Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier: h0fwsAlaXVNcg+CJzEqkJNTYCmz6CtkNbQAvuMAtlSI=
Subject key identifier: A9:44:63:A2:CD:06:7E:B4:20:BA:68:0E:71:5F:00:1B:BA:72:2F:86
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 0199FC58A6CBD3CB2573ED51F172E242DDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number: 04AD
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: SYPIWFwWfIXYmXxn1AH13wYO028.roa (hash: QWvqjb5YHZY9I2Hyectp6IE4/NuwBT9jZBm7xDi/oyo=)
2: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=)
3: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=)
4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: zowah+UN1pD5CwEDZMm4x6VEuQNu1T8PI4Cv1I7Sf4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a6:cb:d3:cb:25:73:ed:51:f1:72:e2:42:dd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=a94463a2cd067eb420ba680e715f001bba722f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:ce:b0:aa:47:ca:be:02:33:38:71:a6:a2:
ef:af:45:4f:06:1e:8b:d0:b9:f8:de:30:6d:97:2e:
51:5d:62:80:ea:67:73:c4:81:44:61:06:8f:34:e2:
7b:35:aa:91:08:74:4c:43:17:a9:05:01:b0:a5:5c:
fc:31:88:e8:33:22:b5:7e:8b:9f:72:fd:bb:ff:1e:
22:16:b3:6e:0f:9f:e9:96:d4:66:67:2e:3c:92:b8:
ad:2d:7b:45:8e:92:39:5c:7e:df:35:0e:b7:f2:5a:
b0:94:2f:b5:fb:aa:d9:20:2a:1b:70:b0:f8:3d:79:
41:1f:c9:62:bc:b2:c8:7c:f8:23:04:fe:e4:ef:97:
8c:46:35:f6:02:72:9a:5f:89:01:1d:3c:39:b7:59:
47:20:27:d3:3a:f6:94:e3:7d:0d:01:38:be:26:0f:
38:22:e2:af:04:3e:77:f4:eb:83:11:d3:51:8f:d6:
f7:ec:26:9c:07:29:c6:44:44:33:f6:bb:20:ed:46:
7f:16:86:94:c1:df:94:c4:31:b8:ae:81:1b:f7:a9:
1e:d3:4e:52:d3:df:b8:2f:5a:13:ba:d0:85:cb:a1:
fe:8b:1e:77:2a:5f:5b:48:ee:57:26:16:72:b0:30:
14:c7:97:0a:f3:99:42:10:26:11:40:5a:86:3f:43:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:63:A2:CD:06:7E:B4:20:BA:68:0E:71:5F:00:1B:BA:72:2F:86
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6d:cc:a8:a4:a5:65:ca:cf:e4:a9:c4:ae:c8:11:db:87:7d:
9d:33:46:54:15:a0:a7:42:c5:12:84:23:11:55:75:ff:c4:3c:
77:4f:45:d1:ad:1e:ec:18:07:86:5c:82:16:c5:00:e0:43:cb:
29:82:5c:db:27:4f:6a:ca:8c:e3:64:16:cb:c0:d0:45:04:46:
bb:c8:83:a4:bd:76:06:b1:d8:16:6d:09:30:97:9a:4c:f5:a0:
67:6a:d6:9e:65:53:7e:3b:1a:f2:5a:dc:5b:35:2b:3b:d4:e8:
3f:51:a0:5a:0d:0c:f4:b8:b0:89:fa:7d:90:0f:31:f0:62:0f:
fa:70:75:72:7d:d5:9f:d5:d1:f9:c5:a2:e8:09:d2:c4:7f:f8:
9a:8f:c6:b1:b3:fb:12:3e:06:0c:79:13:8a:d4:61:9c:ff:a1:
c2:d1:c8:cb:15:5e:5c:ca:d7:0a:f7:a4:f0:d8:91:f4:5d:8b:
4e:0c:8d:46:3f:e5:5c:3c:69:05:a0:43:78:b6:22:54:e4:9a:
de:ad:e8:f2:da:6e:89:a5:a9:56:3c:a7:7c:f5:bd:fb:42:05:
f4:a5:d8:6a:83:8f:40:70:6b:4d:25:d7:cf:8f:52:25:da:3e:
cf:13:4f:90:fd:25:64:ab:c4:8f:c6:88:30:cb:50:e3:0f:01:
5d:6a:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:30 2025 by rpki-client