Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier: 80w2eseX4fo1zz5alVRBxnY/BG8/EHj31Zf3v5WThXI=
Subject key identifier: 19:E7:4D:6C:28:86:13:86:62:A0:A3:A0:F7:FE:F3:F9:A3:D7:9F:34
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 0199FBEB2C837F625EF47A429A74B7D43CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number: 0C43
Signing time: Sun 19 Oct 2025 10:01:57 +0000
Manifest this update: Sun 19 Oct 2025 10:01:57 +0000
Manifest next update: Mon 20 Oct 2025 10:01:57 +0000
Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: s0/xYoxXNDa9YuOBetcVOReDdk6Ocx9W7EOS0dotJfo=)
2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2c:83:7f:62:5e:f4:7a:42:9a:74:b7:d4:3c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Oct 19 10:01:57 2025 GMT
Not After : Oct 20 10:01:57 2025 GMT
Subject: CN=19e74d6c2886138662a0a3a0f7fef3f9a3d79f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:22:01:bd:84:08:16:f2:5d:8e:1d:21:7a:
3c:36:c4:86:98:17:e7:30:f6:09:91:1a:eb:25:e9:
0c:cd:b7:a6:1f:e1:27:8d:3e:b3:ab:18:5e:eb:6b:
7d:7b:e6:dc:77:d6:2a:7d:36:49:07:ae:35:6d:93:
a3:6a:9d:00:35:ca:ed:12:03:ce:dd:af:9b:18:1f:
f1:b0:bc:ff:f4:b6:34:0c:b6:a0:f7:52:82:15:69:
63:f6:61:aa:8e:de:ab:1e:f2:a9:b7:7e:e1:46:8d:
26:e4:d9:47:a4:5d:9f:1a:4b:c2:19:28:7d:71:95:
bf:e0:6b:13:36:06:45:32:28:01:aa:80:67:c8:b0:
ef:e3:bc:9f:ba:17:57:42:2f:3b:65:90:c2:87:9e:
6c:ae:57:e2:15:24:42:b6:ec:b1:2b:5b:46:93:99:
44:83:17:02:36:88:28:53:b5:c0:01:1d:4f:46:31:
21:49:09:ba:21:7a:98:91:ab:2b:83:4c:6c:c0:66:
34:db:4d:e6:29:94:06:50:3d:e4:cb:7d:dd:c4:cc:
92:7a:99:d8:d1:a5:40:e1:ff:2c:d9:7c:51:f1:4f:
32:9a:82:7e:c4:e5:fe:e5:77:c2:f8:23:4f:60:05:
c6:63:53:0f:30:b1:35:79:a9:ab:3b:ac:9d:d7:b3:
f0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E7:4D:6C:28:86:13:86:62:A0:A3:A0:F7:FE:F3:F9:A3:D7:9F:34
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e9:8c:79:ed:b7:4b:19:92:9a:7c:c2:0d:60:09:52:8c:dd:
31:97:74:6a:98:d1:78:38:0f:6f:11:16:83:36:d4:f4:33:62:
aa:1e:18:39:93:bc:ec:63:2f:59:32:d6:81:95:75:8e:ed:54:
40:05:f9:ba:57:db:81:45:08:f9:38:00:a6:1d:40:78:cb:78:
7d:96:15:b5:1b:88:c1:d8:70:68:29:29:85:bc:0e:5e:b4:ae:
7e:8e:8b:4b:44:1c:56:b6:4d:0d:82:cd:1b:a9:07:b6:c9:92:
c5:6b:89:98:71:92:e9:4d:e7:e5:c7:7f:76:32:79:cf:29:fe:
ea:a3:0e:4d:f0:41:8e:8d:32:ba:58:09:cc:55:43:6a:d5:cb:
12:d7:bf:01:36:b6:e7:82:ba:43:29:b2:f9:6a:1d:c3:bf:bd:
a3:4b:db:13:f1:00:96:b5:2b:12:c7:ff:f8:67:c9:59:18:27:
9b:f3:29:3f:75:e3:5e:94:15:31:1e:fc:a4:93:22:c5:08:1c:
e1:16:ef:87:75:d1:7a:a5:22:b9:13:b0:44:55:e0:6f:3f:24:
ca:07:cb:1b:39:48:a3:e0:64:72:86:c6:d4:57:2a:bb:6a:ae:
4e:04:73:da:c8:a9:b8:ca:de:25:fc:3e:e3:7b:d7:9a:e4:c1:
22:90:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:40 2025 by rpki-client