Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: 9mjaRJzHeQZxKIHLJdUDPnEqS7Thp9vMmX2Z4pTFcTs=
Subject key identifier: 3D:1F:C1:55:AA:B8:5D:77:6F:04:DF:5A:E8:E6:54:83:87:F0:21:81
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 0199FD3484157BA76E1D0967CB234BADA31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 096A
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: jMP25b0tTxNEhN9ea9CJ8FP1p7cGCKIesJNSB23GEls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:84:15:7b:a7:6e:1d:09:67:cb:23:4b:ad:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=3d1fc155aab85d776f04df5ae8e6548387f02181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:5f:72:d9:0c:a3:a3:1d:a5:0f:20:01:73:
7c:99:f8:dc:43:c8:94:3f:53:4c:f7:b6:f0:25:b6:
40:09:d5:67:aa:e1:17:90:2b:92:e3:12:ec:41:ea:
82:1d:71:b3:38:35:d6:af:98:63:c8:8c:78:4e:08:
ac:fb:5a:da:e9:60:1e:c0:e4:8b:88:66:a7:b5:08:
93:a4:3e:44:18:96:7c:86:dd:ca:73:b1:a9:a8:20:
e2:ce:45:fe:63:a7:ef:83:5d:b1:05:5e:2e:45:fe:
08:55:52:fd:8b:7c:30:60:c4:2e:d3:64:83:b4:7d:
3b:3e:b1:68:70:8c:70:98:88:93:3e:73:fd:77:3b:
1c:be:21:ce:d9:ab:30:f4:b0:14:f9:99:89:04:9c:
be:bd:d4:d3:30:4a:56:c1:28:8b:42:17:9b:32:9b:
cb:4e:e8:55:30:3e:f6:77:8b:17:2d:28:ee:09:9f:
35:7a:3e:2d:cb:67:77:da:b4:63:f0:74:5c:da:94:
2f:86:ec:0d:4e:fe:72:fd:f5:60:1e:cb:0b:61:13:
a1:6c:75:98:05:30:83:b2:75:6a:54:95:01:8f:48:
95:d2:41:c4:e2:21:c7:c4:70:13:05:30:af:16:8d:
45:86:50:e9:6c:82:10:1d:18:c0:f9:b8:a6:28:c7:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1F:C1:55:AA:B8:5D:77:6F:04:DF:5A:E8:E6:54:83:87:F0:21:81
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e7:5f:50:0d:75:e0:47:ec:dd:d9:24:00:8e:58:35:b9:8e:
77:32:67:35:20:8b:d9:70:c1:f1:78:21:3e:96:e3:e3:da:6e:
33:24:40:23:f5:b1:79:e3:6e:e8:db:d3:20:3d:37:b4:6b:2b:
16:4c:71:c7:bc:f4:61:40:42:78:c1:3a:d7:f5:36:9b:20:eb:
35:22:1f:06:38:f8:2c:8c:cf:ec:74:3b:67:57:f4:9c:a1:8c:
1c:88:84:1d:32:b0:cc:fb:bf:15:82:07:19:42:0d:fc:eb:6b:
5e:23:4b:47:ef:db:22:6f:b4:59:81:0a:29:ef:dd:7e:56:19:
51:f3:52:e9:09:ac:8f:39:8e:98:a9:bf:74:39:5e:70:27:d4:
2d:58:fd:b8:6e:da:be:f3:15:5e:b2:13:dd:a9:ce:d3:9e:dd:
e0:96:a9:67:2a:83:ee:35:73:7d:b2:b8:90:88:a0:1c:76:ff:
c9:98:50:bf:5e:1b:5d:29:04:fb:89:93:38:f2:86:e1:76:f7:
81:94:1e:da:26:f5:e4:27:95:c0:13:47:d8:1a:ed:09:1a:a7:
8c:f3:87:ca:6f:3a:ae:72:02:c0:c2:85:dd:24:a0:ab:91:40:
a6:63:66:2c:0e:8c:e4:cb:02:5e:fb:e1:d3:8a:64:2a:4a:28:
c1:7f:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:14 2025 by rpki-client