Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: N2JI+PNigAJlBPyVKdOlAakMn/3xXkGOZrxsPrH5cQk=
Subject key identifier: 94:0B:6A:D8:D6:4E:55:A7:9F:83:BE:A0:5B:8F:95:E6:B4:D3:E1:BF
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 019A209C7E2AD5391E3270FB1397E3A41FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 13:01:58 +0000
Manifest this update: Sun 26 Oct 2025 13:01:58 +0000
Manifest next update: Mon 27 Oct 2025 13:01:58 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: m9jOoxyUrehFsFUJc08DcLyTMDwzBu6MIDWljzA/aI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:7e:2a:d5:39:1e:32:70:fb:13:97:e3:a4:1f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Oct 26 13:01:58 2025 GMT
Not After : Oct 27 13:01:58 2025 GMT
Subject: CN=940b6ad8d64e55a79f83bea05b8f95e6b4d3e1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:86:3d:61:51:f3:5d:06:61:68:22:c1:c3:
c6:1d:31:df:09:53:b2:fd:f3:3e:b6:48:ef:fd:22:
3d:49:19:9b:dc:23:7f:a6:27:94:e3:be:f9:a4:89:
0c:90:ff:bd:f9:16:df:15:c6:65:88:cb:18:c2:e9:
58:4a:f5:57:23:68:e5:ec:46:d1:42:72:97:00:82:
a7:c5:8b:ef:86:79:c1:d2:3f:81:d6:ce:f9:b1:cd:
03:dd:0c:c6:24:06:a3:b0:5c:92:49:72:4d:c8:83:
d6:0f:24:a1:8c:b1:6a:73:1e:db:5a:e2:f0:78:52:
6d:ee:19:d5:8f:27:3d:84:35:6d:98:4d:a5:a1:5f:
af:f1:f0:2a:67:04:ef:d8:76:f6:ca:d0:20:85:d5:
8b:0b:05:70:9b:6c:86:5c:25:72:44:c9:35:bc:98:
8b:22:6d:be:76:f5:38:9c:d8:28:4e:de:78:84:a5:
43:dc:1d:67:e5:e5:0e:3e:a7:f1:cc:10:0e:c7:86:
e7:a8:8e:ae:47:a4:4c:fa:28:46:98:00:00:73:24:
62:71:5e:4f:b0:2a:44:e2:f7:1b:a2:df:3d:51:30:
44:bb:4c:e9:9f:dd:5d:89:c9:da:ba:4c:3e:f0:4a:
1a:73:8c:ef:a1:05:cb:47:18:f6:58:39:61:a9:50:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0B:6A:D8:D6:4E:55:A7:9F:83:BE:A0:5B:8F:95:E6:B4:D3:E1:BF
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f6:b9:c8:a4:cb:be:bc:fd:f2:03:02:ce:51:f5:34:5b:cd:
be:3b:96:69:c9:88:fa:c0:3d:9d:91:47:a6:6b:eb:9d:3e:98:
e9:7c:f9:6a:93:cd:c9:a0:a0:73:83:bc:e7:ea:4f:9c:58:d8:
07:32:b8:e9:5a:db:28:74:4d:3c:b1:31:a3:80:ec:aa:8d:01:
10:b3:4b:67:6a:1b:b9:16:dd:9c:1f:2a:c5:f8:4a:35:85:45:
17:70:36:ad:2d:90:08:d3:10:16:a3:51:e0:f8:41:b9:3c:f0:
67:e7:39:57:c4:13:69:87:43:e1:d2:b4:50:af:b4:93:d5:ab:
59:f8:c1:8a:21:37:b4:8d:e0:be:78:68:c3:ff:2d:8a:ef:19:
54:bf:f6:90:67:89:b9:b6:57:66:39:3f:97:7e:e6:33:20:f6:
66:9c:51:0a:bb:f5:70:b1:3f:9b:9e:98:f6:75:dc:03:ff:c0:
81:ef:d8:2e:fc:1a:77:ff:64:da:f6:da:8e:6d:de:4a:3c:1f:
8c:5e:ce:2a:ce:8a:85:a5:c3:e9:89:c1:d4:25:91:44:af:11:
b5:45:1c:c3:ce:62:30:08:8e:dd:4a:2a:9e:be:b4:53:c6:50:
bf:21:ed:17:d3:6e:b6:e7:35:fc:e3:8b:ef:67:c2:12:c2:fc:
bf:71:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:53:17 2025 by rpki-client