Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: 4fZHtEG4ZKyFyMKvqPAEyGwYOIX33bIle6x67KSAW0w=
Subject key identifier: 46:F4:66:C3:F0:A8:97:26:D5:EB:B3:14:AC:16:87:BC:54:A4:35:E9
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 0199FC218AB89D6602A413D9D43E9C0FB9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 105F
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: GX3q13gHLzjg/nWjE5pl6bQOMI6hPpx0zHxkhqRGU1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8a:b8:9d:66:02:a4:13:d9:d4:3e:9c:0f:b9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=46f466c3f0a89726d5ebb314ac1687bc54a435e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:b5:14:24:8e:0d:c5:cd:32:e7:28:52:56:
a9:8b:b1:6e:58:a2:25:5e:8b:2f:de:34:05:ef:5f:
0a:b4:d6:18:04:ca:4b:59:bf:ee:ce:31:30:c1:9d:
e5:3d:76:80:09:bb:3d:9b:76:d5:45:50:34:3a:88:
b9:aa:1e:fd:1b:f6:ad:81:3e:1a:a9:c2:f4:cd:3f:
2d:46:f8:8a:e3:79:b9:05:47:b6:4d:66:d1:34:6d:
58:4a:10:97:21:7f:9e:72:6b:8f:c7:97:fc:f7:0b:
ba:a8:eb:35:9a:b0:dd:38:c1:23:e5:43:f4:b5:40:
e2:61:1a:1e:f9:88:02:ae:17:73:46:84:33:e6:0e:
b6:4a:d1:33:73:59:cc:9e:57:d1:d0:08:1d:6e:99:
7d:b5:69:ae:58:b8:5a:66:a7:90:3e:07:be:e9:10:
22:78:c2:07:6b:a4:e4:16:7f:f3:42:8f:1b:a0:42:
6c:7a:c3:f3:75:d3:de:43:ec:b6:a1:eb:a1:26:cf:
ea:e7:11:34:ab:04:c6:f1:b5:77:b2:ae:78:98:4f:
97:0e:41:46:df:54:91:8b:40:35:21:34:34:b0:c8:
d8:89:e5:43:cf:32:58:27:40:27:ea:b6:16:f8:4f:
a6:99:2c:94:74:0e:a0:f7:d3:ab:eb:4e:f4:78:1e:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:66:C3:F0:A8:97:26:D5:EB:B3:14:AC:16:87:BC:54:A4:35:E9
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5d:3e:3d:f6:03:a1:92:84:57:c5:13:9e:ef:c2:b0:70:46:
3a:0f:8a:40:a2:d5:51:88:d7:ea:fb:47:0d:ee:70:1f:b0:49:
ad:59:25:d7:e0:59:ea:89:3c:0e:39:65:c6:de:68:ce:44:8f:
ca:cc:65:4a:96:8b:ea:ce:f1:aa:26:f5:84:9a:cc:e6:82:06:
43:fc:0c:83:59:d9:85:2c:dd:6a:85:bb:cf:8c:c1:00:9f:a8:
1d:35:2e:b3:6e:da:16:77:6b:a5:c8:03:e1:9e:55:cb:27:fd:
9f:2d:cb:34:aa:af:51:12:3c:17:ed:ac:16:c6:fa:c9:ac:cf:
82:25:7f:f4:ba:25:f6:9e:a1:e3:21:b3:14:1a:87:91:26:0e:
51:49:0a:1f:e7:b7:2f:f3:46:d1:ff:8b:dd:4c:51:0a:47:f5:
18:14:c1:de:17:d5:cd:c6:fe:cc:8e:f6:50:ab:44:61:89:ad:
cb:8d:28:13:d7:b6:0f:25:d9:51:23:32:d0:92:38:a0:ac:67:
b7:cb:97:29:72:9c:e2:c7:1a:10:05:90:de:a5:e5:63:88:92:
c8:b7:44:51:04:79:10:a3:2e:1a:8a:13:3b:70:75:07:ad:0c:
79:cf:aa:61:cb:2e:42:54:e1:ba:69:00:26:bc:e5:e5:0d:f6:
57:1d:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:49 2025 by rpki-client