Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: iqRnhpmtEJDeAvJr3T5SKtZChJ8OptY+l8R6RwN+QeA=
Subject key identifier: 81:2C:63:CC:D7:B8:20:10:A8:ED:3F:22:5B:51:CB:B9:61:D7:BE:1C
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 0199FCFDAB027C0B4F05AB54EA7C7C14911C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: gb0ig6cwmSJYBgfKGh8maSDId8QaT3bk0jvQeasuvXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ab:02:7c:0b:4f:05:ab:54:ea:7c:7c:14:91:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=812c63ccd7b82010a8ed3f225b51cbb961d7be1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:47:5d:cc:7b:38:4e:a6:b1:b2:73:82:18:
20:8d:e7:2c:be:1d:1c:70:69:da:ba:f0:a8:4e:89:
ac:bf:55:e0:ab:63:06:dc:84:74:50:f8:18:a8:28:
36:d0:5f:b3:57:89:81:d5:df:84:5c:9f:0d:9b:2e:
98:07:cd:c6:59:0c:49:65:49:dd:71:40:66:39:84:
8c:93:77:ab:fa:f7:d7:fc:68:ea:83:76:22:6e:7a:
0d:16:47:ca:3f:87:a4:5e:ed:f5:8b:40:81:a6:68:
47:6c:c9:94:12:9e:2e:d3:02:af:ca:37:40:be:f0:
d2:99:bb:9f:0b:e7:bc:e0:69:92:b1:9a:2a:5b:54:
12:d1:5b:26:fd:c1:a4:f5:bf:fe:61:f0:c2:6e:8e:
e9:48:26:34:3b:0f:51:e8:12:01:5f:90:a7:4e:87:
b4:7c:e6:33:74:f4:9f:71:d4:21:8d:b2:81:1d:50:
b6:6b:b7:5c:a8:f6:cc:87:c9:cf:ff:3b:fc:28:41:
b6:74:5d:23:ff:51:82:51:61:cb:b1:75:e0:e1:7d:
49:17:8a:30:b8:4e:c3:23:14:dc:77:37:8d:6f:39:
16:e8:50:c4:46:93:b1:2a:f4:df:ca:f5:27:8e:4c:
e5:04:0c:15:e1:1a:d5:4a:43:c5:1c:05:12:28:1f:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:63:CC:D7:B8:20:10:A8:ED:3F:22:5B:51:CB:B9:61:D7:BE:1C
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b4:ff:9b:f7:7d:85:ea:33:8c:33:f4:7a:05:60:6c:ec:b8:
67:6f:35:45:71:ff:ab:fb:0e:a0:e2:ca:d3:37:3b:fc:cc:3f:
f1:dd:98:45:94:6f:39:b7:b5:40:c0:15:99:b8:16:c8:25:fd:
d7:b9:30:3c:4e:d3:69:22:cc:60:e2:a1:cc:24:5e:c7:c1:28:
31:ea:be:6b:09:ed:01:61:43:d1:62:a2:a7:73:bc:8a:8e:93:
cf:1f:2c:4f:3c:72:11:47:bc:c3:06:6b:5f:07:fe:9f:3d:c6:
51:8c:6a:a4:be:87:c0:d0:35:07:3d:1b:15:ab:38:dd:89:65:
a0:91:94:fb:7e:bf:b8:53:8e:11:a9:ed:e3:27:13:6c:8d:85:
76:30:fc:88:cb:41:93:4f:1f:3c:0b:05:70:be:cb:0e:a8:b5:
04:09:a2:90:21:8f:89:07:d1:c9:dd:c6:10:46:c7:6a:5c:8f:
f7:3a:99:ff:f7:ba:f2:98:46:56:32:fe:f9:9f:65:67:61:49:
d1:a7:ca:98:f9:78:62:65:cd:c3:5b:7f:47:93:5a:63:0d:fc:
f5:97:44:35:46:fc:05:67:e1:7c:54:4e:1e:33:a9:f7:92:3e:
27:29:86:f0:b4:fa:16:b1:b5:3d:a2:7c:f9:f7:c6:16:07:04:
15:69:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:31 2025 by rpki-client