Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: YDnm9s4vKUkCeiEPpgTUbK0M9tCghfFb7bHAL1BHIrI=
Subject key identifier: 88:67:89:53:93:03:2B:C4:49:CC:86:50:E7:50:6A:B2:AB:31:05:01
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 0199FEB47AD89520F3E06464C1E19EA3A798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 1505
Signing time: Sun 19 Oct 2025 23:01:04 +0000
Manifest this update: Sun 19 Oct 2025 23:01:04 +0000
Manifest next update: Mon 20 Oct 2025 23:01:04 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: z55GDUcTsxLiZ6HugOraT9+D8hPa8V5CKjdB5W5Vef4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:7a:d8:95:20:f3:e0:64:64:c1:e1:9e:a3:a7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Oct 19 23:01:04 2025 GMT
Not After : Oct 20 23:01:04 2025 GMT
Subject: CN=8867895393032bc449cc8650e7506ab2ab310501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:2c:39:ff:65:ec:b1:20:e1:fb:81:c1:ea:
da:b8:07:48:ef:89:56:e5:07:bb:b3:96:a7:44:50:
79:f8:2b:99:21:da:ab:2e:73:97:ff:cd:f2:1a:e0:
20:0d:0c:4d:1c:d5:8d:23:1a:4a:06:58:65:b9:da:
56:6f:ba:bd:7c:84:26:2a:ad:fb:44:96:68:1e:ed:
9b:2f:21:31:ba:93:d5:d5:fa:c3:b1:39:1c:51:a0:
87:f6:c0:92:88:36:6a:f6:eb:cd:27:a5:88:8e:5f:
97:a9:97:c5:05:25:81:5e:da:9e:2d:36:00:a7:e7:
05:51:39:d6:f9:08:ad:b2:7a:1c:19:c2:58:42:76:
75:33:42:9c:85:39:7a:c9:f7:24:72:f0:ff:45:fa:
7f:b3:34:ca:f4:e3:4f:e5:26:c5:fb:11:b9:64:a7:
72:3d:57:d0:f6:62:32:0e:70:5c:4a:ea:44:10:9d:
f4:d7:94:28:a6:bb:8e:13:69:1e:44:95:c7:00:e1:
47:79:80:4f:7b:da:36:84:53:98:c6:ae:42:b0:b4:
0d:54:cc:11:4c:df:7e:79:2a:06:5f:50:c1:57:1c:
48:eb:f7:f0:11:ea:46:51:63:59:23:0f:aa:db:66:
db:82:d6:35:17:8c:08:40:90:ae:96:8f:f1:52:1f:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:89:53:93:03:2B:C4:49:CC:86:50:E7:50:6A:B2:AB:31:05:01
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cf:af:ee:00:0d:5f:59:59:48:2a:14:d2:34:8f:8d:ef:74:
aa:1f:38:e6:50:f7:e7:4a:41:b9:2f:93:2c:35:84:1f:5f:fd:
99:b8:1e:5c:e2:b3:2b:53:4e:93:65:df:7a:b4:90:76:d6:bd:
36:6c:d0:c3:7d:3f:8e:53:55:fe:ef:43:62:b0:9a:6f:c4:4c:
e8:d3:a9:1e:67:d6:4a:f5:24:99:f5:32:0b:a6:c4:b9:20:e8:
5d:08:41:a0:2f:c3:12:ad:bd:9d:84:03:e5:fd:2e:92:9f:a2:
bb:3d:9f:f8:a1:2c:cd:13:e4:84:98:15:90:25:b0:85:eb:a8:
88:ab:fb:68:b2:83:b0:59:d4:5c:fa:41:70:13:59:de:07:4f:
34:92:a2:72:2e:3f:16:05:18:ee:09:36:64:90:30:16:f7:24:
72:29:07:a8:45:68:67:ac:7a:19:11:99:fe:34:d6:4f:cf:09:
92:ba:c1:03:ac:4e:c2:83:b5:cc:95:a9:11:b7:b1:66:2e:cc:
1f:0f:ec:ea:48:8c:cd:7e:11:6c:b8:96:66:2e:e1:53:68:73:
33:59:20:d0:c5:6f:13:cf:96:f9:66:4f:15:68:a2:ef:1f:dd:
eb:06:1d:ac:46:45:21:ce:df:25:ba:eb:a0:46:3a:d4:d3:69:
2d:ae:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:26 2025 by rpki-client