Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: VmVcp46uDEyp7wNnwX4YKN+2fPN8tN0WVMYEENp5E5E=
Subject key identifier: 45:52:7C:8A:85:85:87:B3:A9:AD:59:FE:33:87:1A:91:84:18:9C:F2
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 0199FF5991F5954F5658500727E784C94610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 056F
Signing time: Mon 20 Oct 2025 02:01:24 +0000
Manifest this update: Mon 20 Oct 2025 02:01:24 +0000
Manifest next update: Tue 21 Oct 2025 02:01:24 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: FxynijPvyM9KY69+AaNT29bBu0kQ6p1/6494FAa+EKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:91:f5:95:4f:56:58:50:07:27:e7:84:c9:46:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Oct 20 02:01:24 2025 GMT
Not After : Oct 21 02:01:24 2025 GMT
Subject: CN=45527c8a858587b3a9ad59fe33871a9184189cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:ca:93:5c:6c:07:03:c8:fa:ee:c0:90:2d:
67:6b:ab:bb:a5:39:21:de:1a:0e:c3:2a:c5:96:22:
e7:a0:d3:2a:7a:3d:3f:87:ae:5e:9c:b2:18:96:43:
12:92:fd:29:09:78:c0:ac:11:d8:37:54:b4:1a:73:
f2:af:8e:41:7f:3f:22:f2:33:0e:c5:4b:b8:1f:68:
bc:ec:ef:91:81:c9:79:84:a5:11:ae:8c:e5:b4:8a:
21:e9:ed:f7:0d:99:82:53:c1:cf:eb:a9:15:58:4d:
41:ab:db:cd:6f:52:e4:f7:0c:d3:43:3a:1a:e8:9f:
d2:59:ba:e1:5b:d6:87:ea:29:cf:02:cc:60:40:1c:
93:d7:58:3b:41:75:1d:50:2b:e9:35:23:63:24:f3:
09:ec:11:bc:c6:77:1a:e7:14:0f:55:5e:6d:d6:1d:
a1:57:fc:04:dd:14:a5:af:2f:1d:cf:c3:ce:a5:0d:
a0:57:6d:dc:a8:c3:e4:3b:0e:ac:78:c1:2e:f5:1e:
70:64:e1:1b:d7:c1:2a:b5:b1:34:2a:6b:e6:dd:ed:
e1:7a:a6:37:78:fc:be:2d:c7:0d:18:db:a5:0a:70:
2c:4f:14:e2:19:4b:83:36:d8:db:1a:8c:e0:c3:3e:
a1:e7:7e:52:c1:10:0a:92:b1:43:aa:03:90:fc:f3:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:52:7C:8A:85:85:87:B3:A9:AD:59:FE:33:87:1A:91:84:18:9C:F2
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:39:df:d6:b1:90:3a:04:4f:11:ba:d5:fd:86:08:1f:7f:a5:
f3:14:9d:65:07:47:aa:f2:86:59:b8:63:6e:5b:3d:cf:33:98:
2d:4e:32:49:a1:0e:4e:39:14:32:9f:2b:38:b5:5d:b1:5b:65:
8e:a9:da:1d:b3:50:5b:23:e0:6b:57:1e:75:ec:6b:21:ff:af:
e7:44:e2:0f:6c:24:39:0d:65:ca:1d:3c:1e:26:28:8a:ec:b6:
46:cf:0e:29:34:f4:14:05:1c:ff:d3:a1:fd:5c:bb:c7:69:92:
72:2e:92:9a:25:24:f6:fb:e0:9a:9c:d7:a7:d6:94:a9:1b:16:
9c:fd:8d:aa:35:c5:32:0c:ab:31:c5:91:42:b1:ae:19:df:8e:
28:6f:55:30:5f:4c:a3:b8:4c:10:84:f2:74:26:0b:72:55:bf:
85:e1:91:97:3c:d4:f3:01:f9:0e:84:6c:9b:21:7f:e6:eb:1f:
a4:05:0c:f9:fd:3a:04:a1:17:e5:40:80:2b:42:03:48:92:3a:
b2:60:77:9f:ec:db:2b:25:a9:19:02:f7:9e:58:f7:6a:97:09:
46:33:35:c8:24:95:02:1d:2c:8e:70:82:0d:8f:dc:64:20:19:
45:e0:7a:94:6e:00:d6:e3:9c:ca:f2:b1:1f:b9:4a:df:c7:a6:
58:7a:ad:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:41:24 2025 by rpki-client