Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: rM/VfOoPKZADlMCwO6O2pf840qUAsNpcJsywGesJpnI=
Subject key identifier: 89:0C:F9:DD:42:50:D6:08:2F:6A:1B:54:1F:B4:DD:DB:0A:6A:00:6C
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 0199FCFD32CC190C42F760C2F987B4F2712E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
3: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: JFnKV5sinthjHGyzOTEhpQKAdUdcEsmQuaYbYvyccFI=)
4: tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa (hash: V3atHxuVAp6RmJ/WmMRTwEnC2jY5957dy0nURReA0co=)
5: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:32:cc:19:0c:42:f7:60:c2:f9:87:b4:f2:71:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=890cf9dd4250d6082f6a1b541fb4dddb0a6a006c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:20:85:73:61:37:83:db:d0:d1:71:c9:59:
a9:fd:bb:cb:62:73:a8:23:8f:e1:ae:96:ce:fd:12:
b3:41:a6:75:09:6c:3d:65:a9:de:d3:76:b2:39:e8:
21:c2:38:d5:a3:df:5b:c2:ea:86:11:a2:2d:b9:7d:
21:90:31:cf:1e:01:a2:90:a0:8d:99:0c:26:ff:1f:
5c:7f:f1:f4:1f:43:0d:56:dc:2b:d5:b8:e3:c1:af:
7d:b3:b9:61:e5:0e:3e:73:df:23:e2:7f:d3:2b:a5:
e8:e8:5e:f2:a7:43:7c:3f:de:44:0a:8c:20:79:fd:
c8:73:66:be:fa:a6:9b:79:56:52:fd:a2:56:73:ca:
e8:6b:bb:bb:af:c2:c1:b6:63:ed:20:86:77:27:84:
85:01:0e:bd:f7:11:48:5b:eb:8e:7b:0e:7b:e0:72:
4f:18:91:c7:50:59:db:2e:19:7d:a7:dc:b3:f3:e6:
c9:4a:12:0e:31:68:c1:c6:af:e6:76:51:96:85:8c:
fe:ca:58:c9:cb:19:25:1d:bf:b6:e1:23:9d:e4:e6:
2e:16:17:c0:44:ad:8a:a5:65:62:29:fe:6f:57:f6:
99:2b:7f:bd:13:65:f0:95:39:b8:98:b5:a5:c8:c9:
96:04:db:76:9d:9d:d7:cf:33:48:86:0c:54:28:f5:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:F9:DD:42:50:D6:08:2F:6A:1B:54:1F:B4:DD:DB:0A:6A:00:6C
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:f2:94:97:0e:40:57:c9:0b:dd:73:ed:76:b2:7f:c1:31:
91:bd:64:90:8d:2c:2e:e2:b7:52:ba:93:c7:dc:88:db:43:dc:
0e:7f:ce:c7:19:97:5c:ee:e3:6d:69:f2:4c:ae:2f:77:28:13:
03:a9:da:26:a3:b6:7a:d9:ff:78:7f:7f:24:23:04:d7:b3:7d:
01:07:8f:17:c6:39:84:21:0e:03:84:d1:a3:6d:2e:78:3d:db:
37:d2:6b:15:b5:11:7d:b1:7b:cc:b8:67:2b:ca:59:fb:f2:2b:
a9:86:03:7e:2b:20:a2:55:b9:9e:97:8f:bc:49:80:45:31:08:
f1:a0:9a:50:4f:7e:70:d8:62:d5:db:30:47:55:c8:de:d5:ea:
5e:be:27:34:67:b4:85:43:41:62:3a:75:6a:8a:af:81:82:35:
6f:13:7c:d2:24:19:b3:87:8e:ee:9c:d4:68:84:f5:96:b8:30:
a1:59:37:b7:3b:e9:11:92:fd:8c:37:ce:28:fe:d6:aa:d9:5e:
a8:be:56:11:7a:9f:28:47:59:ef:2a:7a:f0:bb:91:59:d0:aa:
01:1c:50:c8:6d:c1:ae:9a:88:4d:dc:4f:81:19:00:ec:75:13:
2e:e3:a7:b2:5f:d8:e5:4c:ca:11:52:7c:9c:c0:4f:d6:61:c1:
7e:13:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:12 2025 by rpki-client