Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: NgEFinMc4pAHuqsbXokjaDT8WX3vv0n273b31WAc9oM=
Subject key identifier: AC:31:95:07:C1:BF:A6:1B:6A:52:03:BC:EA:A7:BA:87:3E:93:4A:81
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 0199FBEAA42622392D5D95AB32D8EF0519A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 07A3
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: ZJtfZxghAGqpZ57VzcSIbv6wHrOh8lPgn1JciIdQGIU=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a4:26:22:39:2d:5d:95:ab:32:d8:ef:05:19:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=ac319507c1bfa61b6a5203bceaa7ba873e934a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:55:59:aa:db:19:4e:36:0c:6c:e4:bd:9e:
45:4d:c0:f0:af:19:c3:4d:ca:b3:6a:69:5f:1c:4b:
fc:95:ca:34:c8:8f:99:74:ae:14:b8:9b:25:e2:e4:
79:16:a6:47:14:8d:d6:75:81:13:62:ee:de:f0:fe:
8e:91:ee:19:50:39:ee:a1:6d:d1:df:d8:ca:95:68:
83:48:4f:ea:27:57:e6:2c:9e:42:46:59:39:61:08:
ce:45:29:18:d8:ca:07:33:89:da:1d:4b:a3:4e:f9:
0e:75:88:7b:16:82:29:87:33:c2:e0:9f:86:53:10:
67:c5:6f:7e:20:09:d0:13:ee:a3:d7:63:32:18:83:
06:7e:20:7c:bd:3e:d1:c1:ac:7a:96:c2:e9:36:d9:
4a:2a:64:94:d3:ad:a1:cb:78:05:ae:b5:8a:8f:60:
a1:26:27:0e:4e:c8:b0:03:17:06:7f:df:cb:b4:9f:
f9:1a:d0:5c:17:4c:4f:69:73:c1:93:63:72:e0:76:
6f:9e:2c:7c:d5:b0:20:6a:5b:5e:57:4d:5f:e1:33:
68:3e:34:91:1b:15:36:24:70:cf:c9:3c:81:23:4e:
48:52:e7:bc:1a:55:7c:90:7c:5d:4a:ff:9f:0e:6e:
43:95:0e:e2:39:08:23:57:40:01:60:b5:20:95:ac:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:31:95:07:C1:BF:A6:1B:6A:52:03:BC:EA:A7:BA:87:3E:93:4A:81
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:64:98:56:7a:df:a1:bf:0d:cd:e4:8c:e9:33:0c:99:d5:b2:
5e:52:0d:e4:09:6d:90:79:df:24:36:1c:11:c6:64:90:8a:5c:
87:10:10:d3:ff:d7:43:8e:fe:3e:e3:40:b7:21:e0:02:c9:31:
fd:5b:cb:75:59:e8:4a:ba:16:41:05:8b:b6:f7:13:07:19:3b:
1f:ab:34:78:4c:47:65:d1:13:5e:0a:5e:de:f5:4c:55:70:a0:
22:5d:af:b3:92:d8:b7:f9:ce:cb:bc:a2:49:e7:28:79:3f:b7:
51:da:11:5f:ab:3d:4e:50:fa:17:03:4b:d8:20:7d:6a:2a:9c:
11:dc:20:03:30:3a:d4:16:02:a6:d4:bf:e3:b8:d2:50:5a:91:
d1:30:da:f5:df:19:dd:ef:3b:16:9b:e9:29:2e:cc:c7:42:36:
e3:c0:d8:ba:b0:9f:57:d6:2c:9b:18:16:9f:ff:7f:09:b3:0c:
56:50:29:51:9c:9a:9e:ea:17:bd:5d:23:17:73:74:0d:d3:09:
7c:b9:a9:e8:8e:4a:5a:f7:73:27:6e:f3:7a:c6:fc:5f:3f:10:
f1:5d:39:f3:7f:70:eb:4b:ee:3d:8a:2c:f0:a4:b3:37:1b:7d:
05:e9:59:b2:4c:ea:df:c7:14:6e:45:34:ad:d2:d2:6c:41:34:
54:5e:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:42 2025 by rpki-client