Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: /8KFNE1srvvgAvE4IZYgzzrOk+k7I9igW9XdYcjV5bU=
Subject key identifier: 65:9C:50:CE:69:25:22:B6:BC:C0:AF:63:A9:20:CF:44:3B:65:E6:A6
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 01994E8922FBC307229E976118E65F330345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 058F
Signing time: Mon 15 Sep 2025 18:00:33 +0000
Manifest this update: Mon 15 Sep 2025 18:00:33 +0000
Manifest next update: Tue 16 Sep 2025 18:00:33 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: QVkEeFRg4rPf7wYO3Ky4yPkVTmKWXC6AVZcs7dZe2Wc=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:89:22:fb:c3:07:22:9e:97:61:18:e6:5f:33:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Sep 15 18:00:33 2025 GMT
Not After : Sep 16 18:00:33 2025 GMT
Subject: CN=659c50ce692522b6bcc0af63a920cf443b65e6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:aa:e5:26:c8:a7:62:88:a4:af:76:4f:1c:
c0:95:00:24:17:d8:46:87:d5:98:63:93:3a:e2:17:
fa:97:9c:42:14:05:2e:9d:ed:c0:b5:b4:63:a7:47:
15:ad:bf:34:12:16:1a:e7:0d:ee:39:f0:a3:df:b4:
04:3f:0f:42:4a:aa:b4:18:60:f0:00:ba:8c:aa:de:
7c:89:68:a5:5f:19:06:48:5e:90:7d:1d:d3:63:3e:
83:12:1d:9f:18:9f:01:54:14:73:60:69:d0:4a:12:
40:c9:6b:ef:eb:e6:e9:91:0d:d2:4c:a3:e4:26:1f:
8c:0a:c3:4d:78:06:eb:25:4c:ec:39:8c:d8:f9:0e:
71:fa:f6:c8:62:fc:10:5a:3e:d6:27:d5:f3:e5:86:
83:1d:34:6d:88:42:68:37:f2:7d:00:5a:2e:a0:7f:
df:3f:ba:2a:7f:e0:e3:e9:85:dd:e3:2d:b5:15:fb:
d6:33:93:4c:38:65:4a:96:84:96:e5:75:4d:b7:cc:
ae:b7:ec:7b:d3:e7:05:0c:07:3d:b0:00:18:a0:31:
cb:7c:31:8f:fb:31:50:85:b9:93:a4:e6:b7:3a:ef:
5b:cb:62:50:2e:1c:38:17:c3:a6:09:6c:d9:73:72:
67:46:47:17:e7:33:c8:4c:01:02:84:e9:b2:ec:26:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9C:50:CE:69:25:22:B6:BC:C0:AF:63:A9:20:CF:44:3B:65:E6:A6
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2f:08:18:16:f3:4d:8f:5c:ad:67:06:c3:46:19:03:7d:dc:
e6:68:f0:f8:0d:67:b0:94:98:2c:87:b2:48:8b:f4:f5:15:b6:
80:79:d6:3c:bd:2f:26:02:f3:d8:75:34:44:87:21:5e:2c:6b:
c7:19:f8:4a:91:25:20:b2:e4:c3:7e:41:18:61:00:b5:4d:49:
f6:68:06:e0:a6:f3:56:40:63:de:8f:2c:af:fa:8c:a8:d9:1c:
8b:53:19:30:65:7c:33:b1:0a:bb:3f:ce:19:f6:19:8a:18:f0:
6a:03:ec:1b:08:b7:71:49:0e:86:16:d6:4a:e7:d5:30:fe:34:
9a:f0:a2:a7:24:66:60:67:95:c1:56:f8:b6:6d:fd:83:89:77:
6c:ae:f6:5b:4e:f8:f5:cb:0c:f7:43:45:2a:5f:97:ca:5e:d7:
44:14:6c:f0:ea:c7:88:cd:e4:85:b9:4c:d6:da:06:3c:9c:bf:
60:c3:c2:0c:63:02:66:2f:0c:8c:e6:5a:ad:c3:27:d5:e6:31:
f3:82:92:be:50:de:84:02:4f:97:c6:28:a5:28:df:2f:ae:ba:
d2:49:9b:3b:d2:af:57:58:1f:e3:4e:d9:79:92:d1:47:0b:2b:
51:cc:d9:cd:e8:4c:df:64:e3:b4:9e:5f:0d:87:7b:dd:04:5f:
df:23:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:07:42 2025 by rpki-client