Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: PXcxO6ZXZ2Zqm2rJUPjXaumTEcqqXtsAuMWYf5rk28k=
Subject key identifier: FE:1E:F8:4D:87:4E:D1:42:EE:22:B6:6E:E6:EA:10:94:C5:EA:46:4F
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 0199FC21ACCEE3ADFAAA1F7B4030BA5265CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0947
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: mNeWff71JBlu_711hQE_pDJJqWY.roa (hash: sTWxhEvJ0wu3OQU/YQdLA13MJUmx0ec59XmwGow7zF8=)
4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: 0mA5N0iihvgiwNw26Ufu6OnT1LCkmg1fbRUJCDTzuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ac:ce:e3:ad:fa:aa:1f:7b:40:30:ba:52:65:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=fe1ef84d874ed142ee22b66ee6ea1094c5ea464f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:d4:68:73:89:cb:d8:1f:0e:cd:a6:04:ea:
47:e8:b9:21:dd:53:17:a9:f6:12:54:17:7f:ca:5a:
8a:78:00:f9:85:aa:df:41:d1:09:c4:52:01:a8:34:
cc:52:d2:d7:40:7d:b6:d1:1e:c9:5e:42:58:18:3f:
5a:29:0d:ea:80:49:b5:b2:04:de:de:d0:e3:98:b4:
85:ef:63:12:0a:0b:ee:92:17:81:7c:90:d5:6d:18:
d4:40:90:fc:18:05:ea:94:c6:15:bd:c3:09:f4:a1:
18:fa:f3:2e:e0:c4:43:ab:51:10:43:97:9b:ca:51:
3b:7c:51:cf:55:de:57:b1:78:93:68:1b:10:09:7e:
2d:2a:6f:ce:36:6d:85:66:f7:47:eb:96:ba:8a:67:
86:26:cc:82:38:72:ca:12:d6:59:e9:d8:d7:81:ae:
e8:cb:63:06:3e:af:bb:64:7c:cc:65:aa:84:36:05:
80:47:b5:a8:2a:b7:29:59:e2:11:69:5d:a1:dc:e1:
b4:4c:f6:5e:17:b8:31:e5:cb:58:d7:99:41:16:a1:
b7:12:ec:f3:ca:c3:4a:07:5c:54:da:1e:55:53:5f:
23:5a:c8:5a:6e:58:db:c7:dd:78:70:fd:45:62:79:
cc:83:d1:70:fa:21:f3:11:13:ee:c7:a3:27:36:32:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1E:F8:4D:87:4E:D1:42:EE:22:B6:6E:E6:EA:10:94:C5:EA:46:4F
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:70:7b:79:45:e6:7a:ef:f7:5c:98:78:92:9b:11:d3:e8:43:
c3:fe:cd:40:f7:8d:64:ac:d8:f8:f0:a6:50:94:75:6b:1f:56:
8e:fb:76:56:e2:1d:47:d2:88:01:51:57:45:9e:7a:ce:83:50:
5f:a2:fe:01:a0:b7:06:76:76:b2:0d:77:e9:e6:44:48:9e:7a:
ae:d1:52:66:69:6e:c4:38:e3:34:02:6e:86:71:f4:6f:26:24:
ba:8e:07:a1:77:91:b3:4d:d6:e2:28:3c:91:0f:90:7b:80:d3:
f3:e9:da:5f:69:99:37:9e:35:66:e5:30:67:c5:dc:b3:58:39:
96:45:42:33:21:0e:c7:2e:c3:5f:d1:f0:71:71:db:8d:f4:96:
e9:75:83:fd:4b:e5:3b:b8:46:d0:99:45:c9:00:f9:27:f0:69:
79:04:de:68:37:b2:a2:2d:58:71:20:30:d8:79:b7:14:c1:8f:
63:a2:fc:7a:ce:89:5b:32:d9:88:2a:94:05:94:57:80:99:8f:
9b:fb:03:09:d5:4c:b7:f5:d4:b1:ce:73:29:87:4c:b5:75:6f:
9e:43:94:30:5b:2e:cb:4c:ce:aa:04:85:fc:5e:cd:85:60:98:
7b:4d:31:a9:ed:d1:53:4a:cd:b1:48:33:35:51:e6:67:7b:f1:
2c:23:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:42 2025 by rpki-client