Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: p2h7mx9mKMV9MydFV5oPHUhlQpanP1aJB1Jbmw1rwUg=
Subject key identifier: 2F:AF:DE:13:D9:A4:32:84:4B:CE:09:6C:3F:73:4E:A5:DB:B3:05:89
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 0199FD349B5016AC86568D2BB32D23058A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 16F6
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
2: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: r8VRDmqFrw9adOfEhYn452AjVmu1anR7ZgecIi5T9Bs=)
3: wo81X6dNJnxHwqDCPslyPelPnyk.roa (hash: LNeGgskvgHmXiZQlDf/OPt0CW7kE7h3hGkIagvdPCcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9b:50:16:ac:86:56:8d:2b:b3:2d:23:05:8a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=2fafde13d9a432844bce096c3f734ea5dbb30589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:9b:02:79:f4:84:98:37:8e:9e:f3:e2:eb:
62:5a:d1:d9:2f:36:cf:7c:0e:a2:00:90:ea:91:b8:
11:fe:7d:78:c5:f2:50:62:5d:10:11:e9:ac:c2:90:
3a:7b:cb:39:2d:41:94:1c:91:09:99:0a:c1:a3:71:
15:d9:3d:9c:da:91:92:e1:8f:e0:ec:ce:9f:47:d7:
ff:4e:6e:21:28:37:8e:06:94:00:a0:36:e8:f4:88:
ad:f1:be:49:3d:af:20:3f:75:d7:59:22:58:98:44:
ef:ed:8c:bd:bc:de:14:d1:30:05:27:ba:a6:88:9c:
93:a5:d4:54:19:17:05:56:f0:c9:51:a9:f2:12:8e:
2d:3b:04:b2:1e:ab:2c:27:99:f4:fe:32:1f:31:65:
90:6f:34:09:5f:dd:75:5e:74:b6:bc:5c:d2:e0:c8:
ec:f2:15:8e:68:10:54:c6:40:3b:e5:85:28:22:b0:
72:de:28:71:1e:1d:af:3f:b4:56:e1:ef:e3:ca:2d:
16:c1:ba:e8:5d:bd:5d:69:24:a7:0e:7c:a7:17:45:
9b:65:ef:0a:9d:9f:b0:35:eb:32:92:c3:30:79:6e:
f7:e1:9b:da:af:b6:69:27:78:d9:f5:6d:06:9b:c9:
07:f1:38:d1:3c:e3:bf:74:b6:e2:79:88:c3:af:51:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AF:DE:13:D9:A4:32:84:4B:CE:09:6C:3F:73:4E:A5:DB:B3:05:89
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:31:83:bd:15:45:05:02:44:8e:03:c4:28:37:64:4f:26:
bc:97:8a:26:bd:66:69:4d:56:27:03:cb:6a:4a:fe:3b:cd:93:
6c:37:12:d7:57:3b:0d:86:f8:fd:e9:89:09:64:ce:82:2e:ac:
c4:01:5d:29:fa:6f:c5:4e:6a:0e:99:dd:39:cc:d4:35:54:5f:
2f:17:b4:1b:3f:e2:c4:57:35:d8:17:7d:98:1e:b5:0c:9b:4c:
03:f7:43:e5:84:9f:ab:c8:80:0b:bf:25:f2:b1:e1:e7:e3:76:
57:8d:5c:31:8e:c6:13:5b:20:86:d4:5e:e6:9b:23:a3:54:3b:
df:66:f4:06:64:7d:ce:80:d4:2e:19:17:62:72:74:2b:08:7f:
1e:ad:bd:1b:e6:ab:ae:5c:ae:d0:d7:fd:09:e3:94:de:c0:5f:
88:d1:e5:cc:61:3f:25:7e:1f:24:2c:79:6a:62:d1:da:0d:31:
2d:41:d3:56:4d:96:45:fd:1f:4a:89:a2:16:0d:3d:35:a9:c5:
04:83:79:7b:dc:ce:02:6f:b2:1e:90:28:ab:df:39:ac:6d:e1:
6c:35:70:b8:74:cf:93:76:9f:34:89:fb:2c:71:a3:82:76:87:
be:09:00:e3:57:37:c3:0d:ae:ba:22:85:2d:fa:44:87:53:c8:
fa:78:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:45 2025 by rpki-client