Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: FStS/lguirCnTBLH7VMBwrCPVk67i7MnBfMTZ3c79pA=
Subject key identifier: 28:7B:7D:BA:9A:25:23:6F:28:F0:2F:48:DD:42:A1:4E:5C:4F:D8:5B
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 0199C4C544EF3919E81F95B230691369AA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 14E7
Signing time: Wed 08 Oct 2025 17:01:26 +0000
Manifest this update: Wed 08 Oct 2025 17:01:26 +0000
Manifest next update: Thu 09 Oct 2025 17:01:26 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: bFeM1qy96YZh/yEDALj2qMq3PXKrQWH6TWilGu7Qss0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:44:ef:39:19:e8:1f:95:b2:30:69:13:69:aa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Oct 8 17:01:26 2025 GMT
Not After : Oct 9 17:01:26 2025 GMT
Subject: CN=287b7dba9a25236f28f02f48dd42a14e5c4fd85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:18:07:1c:3c:18:a9:ba:9c:de:4d:dd:ab:
ec:f1:34:d9:59:f2:b6:c9:e7:2d:ea:73:4c:3e:40:
25:ca:a3:ed:f1:55:3f:df:a9:15:25:e5:18:a1:41:
52:05:b5:db:ba:db:31:12:ee:30:32:b1:00:54:0a:
7a:69:27:93:43:f7:fa:39:74:21:64:49:67:78:26:
d0:d7:95:f6:a9:56:b2:76:93:f7:ab:88:23:1f:12:
f6:44:1e:e7:d2:9a:2a:bd:87:30:0c:c4:1b:0d:4b:
5e:57:60:fe:04:39:21:69:5d:3a:91:42:29:2d:b5:
07:9a:aa:2a:2b:27:f7:9f:b2:3d:dd:20:1b:46:a8:
2d:5a:da:93:cb:96:63:f6:02:e6:c0:7d:f4:b9:ec:
dc:36:bd:7a:0f:bb:c7:4c:2e:3d:63:16:c8:57:89:
1c:be:21:35:39:04:de:22:1b:74:fe:6b:67:97:f3:
a1:16:7d:1d:fd:57:ab:22:3c:a4:3d:90:7b:73:24:
3d:ad:f0:36:ea:9d:6c:f1:44:26:56:97:3b:62:f9:
7a:fa:76:d6:46:1e:53:37:85:ed:5e:ad:90:45:47:
65:c0:ab:01:b4:57:af:08:0c:ad:76:3b:91:f1:d4:
c7:92:7e:b8:1b:35:be:2d:2b:d1:4e:fe:77:0b:4c:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7B:7D:BA:9A:25:23:6F:28:F0:2F:48:DD:42:A1:4E:5C:4F:D8:5B
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:27:27:f4:26:aa:77:fa:67:f8:cd:2d:8e:00:c8:d1:b8:
b4:6a:8f:56:61:cf:2c:1f:b3:41:01:98:b4:0d:8b:b3:b6:42:
e2:c0:e6:7e:f0:a8:c2:36:bd:51:8f:ff:7f:2c:fe:63:1d:6b:
51:8b:ea:91:86:fa:d1:76:65:15:95:85:a4:02:63:86:3d:ac:
77:a9:73:9c:b1:2b:9f:97:26:4a:b1:7a:04:52:e6:31:68:e6:
2c:7e:a3:36:d8:5d:67:6a:5c:e1:a8:11:e7:49:7a:b4:b3:73:
9a:0c:35:25:cc:7d:94:4c:56:d2:d9:af:2a:7e:c8:c1:7c:d6:
e2:54:26:bb:b6:76:66:9b:1a:07:78:35:67:07:ae:01:43:89:
be:77:61:af:d4:e2:7f:e0:ba:81:51:e6:30:01:c7:69:a3:d9:
c1:f2:83:d4:b1:58:d9:1c:82:52:fe:d1:b5:08:f8:9e:c2:0a:
66:9a:ec:62:ea:74:da:db:32:39:76:8f:7d:bd:be:66:02:2b:
ef:f1:c7:cc:8c:b9:cb:53:5e:29:b8:18:72:59:0b:ba:9e:14:
7f:ea:88:82:0d:05:aa:cf:af:ac:96:3c:bd:a3:03:9c:91:7a:
7d:96:18:8b:b6:7f:54:3d:2a:fe:1a:42:8e:89:20:95:53:9e:
3a:5d:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:33:34 2025 by rpki-client