Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: c411qLUD11Rv/wPjcFkyhvrL+FPpjSiEWIJFBmdYRnA=
Subject key identifier: D5:F3:C3:FA:5E:A1:7C:86:2C:43:58:C8:25:B6:F9:03:B7:10:D8:8A
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 0199FD341B04C5625D5398ABBC3DA9DAB0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: toSobpZlo61ZIV7n75hYSRTPwTvO5Fhmbasz2IgRRU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1b:04:c5:62:5d:53:98:ab:bc:3d:a9:da:b0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=d5f3c3fa5ea17c862c4358c825b6f903b710d88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:b3:0c:95:35:14:78:7c:cc:b7:60:8b:f9:
c9:09:56:59:2e:19:0c:3b:d2:bc:d6:1d:5d:b8:9e:
7a:90:89:c7:86:bb:4e:c1:b5:a1:f3:21:96:70:36:
83:0e:8f:c8:34:c5:74:44:80:97:29:d7:c8:29:22:
b2:9f:16:a6:86:d7:87:df:33:a6:ba:0f:96:04:66:
7b:7c:4b:c1:56:8a:43:66:62:20:f3:2e:1a:78:9c:
d6:77:50:56:17:21:62:62:0a:8a:78:09:6e:16:78:
8c:51:31:d9:2b:59:68:e9:57:75:72:b6:cd:01:1b:
5b:5b:b3:55:59:7b:8e:c9:44:63:48:d6:fd:71:f0:
ba:96:2a:7c:dd:db:81:76:3d:b2:f1:0a:bd:49:ec:
26:c4:96:1f:ce:ac:82:05:7b:65:15:28:26:7f:ba:
2d:88:8a:df:f2:62:e2:2f:3b:d6:3c:11:ef:23:3f:
d3:f3:b9:76:46:8c:5b:8b:e5:bf:92:2a:26:39:3d:
35:aa:d7:68:df:41:65:65:0f:70:ad:22:c4:ec:7f:
9a:2e:3b:a4:91:3d:ad:09:fe:cd:b5:43:94:06:ef:
6d:a1:0f:37:69:9b:29:38:f0:ed:56:db:3f:dd:be:
0e:b4:d6:5a:d0:ca:3c:a6:3f:5a:6c:d6:bb:2b:ef:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:C3:FA:5E:A1:7C:86:2C:43:58:C8:25:B6:F9:03:B7:10:D8:8A
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:77:a1:4b:a6:76:56:d2:01:f0:92:b7:0e:69:57:b3:26:4a:
83:b6:ac:7a:f3:d4:48:32:c2:d7:bf:d7:87:92:1f:dd:ee:4e:
f7:77:e1:92:06:d5:88:a4:77:3e:fb:6b:5d:69:e0:32:25:04:
a7:50:81:5f:76:04:ac:a1:35:b5:2e:b7:d9:62:44:8b:84:0c:
2b:85:9a:40:a9:d0:36:e1:1b:c2:cd:ca:bc:24:d1:74:30:66:
7a:ce:05:b5:25:05:04:06:ac:96:f3:a6:28:d4:7a:63:d1:13:
7a:91:53:d3:c9:9f:47:a3:4f:93:75:4d:c3:7b:ee:0b:9c:c2:
03:ee:ae:f1:be:4b:e3:ff:cb:e2:9a:05:3c:69:7d:9d:6b:d5:
20:c2:83:b2:4c:9d:3b:f1:1a:05:ec:f3:5f:39:74:35:02:4d:
1c:c0:99:27:20:a8:13:ca:90:1a:e7:58:9a:28:5c:27:4c:30:
73:f7:3c:eb:37:a6:fa:cf:0b:c4:7f:62:96:ec:7e:e9:d1:02:
5f:6a:4c:9c:b5:75:17:32:64:74:24:26:68:9f:cb:59:d1:b6:
de:7f:0f:78:c4:d1:cf:41:0c:c2:b7:17:bc:67:f0:1c:15:90:
91:df:7f:39:5e:d3:f6:0b:63:1b:2d:76:79:b1:6c:d2:44:49:
c6:cd:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:46 2025 by rpki-client