Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
File: z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft (raw, json)
Hash identifier: aE2ZofrWOBoIfAuXdwq39PYP5TcMKiGfFTJ0i+eN3ho=
Subject key identifier: 94:1C:62:85:C0:75:DF:46:FA:E3:BC:00:86:00:C5:C0:02:CE:7E:BF
Authority key identifier: CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
Certificate issuer: /CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Certificate serial: 0199FC8F977DCFACBC9025124CD498E83280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
Manifest number: A7
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: gIxZrWlHl0oRXmPccq0bAMsTD7c.roa (hash: icJylGKFEOgR2y+9aMtSkzbhz2/KK1SV2PGADtfOVCk=)
2: z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl (hash: UbHMp1qhgXzIzjlc9FS6QN07U2pXa9W+ju/WY5NaeP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:97:7d:cf:ac:bc:90:25:12:4c:d4:98:e8:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=941c6285c075df46fae3bc008600c5c002ce7ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:5f:55:c8:8e:f2:c9:f4:b0:48:78:ad:ef:
95:22:34:9b:21:f0:aa:3c:43:ed:3e:5f:3c:fa:29:
f9:af:e1:a0:3c:e8:9a:f9:d8:67:0d:46:09:55:81:
42:4a:7b:b4:d1:6a:2f:c4:f8:20:85:19:55:82:6b:
0e:97:1d:bc:f8:61:e9:5f:9d:69:75:ff:85:3f:11:
5b:63:26:e7:4d:59:68:1a:09:93:96:d6:42:d3:99:
e5:9a:c5:21:38:ff:60:24:b9:52:a2:27:b0:26:51:
d9:bf:be:4f:92:3d:7c:4b:53:e1:65:b4:c6:6c:64:
49:ac:a1:bf:0f:45:c9:c5:ad:de:d8:f9:b4:8a:18:
cf:bb:a9:20:5e:36:65:d5:e8:bf:1a:cb:70:44:9e:
dd:4c:af:8a:9d:c3:92:1a:e5:6c:dd:4e:15:f6:24:
b6:ec:bc:6b:26:88:e5:4a:55:95:7f:ae:a0:85:61:
13:bb:26:37:6a:d8:17:f1:8c:eb:59:78:52:51:61:
4e:ac:7b:ec:ff:df:00:55:46:c8:8c:f8:6d:d3:83:
7d:d0:14:d8:28:54:20:a2:2a:22:ff:f3:bf:76:02:
a5:92:2c:ef:04:0f:f9:44:cb:38:63:3a:53:8e:c3:
20:bb:65:36:72:f7:98:20:9d:93:bd:94:4b:ce:3f:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1C:62:85:C0:75:DF:46:FA:E3:BC:00:86:00:C5:C0:02:CE:7E:BF
X509v3 Authority Key Identifier:
keyid:CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:13:cd:dd:eb:e0:a9:f5:fa:32:0f:66:86:50:48:9f:14:9b:
f6:b5:00:ab:e2:a7:fd:fd:93:1f:b5:c5:e2:75:bd:8f:65:1c:
da:1f:42:fc:57:e2:fb:52:b0:7b:67:c4:71:b8:12:fd:81:0f:
e2:a1:44:58:e2:75:ed:ba:70:cd:c1:88:45:2c:79:9b:04:2a:
0c:42:df:f6:17:04:b8:81:6b:60:5d:b1:8f:de:6e:b6:f7:fd:
63:2f:f1:53:a5:10:32:ba:54:a7:41:10:2a:4b:1d:07:27:4a:
36:4f:57:a5:c4:bc:11:68:e1:6e:d6:8e:44:9c:68:22:23:c7:
41:cc:05:b9:cd:18:10:06:e5:ea:85:8d:e6:55:d3:e6:89:68:
99:9e:74:15:16:ae:48:3c:28:08:a1:41:57:03:1c:fd:7c:87:
b6:e7:69:ac:82:9d:2c:d7:fa:53:60:ae:21:11:a5:53:cc:64:
e6:5c:e3:0b:78:b2:f1:4f:70:b7:9b:7f:65:76:ea:21:ee:16:
a1:28:da:17:48:3f:c1:84:56:9b:87:af:5f:4a:b0:39:ec:54:
02:a0:9a:86:05:59:9c:25:90:a2:5e:29:cb:57:63:b5:9e:e6:
75:d0:e1:e9:74:f9:a2:ba:78:f3:fd:c3:bb:b7:39:d5:d9:08:
34:e9:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:58 2025 by rpki-client