Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: BtgHogOqHEI6foMqq7jqiWrF3zd2p6Xjv155rvi+0fw=
Subject key identifier: D7:0D:59:1E:DC:40:37:5A:BE:9A:36:DA:3B:D2:AF:23:AF:F9:2B:C8
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 0199FC58C82956AE15EFABF89F82E75CD379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: KFWS9yRP1H/7X7ilh/7QTXx/aPfsSEBLqQSXO/0q1Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c8:29:56:ae:15:ef:ab:f8:9f:82:e7:5c:d3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=d70d591edc40375abe9a36da3bd2af23aff92bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:40:08:7e:85:56:fd:20:d3:94:85:42:1f:
d9:50:24:a7:69:0e:68:b2:7f:90:55:12:87:e6:61:
d1:23:be:f3:b1:b2:31:c0:47:54:8f:79:e1:85:4a:
f8:1d:3e:49:66:b3:c9:7d:ec:7a:a3:18:ec:01:62:
4c:15:ec:64:cb:64:1e:ee:3d:ae:71:d5:f9:39:24:
29:42:ab:84:99:19:44:f8:09:54:e3:5e:98:7b:8c:
18:b8:2c:3b:09:50:d0:00:be:f2:fa:0f:2b:bc:45:
11:19:68:a8:c6:86:44:de:3e:cc:19:8d:8f:23:bd:
5e:3c:c1:8b:2e:0e:f8:33:51:4c:cd:9a:3c:83:d8:
6f:fd:94:30:44:e1:ba:7e:59:53:07:71:01:05:16:
11:9c:8b:76:4a:2a:9c:3e:d6:8c:ea:eb:b3:8a:2b:
7e:bc:71:b8:77:86:4a:58:d8:c5:ad:2a:ed:64:5e:
80:a6:a9:8a:98:31:63:21:fd:66:1c:23:08:ef:0d:
61:56:e9:b0:97:2c:5e:48:cf:83:95:2b:a9:3c:80:
38:66:3e:c2:b0:0f:e9:6e:db:b4:ad:16:ea:c3:cd:
be:df:39:4c:bc:c8:de:40:9b:b5:0e:e6:24:d4:4f:
59:e3:34:a5:03:03:39:7b:ef:bd:67:ed:87:ad:fc:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0D:59:1E:DC:40:37:5A:BE:9A:36:DA:3B:D2:AF:23:AF:F9:2B:C8
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b8:0a:c0:b4:b8:9b:97:61:b7:0f:fb:63:2c:e6:a6:37:32:
2f:1c:ba:c9:eb:d3:9e:27:8c:25:dc:ab:d9:98:76:3f:55:82:
25:fc:ff:85:ee:cf:9f:cf:6f:57:fb:b2:72:0b:a2:8a:ca:7b:
a8:80:c3:c4:82:49:0a:d8:c1:e4:90:64:50:77:bc:b6:4e:f6:
29:ca:a4:d7:15:1e:ed:3d:26:ff:48:9e:92:fd:b8:90:e5:11:
6d:58:fc:41:dc:ec:21:16:6c:a7:c4:c5:31:9c:01:e1:ef:5f:
dc:0d:b1:7c:10:1c:9b:46:6c:33:7e:21:e8:fa:79:c5:7d:08:
b0:d5:e1:5e:e7:d5:2d:b7:7a:a2:e9:08:d7:ab:6e:fd:99:54:
e1:6e:a8:c7:92:3b:33:e5:17:22:31:92:1a:4c:aa:4d:d9:58:
8e:3a:1e:d6:30:5e:81:ec:0a:a7:30:cf:3e:78:58:ee:cd:35:
2d:07:5b:fc:9e:db:ac:db:08:fd:db:e8:c5:ea:c6:10:e5:32:
30:aa:50:94:59:98:13:ad:fc:e7:fa:91:8c:57:27:3f:cc:60:
97:54:7d:35:21:5b:a2:23:35:5c:08:e3:8e:93:96:cb:a9:75:
0b:e7:06:0d:6c:21:65:60:95:10:aa:87:10:60:c4:8f:e6:7a:
54:b1:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:21 2025 by rpki-client