Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json)
Hash identifier: Z8DpkJt+2Ao/n7KTs5zQGiplT5Pbu3VkAlgi8vgNAHg=
Subject key identifier: ED:98:F8:65:10:39:C6:24:0D:74:DA:80:72:6C:02:0E:25:C4:60:7A
Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Certificate serial: 0199FDDA0A2A597AAA8EF630D20D6B2AFAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
Manifest number: 02EC
Signing time: Sun 19 Oct 2025 19:02:29 +0000
Manifest this update: Sun 19 Oct 2025 19:02:29 +0000
Manifest next update: Mon 20 Oct 2025 19:02:29 +0000
Files and hashes: 1: lOnxViznHLEoAyPam_W4fa_SC2w.roa (hash: 9BCM5+Jiz3egzCFeLDqHjHDQAVUeCPf+h8/byU9pFAw=)
2: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: RXpcl5hx4WRYTM5RxNtBHQjOGSG0x/l2hv2v3DZGq1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0a:2a:59:7a:aa:8e:f6:30:d2:0d:6b:2a:fa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Validity
Not Before: Oct 19 19:02:29 2025 GMT
Not After : Oct 20 19:02:29 2025 GMT
Subject: CN=ed98f8651039c6240d74da80726c020e25c4607a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:2d:e3:9e:6f:2a:d3:19:b1:5b:4a:2e:92:
6a:2b:cc:50:60:ec:42:55:f3:c2:01:11:d6:08:3e:
74:e9:df:93:b6:25:a8:28:83:a2:ea:e2:5c:14:d0:
d1:aa:16:0f:a2:37:88:f4:52:71:06:fd:2f:77:20:
8a:2b:69:a7:2d:c7:eb:ae:0f:0c:dc:14:13:61:09:
31:13:d1:f7:5a:13:63:3f:42:9d:fa:74:01:11:c8:
49:c3:20:4e:b8:e3:a7:00:66:79:73:c0:2f:f1:7d:
a6:45:ad:57:96:97:1c:46:02:ac:5c:f2:7e:9d:1d:
34:4f:14:25:f2:86:b2:a6:32:77:92:d4:70:53:92:
80:5a:d4:ce:25:fa:d9:a2:f0:fd:55:c7:f6:cd:5b:
06:82:3c:bc:9d:6e:17:b3:53:d2:58:76:23:61:61:
ab:e3:8e:24:7e:92:f4:d5:17:9e:f6:2a:a0:39:8c:
18:4f:37:c8:31:63:2d:d8:ad:35:ca:b3:0e:81:d6:
2a:22:87:4f:31:31:e8:06:33:ef:39:2b:1d:79:8c:
ad:c4:55:a2:1f:cc:0d:00:86:24:c4:7a:57:2e:5a:
78:67:cd:6d:3d:07:37:49:ec:10:e8:ee:8e:d8:52:
da:d2:39:97:fc:6e:34:69:7f:03:4b:b4:1f:1f:b9:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:98:F8:65:10:39:C6:24:0D:74:DA:80:72:6C:02:0E:25:C4:60:7A
X509v3 Authority Key Identifier:
keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bd:b0:f2:1c:b5:63:10:1d:f8:fc:b7:a4:0c:bd:bf:32:a3:
da:20:70:8d:b0:67:f5:88:74:8d:87:20:3c:c4:02:e2:01:4a:
86:5f:85:2c:59:cb:72:8e:bf:4c:d2:42:f0:b1:c9:f0:c0:53:
56:6a:70:e4:e6:70:1b:1b:58:bd:47:72:93:4e:d7:c9:49:1a:
d6:84:2e:87:74:80:94:1c:f2:94:72:fa:9d:04:f4:f9:c0:d1:
e9:4c:af:be:a0:fb:28:91:39:05:bc:56:12:86:52:53:4e:db:
ce:e4:35:c3:94:4d:7b:e1:b8:6c:8c:c3:a5:da:3b:b3:29:b1:
5c:32:86:69:15:bd:15:6b:46:18:a6:74:fa:de:64:99:06:dc:
d6:92:30:8f:dc:26:cb:08:2f:b1:1f:0c:e3:34:ea:8f:53:5e:
87:5a:06:c9:76:56:ad:5b:db:55:1e:b0:c0:51:4d:1c:1c:7c:
87:89:75:9f:23:45:ab:2d:f8:fd:0c:b7:7a:08:32:73:c4:87:
be:6b:c6:f6:06:19:ea:0a:ef:2d:07:a1:5d:86:34:d1:85:ba:
79:be:0d:08:08:c0:0e:6d:7f:4f:4a:49:62:31:6b:b7:7c:b2:
66:83:ec:a6:d0:73:af:c9:90:2a:a1:1a:a7:6e:71:39:0d:ff:
64:8b:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:33 2025 by rpki-client