Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: PmhGZLpc1sL7mV1urIEYwxfWdiToSfKpL9GRZGXSZHg=
Subject key identifier: F6:09:C7:E7:9F:AD:59:EA:66:8E:E4:E3:03:9D:83:43:11:15:47:A1
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 0199FC591AA9C4F2F8CBFE06C85887B1182F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 09EA
Signing time: Sun 19 Oct 2025 12:02:01 +0000
Manifest this update: Sun 19 Oct 2025 12:02:01 +0000
Manifest next update: Mon 20 Oct 2025 12:02:01 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: UAWneWsYK8NL9QWtl78CgNmAEOZqsUp8r4ukhny154Q=)
2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:1a:a9:c4:f2:f8:cb:fe:06:c8:58:87:b1:18:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Oct 19 12:02:01 2025 GMT
Not After : Oct 20 12:02:01 2025 GMT
Subject: CN=f609c7e79fad59ea668ee4e3039d8343111547a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:6f:79:4c:9f:7a:c9:0b:4c:be:f1:3c:e1:
e7:31:42:5a:67:48:6d:c6:79:ce:53:52:c3:18:2d:
39:96:75:df:66:66:ae:fa:3f:44:07:ae:62:81:1b:
a9:00:6d:3e:bc:b2:e0:35:91:e9:da:06:ab:4a:e6:
10:66:a4:ac:d2:32:ce:bb:69:61:06:a6:96:ea:e1:
0d:4c:b2:ea:b5:a4:c0:69:82:d8:fa:35:6a:01:c9:
72:d4:21:e7:b3:41:b2:1d:49:da:bb:6b:2f:32:de:
aa:2d:c3:ac:20:82:f3:19:ff:62:5f:3d:7e:30:59:
71:02:d8:ca:d4:ff:0e:6f:25:81:ea:68:db:0d:69:
a0:4e:41:38:83:1b:d0:f8:4a:25:47:d7:27:5f:9c:
23:ff:11:5f:62:fe:29:f1:3e:8e:2f:6a:cb:5d:ca:
43:cd:7e:e8:d8:7a:fb:75:50:ed:50:62:7f:a0:fe:
02:d5:2f:0b:b6:66:5f:01:c2:1f:71:36:8a:d5:37:
f5:d2:3d:21:25:f8:c0:36:6b:46:4e:21:c3:1b:08:
ec:68:1a:fd:aa:50:e1:64:47:18:7c:ac:f3:70:69:
5e:bf:09:09:30:e2:f2:f9:c1:ae:fd:96:31:5d:39:
16:fa:26:7f:8a:00:b7:e8:d5:5b:ef:21:f6:43:b5:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:09:C7:E7:9F:AD:59:EA:66:8E:E4:E3:03:9D:83:43:11:15:47:A1
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f9:a1:88:d2:2d:b4:c1:86:bc:b0:0c:d3:86:1c:aa:8c:1e:
b1:7a:ee:a7:d6:98:ac:04:7d:23:78:59:69:11:59:57:b8:0d:
03:d7:a7:0c:3a:a2:13:43:ca:c4:9d:d4:60:88:0e:93:48:42:
73:bf:00:0d:96:f3:d3:69:46:a2:51:1d:21:5f:d5:4e:24:e1:
f9:12:35:ec:02:f0:28:bc:56:ed:51:3a:41:55:63:85:e2:6c:
6f:d8:20:5d:f0:f8:ac:e7:7c:9b:ae:71:0f:18:16:1c:6a:7b:
50:f3:a5:33:06:c6:bb:63:a4:d5:fd:ae:f9:8e:c4:09:c6:2d:
f7:14:7a:fa:e3:f6:64:05:ec:3d:39:1d:8f:f5:0b:73:b8:74:
8e:37:c8:40:1f:78:37:6a:21:61:63:ff:93:d3:83:73:8f:c7:
52:bf:df:c9:ec:5d:b0:c4:35:26:f5:f5:8a:04:2c:0a:bf:30:
45:e6:74:f9:47:94:9f:48:3e:35:83:bc:ab:a3:c7:4f:e0:d9:
e6:8f:1d:1a:44:f8:cb:5b:43:ba:7a:9a:79:9b:7a:51:3e:3d:
22:1c:41:83:57:dd:be:81:7b:e1:e8:05:38:bb:cb:29:b7:94:
e6:09:d9:6d:03:a3:d8:1e:77:70:46:e2:96:b1:25:09:a5:e8:
87:8a:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:19 2025 by rpki-client