Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: 7YqZIsUnuiw3U6DNh+mPeJOZHecKc+MM22weQi+LT0k=
Subject key identifier: 88:D4:A8:CA:77:EF:AD:CB:A7:D3:6E:FB:B0:4D:DF:48:49:10:33:4D
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 0199FBEBEC20A160D2DF5C57533F03E86D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: 7OJGdEOOTNVvxdJvgjmS/T3HxUVj7hsPry6EbyuyDOU=)
2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ec:20:a1:60:d2:df:5c:57:53:3f:03:e8:6d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=88d4a8ca77efadcba7d36efbb04ddf484910334d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:98:a7:b7:05:1b:c8:20:e0:24:3e:2c:9e:
bc:f4:70:c9:f3:4c:49:c3:99:1a:93:6c:2b:7e:3d:
f8:6d:e5:47:04:14:09:df:d1:b3:1d:d3:58:96:f6:
af:b4:79:d5:52:43:c9:19:62:4e:2b:0b:78:40:75:
ee:5a:4e:c7:83:12:b3:c9:de:ac:05:3e:b1:05:31:
13:41:06:62:64:87:4e:92:e1:c8:a6:ce:a0:ec:e4:
af:d0:81:36:c5:ff:e3:cd:9d:f8:a0:5f:4e:6c:7e:
20:ea:fe:e8:01:3f:98:a3:30:8f:a0:6b:47:19:8f:
b9:48:98:ba:bf:ad:47:84:e7:bd:18:74:c1:fe:fe:
60:d1:1b:2c:6d:56:38:91:2f:99:13:8e:40:a5:1e:
de:0c:65:dc:15:82:13:e3:52:5d:cd:57:f9:c2:3d:
67:a1:a8:df:ec:4b:7e:27:6a:06:32:ba:a1:24:2b:
3c:35:1b:ea:ac:30:2e:37:6b:fd:dd:ea:4c:e7:dd:
8c:98:65:44:17:81:ed:c6:8e:9b:ac:51:bb:cd:bd:
c8:3c:02:51:bd:81:68:46:22:1b:e5:3c:9b:f6:dc:
03:02:bc:6f:4f:2b:7c:03:0f:b3:7a:31:83:e7:2c:
89:e6:82:82:e2:d0:7c:48:96:20:42:ba:20:a8:fe:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D4:A8:CA:77:EF:AD:CB:A7:D3:6E:FB:B0:4D:DF:48:49:10:33:4D
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0b:ee:4c:ed:29:79:ba:4e:bb:e1:dc:3f:6d:be:f6:73:59:
05:62:0f:d4:8b:a5:69:53:d9:21:40:5a:7e:f7:13:d3:fd:2c:
98:31:d6:dc:5b:9a:7a:7a:65:f3:51:22:1b:34:0c:d9:07:d5:
2a:cb:7b:7a:08:63:8a:4a:08:3f:f9:0a:30:16:c4:78:52:84:
4e:03:8e:a2:2c:45:90:97:8b:11:ea:2e:ba:30:53:42:8e:30:
02:07:2b:93:26:8b:c0:0d:3e:c2:54:54:1e:06:c0:e4:fd:c0:
60:4d:6b:b0:8a:9f:17:18:c0:e2:17:ff:cd:c0:20:6f:89:28:
ba:2b:a8:60:cc:5d:e4:03:41:17:f2:ae:b8:c1:00:ec:ad:77:
d6:cd:43:0d:be:cd:03:9f:24:2f:40:b0:2d:b6:ba:7f:01:1b:
09:49:ce:3d:08:09:07:37:8c:27:5e:91:cd:f5:a8:f4:d2:4f:
00:45:97:f6:15:03:6b:12:9f:39:a8:1b:16:d5:8a:46:4b:48:
41:19:a8:7f:51:fc:8c:19:1a:74:d3:c6:81:24:ad:19:95:1a:
6c:2b:3f:8e:52:73:50:6d:d5:91:44:d7:33:d6:47:a6:4b:b7:
a6:11:a4:28:d3:23:84:31:a5:2e:d5:f3:1b:de:2b:15:f3:a0:
8d:d5:c0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:53 2025 by rpki-client