Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: HqIL80AGVpXE8e6PF6YpBX9M7wX6AbrF32HAiFEerJw=
Subject key identifier: 64:99:B5:F3:56:69:CC:F4:06:FD:71:19:38:79:A2:A3:C7:18:CB:B0
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 0199FEEBC80D8687782433A04D8CAC54834E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 11AF
Signing time: Mon 20 Oct 2025 00:01:28 +0000
Manifest this update: Mon 20 Oct 2025 00:01:28 +0000
Manifest next update: Tue 21 Oct 2025 00:01:28 +0000
Files and hashes: 1: IqOWD9aJ14QW67iQSHAr_IsG4xE.roa (hash: w3ZVvZLPlnQKzQOQmLMJRlyI3uHeVIilgUta/ectFxM=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: mcI0cc7termBifRXm0sgJLc/48J63zWk9PLbHiylaqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c8:0d:86:87:78:24:33:a0:4d:8c:ac:54:83:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Oct 20 00:01:28 2025 GMT
Not After : Oct 21 00:01:28 2025 GMT
Subject: CN=6499b5f35669ccf406fd71193879a2a3c718cbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3a:83:a2:07:c6:20:8d:62:d7:82:47:3f:a2:
8a:9e:e8:a5:5d:a7:bd:d5:1a:31:b4:64:1e:c5:e5:
bd:c6:57:45:12:a6:8d:c4:de:90:9d:e5:b7:44:59:
88:2d:16:5f:76:85:ee:87:8d:27:5b:a8:d5:e1:48:
1e:eb:7d:96:4a:9b:54:12:07:eb:2b:1a:a7:88:f9:
f2:1e:62:39:79:5a:28:84:8c:7c:71:24:ff:df:7d:
28:70:b0:13:b7:2d:7c:c5:76:37:43:b2:6e:1b:ef:
ba:f7:f5:f0:78:55:e2:dd:93:10:38:00:95:66:14:
a3:97:d3:f4:45:14:e6:b0:a7:b7:d7:b6:e4:c9:07:
57:b1:d7:f4:f6:72:ce:ab:4e:e5:72:dd:94:96:40:
a3:66:59:fc:67:88:df:2c:de:c8:73:8c:75:6a:35:
35:bd:fa:4b:5d:cf:e1:1f:aa:78:72:8a:3c:06:1d:
62:81:11:db:ef:68:21:df:9d:98:ae:0c:4e:8e:f2:
2f:c5:0a:c6:34:e3:08:ec:22:36:75:28:04:b1:b0:
6f:fb:f8:c8:a2:fa:df:2e:ec:fa:d4:e7:d8:00:7b:
41:dc:15:af:20:16:bb:43:11:d7:2c:aa:26:23:0a:
56:da:51:cb:83:a7:8e:97:3b:2d:ff:33:e3:43:f4:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:B5:F3:56:69:CC:F4:06:FD:71:19:38:79:A2:A3:C7:18:CB:B0
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:a1:73:ae:36:05:cc:d2:bf:1c:e9:b8:ff:a7:02:f4:14:
5b:4d:34:66:b3:3d:c3:fd:10:4f:a1:8e:22:21:22:8e:2f:91:
74:c9:e3:8f:55:50:25:75:26:d3:12:57:28:b1:de:21:4e:e1:
e7:5a:cc:2e:43:20:5f:37:37:f0:93:72:20:a4:82:f5:2b:37:
2d:92:d5:ff:e4:b3:63:1f:4e:62:98:d9:97:cf:e6:1c:8b:ee:
24:67:fd:1b:25:b5:51:99:d4:7d:dc:f8:e5:e3:f9:db:1e:66:
fd:aa:75:12:f4:ce:97:d6:ff:65:4e:55:1d:29:ba:ac:43:4f:
1e:3e:7c:0e:5c:5d:8f:6a:d5:19:a5:ca:17:64:41:d2:f8:17:
cb:46:67:12:a8:01:8a:c6:bf:37:5f:49:c1:90:a4:dc:05:68:
45:09:c3:2d:47:90:60:a2:0e:8d:b7:95:e3:6b:26:06:aa:ae:
df:39:ce:91:89:d9:b8:ce:69:cc:9c:9f:ef:f1:e1:31:b9:9f:
6c:a4:f4:c5:52:fe:16:b3:3a:8e:b4:3c:d8:dc:a2:4a:31:ad:
d5:0b:bb:77:de:2f:74:6c:af:5d:94:05:2f:b8:3b:7d:4e:69:
82:d1:83:c5:9f:c6:93:a2:28:b7:19:31:12:9f:3d:95:2b:45:
1a:a3:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:56 2025 by rpki-client