Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: o8vgVHfmz2wp4UWaaYCS3WtE01fNxFEeyEnlXa5/ooM=
Subject key identifier: 18:AD:12:2F:9A:E8:31:8A:7D:D3:9B:6B:09:82:49:12:80:8E:40:26
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 0199FDD9E00223948254122B14645B5F1CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 081B
Signing time: Sun 19 Oct 2025 19:02:18 +0000
Manifest this update: Sun 19 Oct 2025 19:02:18 +0000
Manifest next update: Mon 20 Oct 2025 19:02:18 +0000
Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=)
2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: HPrmnuqmgkmkS5GZ+TyUeFucwYQdQpmlDm/V77X39lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e0:02:23:94:82:54:12:2b:14:64:5b:5f:1c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Oct 19 19:02:18 2025 GMT
Not After : Oct 20 19:02:18 2025 GMT
Subject: CN=18ad122f9ae8318a7dd39b6b09824912808e4026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:07:85:b7:55:bf:00:c3:ca:20:9a:8c:3c:81:
36:8f:5a:7c:24:05:71:8f:c6:28:1e:b9:5f:df:59:
b0:61:09:9f:55:8f:c4:39:63:0d:da:fd:ad:79:10:
bc:df:4c:68:e6:3e:9b:7d:f1:f9:66:af:42:61:2c:
b9:ea:cf:c4:fb:b9:30:dc:97:77:02:0c:5b:56:6e:
ab:4e:e2:08:69:31:10:4c:4b:80:67:7b:25:5d:3d:
d9:49:ad:a9:da:c7:e7:57:4a:6a:0e:0c:ed:7f:46:
3a:7e:e4:f5:4a:60:28:34:b5:3d:0f:1f:00:40:fa:
41:00:79:7c:32:60:c8:01:8d:4f:65:b4:13:2e:c7:
98:ef:dd:14:3e:88:68:6b:67:d9:be:c3:99:01:79:
f3:9e:3e:57:11:69:a1:0c:8d:2d:7e:75:f7:ff:9c:
a6:6b:23:ce:97:8b:62:19:57:03:bc:f3:e1:d7:bf:
b5:9a:62:46:e6:89:96:27:96:a0:57:bc:2d:b0:cb:
4e:52:ee:86:9f:c6:ed:33:5a:9e:b1:33:4c:6b:19:
5d:54:e8:b5:0f:36:2d:5a:20:4b:bc:03:40:a6:91:
40:77:10:51:eb:f7:dc:b5:83:6a:d4:ce:47:45:21:
94:dd:2c:1b:56:af:e1:27:ef:9c:f6:ca:6b:7a:96:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:12:2F:9A:E8:31:8A:7D:D3:9B:6B:09:82:49:12:80:8E:40:26
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:34:c4:94:03:8a:34:39:03:9c:c8:6b:70:6c:2c:ea:55:c9:
7c:ee:ac:57:79:d7:97:2c:a5:bc:9a:91:02:2b:01:c0:7d:65:
14:0f:9e:48:58:cb:5d:cb:ec:9b:f9:c2:c8:6b:9e:d3:a0:d6:
00:ea:88:fe:f7:99:a2:41:8c:1a:51:15:f0:ac:e0:78:de:38:
33:dc:13:61:cd:c0:66:8b:cf:1c:28:65:a2:7c:f3:66:b7:50:
15:75:a8:b4:ec:86:3c:d4:df:d5:d9:ea:f1:0f:09:e6:5c:33:
f5:31:6e:2b:de:cc:a4:2b:5b:dc:1e:fa:c0:cf:dc:2c:c1:43:
c8:04:9f:aa:ae:4c:64:7a:37:53:6a:63:0c:96:74:3e:56:4b:
e6:97:cf:4f:3b:86:4d:d1:22:e1:9f:b6:be:04:fd:c7:db:8d:
24:f3:dd:48:b8:ec:de:88:ad:53:3a:cd:0c:70:56:da:d4:63:
75:6c:f6:20:9c:3d:f7:a3:74:13:23:37:48:96:26:b2:c6:1d:
ec:f7:9e:78:a7:29:9a:22:c8:52:8a:d2:9d:fc:33:60:ae:33:
fa:f4:17:cb:53:84:ac:b4:60:b9:e5:47:74:f8:3f:07:e1:b4:
09:a9:d0:a6:ea:87:db:76:4b:5f:08:fe:d0:53:2f:ee:48:25:
4e:64:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:38 2025 by rpki-client