39:CE:F4:9E:DA:42:35:DA:95:91:20:48
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 0199FAA13430ED86B7FDB9FA64B7164D7391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 101E
Signing time: Sun 19 Oct 2025 04:01:32 +0000
Manifest this update: Sun 19 Oct 2025 04:01:32 +0000
Manifest next update: Mon 20 Oct 2025 04:01:32 +0000
Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: 22KHxVIE3ZUCv2anLs906cBxilQfmYCdsWVp+ICoRJc=)
3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:34:30:ed:86:b7:fd:b9:fa:64:b7:16:4d:73:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Oct 19 04:01:32 2025 GMT
Not After : Oct 20 04:01:32 2025 GMT
Subject: CN=7f2d12f0edd92c9339cef49eda4235da95912048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:74:fb:87:d1:ea:51:66:6a:6e:22:90:c5:
db:8d:8a:8f:56:15:f5:b3:3b:f6:35:9c:f0:e5:37:
05:56:14:e7:a1:85:1c:01:fc:b3:48:d9:f7:e5:fb:
0e:d4:65:6f:d6:a7:49:a7:bb:d3:fb:8c:17:04:4a:
5b:0d:b1:89:3f:29:b7:5c:8c:44:4e:b5:26:2f:6a:
90:08:b5:cf:35:09:4c:1e:ed:9a:77:fa:40:0d:37:
20:a9:87:de:9c:8a:27:ee:a6:6d:c5:cf:5a:c9:f1:
99:30:b6:ff:f0:03:70:95:6e:c7:a9:96:4e:6a:e0:
e5:26:e6:4b:6f:fa:1e:e5:f4:57:93:9e:96:4f:c0:
5c:99:f4:03:ab:2b:32:62:cf:91:0a:11:32:13:dd:
34:27:32:bd:16:dc:95:52:62:1d:47:2c:5d:4e:ed:
86:a1:df:ff:68:81:ff:85:e0:6a:16:ab:ef:e5:6e:
16:d0:7b:ee:35:2b:8f:34:f1:bc:08:4c:96:63:30:
87:22:d2:1d:95:04:09:66:14:c6:71:7f:38:75:59:
04:a0:a5:f4:03:96:52:2f:cc:24:6c:de:66:17:a5:
b2:0b:70:fd:9b:77:15:1c:e0:f0:2d:50:50:aa:d0:
4b:ae:76:08:ee:91:4f:78:b0:6a:a0:9d:7e:4a:d2:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2D:12:F0:ED:D9:2C:93:39:CE:F4:9E:DA:42:35:DA:95:91:20:48
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:77:6b:eb:d3:ce:89:06:7c:63:6c:60:6f:39:fc:82:54:bc:
93:59:6f:ba:8d:ea:15:9d:8e:fa:63:05:fe:e0:f9:4f:33:59:
a3:3a:f3:fa:e3:06:0a:7d:f4:72:8b:4b:14:0b:77:57:cb:62:
82:15:ee:d6:5a:ea:35:85:f2:f9:ab:67:17:ea:52:93:58:72:
08:30:95:97:f7:5b:7e:32:c4:bd:11:37:18:a3:94:57:ad:3f:
af:1f:fd:31:32:7f:37:66:88:03:df:0d:92:5c:02:77:b5:b7:
5f:c8:18:93:1c:7b:c9:ac:a8:8b:38:91:df:24:43:5f:23:9d:
9a:6d:64:ca:79:1c:1e:5a:f0:dc:4f:ca:ff:51:8b:65:1d:b7:
b4:5d:89:64:88:de:8a:e4:f6:80:7a:cb:48:25:90:3f:e4:8f:
9a:68:fe:5a:7f:54:90:a0:6e:0a:cd:9b:66:95:d6:66:6b:34:
48:58:a4:64:c8:9b:7b:bc:e6:28:96:e4:08:fb:00:ab:b5:bb:
97:4b:b3:fa:40:ca:08:da:8c:00:9e:c2:b0:fc:3d:59:ad:65:
0f:08:0d:60:df:2e:ce:e3:a2:92:51:3f:8f:76:1c:e6:b7:a9:
82:85:14:f1:b2:93:20:86:ea:cd:73:86:03:85:c4:c7:de:4a:
6e:ab:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:03 2025 by rpki-client