Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: sk9cRy6Ld668NPlfl9RI1lUkQJbyEIx+63ZTb8pQgW4=
Subject key identifier: B7:5E:40:92:FD:FD:D3:C1:0C:B7:A4:4B:89:BB:41:C6:6B:86:13:16
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 0199FCC67837067D28EF82A2E6DCEEFDB4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 02BC
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: mNwNraKcfEUxzHriqiEiMMdeSvg.roa (hash: 45vqanB1XUwWsya+Cl4oWx6YrUwCokRSX6fmcXt/QTE=)
2: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: Mtd+oqvijt0DmhVMXYcVG/G+q4O4+sQwrB1n+HC7fX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:78:37:06:7d:28:ef:82:a2:e6:dc:ee:fd:b4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=b75e4092fdfdd3c10cb7a44b89bb41c66b861316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:64:6f:22:a5:d9:8e:54:8a:b6:8c:af:0a:
a9:bc:2a:5d:2a:7b:f7:f4:20:b6:d5:65:c5:21:d8:
e7:d8:a6:89:b0:22:d3:fd:84:0e:f9:0c:0e:18:c5:
f2:5f:0b:6e:63:41:a4:f6:28:1d:40:2f:53:10:e4:
42:86:31:bb:f4:d8:3f:f6:f8:09:6a:f6:96:1e:e0:
15:6c:c4:ff:1b:f6:5d:8c:77:b7:5c:ba:a7:a8:dc:
7d:f1:ee:2c:e1:c1:8b:b4:03:f6:04:ca:af:f0:f7:
d5:ed:22:5b:80:2c:08:a3:3f:a9:13:1a:2b:40:24:
81:5d:ae:d1:ff:08:41:57:f4:7c:9e:c0:bd:ab:b4:
5f:be:6f:16:19:53:c3:9b:4b:71:bd:95:7a:a8:24:
54:d3:78:7a:dd:a1:20:dd:69:d1:a9:18:d7:6d:0b:
f5:6a:23:ea:20:0e:5f:f3:3b:0f:49:fe:a3:ec:23:
b1:55:1c:e7:5b:c0:14:82:a9:5a:56:fb:82:e0:40:
cb:eb:9b:96:1b:87:fd:d7:bd:af:83:d9:df:55:e9:
9f:a5:f2:85:27:ed:cd:14:7b:82:d3:b0:35:16:86:
03:76:78:70:ea:30:23:78:d6:1e:3b:33:c0:9f:22:
16:83:9e:7a:9c:75:c9:01:63:7c:bd:78:c0:cf:4e:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5E:40:92:FD:FD:D3:C1:0C:B7:A4:4B:89:BB:41:C6:6B:86:13:16
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3c:74:e5:9a:11:d4:6a:fa:aa:f5:32:f3:21:7f:6a:06:a1:
17:9c:c0:dc:59:20:e7:e6:56:4d:e2:11:77:fd:70:b5:e4:b4:
c8:ed:08:bc:16:73:99:6f:4b:11:2a:fe:21:eb:80:2e:1a:e9:
65:bb:9b:cb:36:f7:98:72:1a:5a:48:3c:30:84:34:0a:f4:f8:
8b:71:dc:af:b2:74:c3:e0:67:25:35:7a:20:80:e3:dd:6e:b6:
b0:07:03:a8:06:27:6c:ea:24:39:eb:a1:8e:3c:69:30:89:71:
cf:3c:47:8c:9f:33:e6:ab:3f:b5:60:e1:87:24:b0:fb:c2:c1:
ff:da:98:64:a0:69:a7:0c:e3:11:e7:4d:f7:ad:9b:ea:7d:19:
00:84:83:8c:46:e7:a4:4f:ae:04:8a:0e:5c:98:48:b3:79:7c:
92:c3:e9:7f:e6:b1:79:9f:b3:a4:6c:ac:bc:d9:b5:0a:2e:f2:
ec:1a:59:97:21:4b:d0:0f:4a:92:5b:52:f5:8b:8e:2d:bc:4d:
b1:0a:9a:65:ba:23:94:1a:63:50:f1:e3:0a:53:3b:97:3b:f2:
28:5a:97:77:5e:6d:19:a7:e5:f4:58:12:09:7b:db:57:1c:17:
06:00:ad:87:9e:8a:d3:d8:14:3c:d0:79:33:e2:4f:1c:99:01:
8a:93:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:45 2025 by rpki-client