Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: x3RYsGKZQRi8QMCHU64a9ynogO0rfXDIbCcxuTmUuCg=
Subject key identifier: CD:2F:14:8B:A7:C9:BA:91:FA:AD:7F:63:E9:54:BA:14:A0:2C:47:7C
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 0199FCC603DBE2EA3EF0C0B06B4C08A71AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 13A1
Signing time: Sun 19 Oct 2025 14:00:59 +0000
Manifest this update: Sun 19 Oct 2025 14:00:59 +0000
Manifest next update: Mon 20 Oct 2025 14:00:59 +0000
Files and hashes: 1: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: Q6KVJmA3oBJI41dHKYFuyowEAXVybLpWd9fuwWXlMRY=)
2: cD0i6eXUEb95MRC9zt2P-QsR-zI.roa (hash: bwRfJD4nIDDz+Ohj/YcPEu2i5IBHAbvcA7uyG/Ew8EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:03:db:e2:ea:3e:f0:c0:b0:6b:4c:08:a7:1a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Oct 19 14:00:59 2025 GMT
Not After : Oct 20 14:00:59 2025 GMT
Subject: CN=cd2f148ba7c9ba91faad7f63e954ba14a02c477c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:c9:9b:0d:99:da:76:0e:0c:60:90:c2:ae:
3b:ef:05:ee:e1:e4:a2:d9:60:5c:f6:fa:75:d6:70:
48:56:bc:31:05:ca:9a:93:b8:8f:9b:ca:ac:ca:35:
59:38:a0:0d:8e:55:34:70:00:38:2e:d2:6c:78:df:
50:ac:2c:d1:e2:38:1e:ee:01:b2:44:05:88:1f:a6:
16:16:24:a4:54:c5:cd:14:21:26:90:02:86:96:c1:
bf:6c:de:a3:1a:e6:4f:78:3f:1e:9c:53:13:94:cb:
78:7c:f8:70:9e:19:5d:2c:48:d7:4e:33:fd:f2:c1:
f0:ff:18:23:36:e7:7e:18:0e:3b:99:df:62:5a:3b:
99:22:04:c0:54:1c:65:9b:6f:cb:86:89:7a:98:ef:
77:c5:49:a7:e0:1c:af:c0:ce:8f:6d:4e:81:41:8e:
df:ad:8a:9d:55:1d:2a:aa:12:a2:ad:bb:5f:a3:f6:
82:49:30:8e:b8:dc:8a:2b:a6:db:e6:1b:16:32:75:
f8:e1:eb:95:9b:1a:f4:d8:7c:88:44:33:08:d8:6e:
3c:43:b5:38:12:be:49:c7:28:54:38:34:6e:7e:44:
b8:bf:81:4e:79:fa:c8:fa:62:c1:dc:be:e1:a1:c6:
56:80:64:a3:e2:5b:e6:c8:80:12:d9:87:7b:44:e1:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:14:8B:A7:C9:BA:91:FA:AD:7F:63:E9:54:BA:14:A0:2C:47:7C
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dd:97:74:19:1a:5e:b4:1e:d5:2e:95:a0:cd:4c:8a:28:f6:
29:28:28:9d:64:fb:0e:9d:d1:a7:35:38:7c:5b:3e:a8:01:5e:
65:9c:16:5a:8f:ee:76:46:68:7e:38:2d:1c:c5:34:7c:be:29:
dc:bd:f2:a1:27:c1:0a:7c:04:e3:37:25:43:08:26:7d:3f:5f:
d8:4e:9a:15:7b:1a:b3:4f:98:4f:f4:c4:b1:56:a8:07:ba:ab:
49:0a:ec:85:29:b7:4f:64:31:52:50:63:91:f8:b8:f7:27:75:
68:a2:bc:9e:22:63:93:8c:59:14:a7:60:99:87:3d:4f:46:90:
48:1a:e8:99:73:91:c2:8d:92:59:f6:97:41:ef:98:77:cb:46:
54:da:a0:7a:94:77:cc:bc:d0:9a:fb:03:a8:c7:ce:32:3b:76:
7c:4c:ee:5c:4a:cb:31:17:44:34:09:c5:73:68:09:88:eb:60:
aa:e1:05:55:03:d7:3d:f4:be:32:19:e9:43:b8:b2:d2:1a:2f:
e8:71:bd:3a:3f:c4:b6:be:55:a4:68:01:27:55:b2:eb:f2:58:
19:6e:b2:74:a4:95:6c:f9:da:ba:42:13:28:46:97:22:ad:b5:
03:df:3e:aa:94:5d:75:23:06:d8:39:fc:4e:7f:de:87:a7:30:
fb:27:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:41 2025 by rpki-client