Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: 9+j+eKiX6mby7tZK4rnpxuVWC23eXJJgKMge4VVfOsQ=
Subject key identifier: 16:DC:D1:D9:6F:0E:B2:0E:28:16:B5:5E:56:4F:0F:07:4B:BE:D9:3E
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 0199FC58402B216E2AB7EB70ED9A25091BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 0117
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: 27OstEMkFz6z8oCspY9UEpTgDCI.roa (hash: lDFDHelXei1RQWdM96bxB8eJAkvqOPb886jPNWfOo/U=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: TMWSCLC14HWqjdybHkiJ2t7BCxGTDSreYvObozrXoaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:40:2b:21:6e:2a:b7:eb:70:ed:9a:25:09:1b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=16dcd1d96f0eb20e2816b55e564f0f074bbed93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:25:5c:95:a5:23:ae:4d:86:29:26:f4:a8:
64:a2:06:28:93:2b:54:50:f6:40:ca:8a:aa:9b:b9:
ea:cd:b6:e9:5e:2c:25:ab:40:08:86:47:e3:de:a1:
6f:69:4b:23:c0:db:cc:69:4d:eb:14:93:64:22:aa:
7a:fd:c9:38:14:65:5e:5e:db:ad:7e:6d:d1:87:a3:
04:84:7c:f5:5b:5e:cf:ab:07:33:79:5b:7c:58:44:
19:08:b6:e1:07:8c:a0:cf:ba:3b:b5:12:b5:32:f4:
2f:00:2a:ee:e2:e1:20:18:68:dd:4c:2a:8f:09:39:
b9:eb:82:6f:04:d7:42:72:8d:de:0a:30:af:81:ad:
e8:db:32:ca:f5:d1:45:92:4d:94:e0:f9:49:2c:3e:
a1:c4:fc:55:14:67:3a:3b:15:b3:5b:dc:d1:7e:2c:
78:47:91:db:e5:47:74:ca:2d:0f:b6:97:2a:b5:e8:
26:f3:21:2e:fa:6e:d3:b8:18:aa:50:1b:e2:94:38:
2d:26:55:ff:17:e9:b5:35:d9:96:67:c8:de:5d:f1:
4f:07:ad:c9:96:5f:16:bc:b8:ba:e5:11:81:73:7b:
c4:e9:ec:a7:3e:24:2c:b4:1d:16:34:28:39:44:5d:
88:17:70:62:d1:a5:be:16:6d:34:b1:38:3a:23:e9:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DC:D1:D9:6F:0E:B2:0E:28:16:B5:5E:56:4F:0F:07:4B:BE:D9:3E
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:95:02:c7:de:50:0b:76:53:80:9a:68:ce:dd:bf:9f:e5:2c:
9e:e2:d2:3d:3c:1e:ed:99:b8:fd:bc:80:4f:73:d2:2f:b4:a7:
ec:8d:43:1e:ec:32:6a:82:bd:c9:06:32:8b:ed:11:88:51:7e:
82:c5:a1:25:0b:11:97:3f:3c:e0:bc:af:b1:98:c3:71:3f:8a:
4b:3f:90:b3:4b:1c:52:b0:d7:3e:3d:f8:08:8a:be:cd:91:e7:
1b:a3:92:4f:75:54:f3:fd:ad:ef:4e:16:6f:0a:d5:84:db:a5:
eb:ae:2f:7a:33:1d:d9:87:c2:93:55:88:f1:f5:d1:df:01:32:
79:03:35:4b:1c:13:da:ca:4f:21:3e:32:3c:5e:1f:50:d0:19:
4e:0f:7d:51:0e:fc:1b:bc:e9:c1:10:58:d6:56:d6:1d:67:27:
f4:25:3e:72:b1:89:f7:db:e4:41:1d:c0:21:da:be:0e:5c:d9:
c1:04:c9:bf:66:a0:ab:06:c6:a7:30:1c:06:d7:8a:9b:08:7b:
ab:60:f3:31:ac:00:51:57:30:d2:3e:c5:b5:46:d5:e3:fd:a8:
2e:bd:da:1d:5f:25:60:a3:9f:ae:3d:fb:84:d9:e6:6d:d0:96:
be:95:21:82:34:dd:00:bb:85:81:d4:17:2a:ab:c5:56:6a:7a:
0d:92:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:18 2025 by rpki-client