Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: gkkW2/fP1FWR3b9+Yj250pJnG9mpc+O90ThFIqeU0QM=
Subject key identifier: B8:96:85:53:A5:35:94:0C:F9:9F:0C:00:D4:A8:E3:57:C7:0B:8C:2C
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 0199FB7CE88DF0E4FD519F8DC8E476BEFCD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: Yq+mZCG5OfUAq2hB2Txq3LqRXehhO2KXJaR6GDJz84A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e8:8d:f0:e4:fd:51:9f:8d:c8:e4:76:be:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=b8968553a535940cf99f0c00d4a8e357c70b8c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:60:97:e4:f7:9c:db:b2:0b:f5:f3:4b:df:
c4:a1:b0:ce:16:49:d8:76:60:49:8a:31:58:f3:61:
c8:27:c4:45:f3:e2:e4:2b:00:75:41:46:d1:f5:35:
a2:98:ec:77:8c:8c:f9:94:67:3b:2a:e6:f1:48:24:
cf:9e:98:23:3c:80:35:ee:62:2b:f5:4e:e9:d7:eb:
d8:05:3d:53:12:21:0f:84:62:1c:20:ba:be:8e:80:
48:bf:6e:4d:9d:05:85:0d:1d:55:dd:97:87:8c:04:
46:a4:5c:7f:20:26:7a:48:49:69:02:de:32:51:ba:
93:e0:63:ee:ab:4a:1d:22:1b:33:91:c3:19:c3:52:
ff:5a:b7:d0:8c:0c:fe:ba:a6:fc:a9:20:48:88:49:
33:e0:91:4c:a2:5c:14:7f:d9:b9:2b:f6:fc:e8:a0:
2f:ba:6c:04:cc:3c:4d:a3:db:4a:ed:39:93:58:00:
99:75:6f:98:92:3e:2e:40:41:e3:15:99:87:49:3e:
1c:5d:0f:39:83:37:b2:32:d7:42:87:01:c7:a9:56:
10:66:1b:21:7b:ce:d6:a9:fd:59:b2:6d:e3:b7:8e:
03:6e:c7:b3:37:7f:c7:c6:59:3c:8f:4a:6a:9a:b4:
f6:41:22:7b:dc:9b:23:77:12:34:1e:51:76:15:fd:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:96:85:53:A5:35:94:0C:F9:9F:0C:00:D4:A8:E3:57:C7:0B:8C:2C
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ac:20:40:09:ef:39:f4:e5:a7:18:92:99:94:a1:85:bf:fc:
d3:9d:18:dc:c2:6f:24:35:d1:ca:1e:54:56:30:7f:70:1e:b3:
d7:96:73:2d:7e:e5:b1:be:45:a3:85:bb:af:c0:95:93:5f:61:
3e:cd:6b:8e:5b:01:de:8e:e7:d8:b5:34:a6:0c:02:f5:80:16:
d0:1b:4b:53:da:a1:fc:73:67:52:29:bd:a6:29:ae:90:13:dc:
5d:4e:b9:ca:22:f8:c1:1e:6e:b2:fc:d3:3f:1c:d1:ee:f1:93:
33:92:fc:93:7e:8b:ce:8e:91:2e:56:5f:e9:52:ec:56:d5:63:
ca:8c:90:15:a1:3d:2d:8c:ff:6f:79:5a:4e:8d:bd:ed:07:c5:
5d:45:87:b3:a6:2e:10:fd:c5:fa:1a:52:75:57:bd:87:95:75:
a0:9f:b3:e2:1a:8c:02:50:5f:c7:cb:45:18:c2:5b:b9:82:04:
ce:0b:71:a7:c3:e2:59:7a:07:6c:78:6e:fe:6a:cf:4d:9f:94:
66:93:5a:6f:c0:57:26:98:a2:0b:b5:71:de:e2:85:f9:ef:b0:
a8:08:5a:77:8f:c2:48:d3:e9:ef:bd:68:ca:62:48:92:58:e6:
b0:13:6f:45:4b:42:30:3c:17:15:7e:4e:fb:de:9e:8e:d4:d1:
d7:5b:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:52 2025 by rpki-client