Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: riT6AkFpvdA6MR8lZgjFh+46oN9hFK7s2jkQ5hnmHeU=
Subject key identifier: 1F:50:9C:B4:3E:06:27:09:7E:EB:03:12:E8:AD:FA:5C:95:E1:6E:1D
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 0199FCC67BBBCC3E6702208563A52A5C2379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 1504
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: leWjAK2Q3obaRE4vqy6+YGN1WKMSnmMnfVoceNfeXII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7b:bb:cc:3e:67:02:20:85:63:a5:2a:5c:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=1f509cb43e0627097eeb0312e8adfa5c95e16e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:53:ff:d7:79:10:e7:d1:db:25:63:8a:bf:
a7:75:4c:98:17:1b:6b:df:19:c0:4e:6f:cf:50:22:
f9:4c:c9:ae:d0:13:c3:27:18:8c:a1:39:16:ef:7f:
17:76:f7:8c:de:d0:2a:84:75:48:db:61:d2:fe:e4:
04:73:02:80:bf:cc:d6:11:e3:6d:9d:c1:72:1e:c1:
53:cd:3f:ca:dc:43:b8:0c:10:9c:1c:71:ed:f8:fb:
31:f4:86:6f:88:f4:31:cf:34:65:9a:d9:18:bd:fb:
de:87:76:fd:8a:b1:f7:74:64:f0:1e:fe:ce:99:5e:
f2:46:72:2b:25:e7:ac:81:a0:5e:fe:5e:50:02:a7:
ae:9c:fb:90:15:45:72:19:4c:30:33:39:4e:e3:ed:
f8:f8:54:db:ca:d0:f1:d0:db:6a:cd:5c:a0:29:65:
d1:a3:6f:f0:07:02:7b:e8:16:ef:27:87:03:9d:94:
ba:8b:b6:e0:fc:af:ec:7b:b5:3f:99:c9:97:de:d1:
92:b7:c1:56:9c:76:59:b1:41:16:a8:4b:25:1b:ae:
bb:23:f4:0c:b3:2a:d5:ae:35:cb:2d:9e:db:fd:25:
49:9d:41:10:6a:c9:fd:67:4a:27:30:be:21:3d:f7:
c7:c3:b3:d9:02:79:3e:15:fa:7b:6e:89:b6:15:66:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:50:9C:B4:3E:06:27:09:7E:EB:03:12:E8:AD:FA:5C:95:E1:6E:1D
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e4:75:98:34:c8:38:f4:d5:1f:59:d5:82:71:43:70:63:3c:
f2:23:13:fa:3c:42:d0:29:51:a9:ef:12:2a:fe:79:35:9a:72:
62:7b:76:4d:7e:42:53:e7:a0:36:62:c7:0b:3f:c5:e9:fb:bf:
ed:61:f8:44:4e:19:78:03:cc:90:36:f6:04:63:7a:37:a4:b8:
28:b7:4f:e0:bb:e0:4e:df:c7:46:0e:27:33:73:13:e9:db:de:
c7:10:30:69:04:a3:44:54:22:63:d1:99:ed:e8:6e:ef:e2:13:
15:1c:2c:61:19:fb:bc:da:33:40:9a:0c:16:4c:11:00:f7:c5:
eb:9b:17:e7:a9:c4:87:9d:32:07:1f:93:78:7a:d6:cb:5f:76:
e7:52:8e:db:ba:22:92:51:6a:c5:c9:ab:b8:20:5f:8b:fa:3e:
1a:4d:a7:71:2d:20:a4:9d:62:78:e7:68:fa:7b:a9:b7:11:5e:
f7:f4:2b:e4:3d:78:8f:b6:0f:4b:6c:ca:1f:25:f4:e4:b8:24:
f1:6a:41:38:71:3a:36:02:57:71:56:be:01:56:5d:d0:e3:68:
2a:d3:5b:28:6b:d4:bb:d2:6c:de:ae:cc:01:f7:60:8b:e2:cd:
f3:ed:34:39:9d:ed:23:dc:fa:dc:bf:83:20:39:3d:45:64:75:
65:b5:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:04 2025 by rpki-client