Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: noMcrUEcK6ZxcYE3e2EgHVc47Gngl9ouIfw1BUpM2aw=
Subject key identifier: 28:6B:0E:88:36:C9:72:46:6A:C7:57:73:C5:13:1A:1F:89:F3:C5:A3
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 0199C344A9E8058AB437DBC3674C1E0A155A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 098F
Signing time: Wed 08 Oct 2025 10:01:20 +0000
Manifest this update: Wed 08 Oct 2025 10:01:20 +0000
Manifest next update: Thu 09 Oct 2025 10:01:20 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: pJ/PQCmXH+kNLHt8dG3jbsJQS1n/QxWt4+JNe5nm3F0=)
2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=)
3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=)
4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:44:a9:e8:05:8a:b4:37:db:c3:67:4c:1e:0a:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Oct 8 10:01:20 2025 GMT
Not After : Oct 9 10:01:20 2025 GMT
Subject: CN=286b0e8836c972466ac75773c5131a1f89f3c5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:a0:91:6f:d7:e9:3c:bc:0f:4a:87:fd:b0:
c4:56:90:c2:32:87:c2:ca:11:bc:a4:51:1d:d7:b3:
e3:a5:af:bd:4a:07:11:34:06:07:0b:c0:cc:b2:28:
65:30:34:d2:c7:7d:87:28:79:d0:da:13:73:22:97:
5d:21:3f:58:2a:7e:fc:f2:8b:af:6d:83:58:17:c0:
e4:e5:55:e8:91:1e:2b:7a:25:ea:06:34:3d:5b:8f:
5c:ca:8d:6d:04:da:6f:bc:60:1f:7a:5f:81:c9:a0:
92:e7:a0:11:71:64:6f:c1:55:cc:62:e3:89:3f:10:
70:be:e9:47:00:dd:34:f2:27:f5:17:f8:21:5a:61:
09:bb:81:84:20:79:e0:bc:9f:5b:59:d1:51:14:b0:
f9:5f:02:03:b8:61:52:f3:e5:d7:0a:62:4a:33:29:
30:fa:c1:22:25:d9:18:bf:4f:56:bc:c1:09:39:1d:
83:75:9a:f5:a5:f0:db:84:1b:1e:64:38:0b:81:ff:
27:64:5d:9c:1a:01:f3:24:46:7b:c1:3e:f1:b3:66:
ce:fe:fb:0a:d0:f5:47:ec:aa:ce:15:3c:81:1f:70:
2b:96:a2:52:a4:6e:87:4f:0a:c6:d1:5c:9c:38:b2:
0c:8e:64:71:e8:73:5c:6a:07:2e:16:69:f8:29:13:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6B:0E:88:36:C9:72:46:6A:C7:57:73:C5:13:1A:1F:89:F3:C5:A3
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5f:70:c2:49:e5:1a:5b:ac:b3:b1:9f:70:a2:7e:72:e8:c9:
f3:ac:38:37:d4:a7:cb:21:5f:52:75:35:3a:3b:78:af:59:1e:
ac:46:bb:30:a4:b5:64:b9:d5:69:b9:f0:ed:4f:2a:a1:d7:58:
24:e7:eb:04:41:74:29:59:75:4b:98:2f:ad:1f:2f:45:93:cd:
22:8c:28:6e:8c:31:cc:b0:45:f6:ae:dd:da:9e:1d:87:bb:35:
17:64:da:f1:e7:9d:30:1b:13:b8:02:3a:71:2b:62:52:14:de:
22:7c:7a:f1:5c:c6:4a:15:ad:d7:1b:0e:49:76:ec:3b:8b:bb:
a7:d1:b3:90:2f:3d:c1:4d:5a:e2:93:98:1e:74:e8:03:c4:a9:
0f:e5:4d:c7:b6:a2:a9:c7:27:f3:88:3e:83:9d:cb:03:92:0d:
bc:e5:19:1d:66:3e:97:f0:dd:34:05:af:a7:64:2b:1a:af:4a:
be:98:d4:9e:a0:d4:90:df:74:60:4c:15:19:cf:03:d4:fb:93:
dd:b9:0e:df:74:e6:b4:a4:27:cc:33:e5:8e:04:29:89:0b:9d:
4b:34:1d:06:7f:8a:ed:fc:31:e0:c1:0e:b1:28:ec:f2:60:66:
c3:5e:04:99:a0:b0:23:22:10:e1:e4:8d:c1:98:b1:99:ec:d7:
9a:30:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:37:34 2025 by rpki-client