Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: k5r+2/miQ66i9kKfZFRdsnaJJXZIYG4casr7f8wPt0E=
Subject key identifier: 87:C4:06:B0:7A:C8:50:A8:F6:5A:F7:DC:9E:FA:96:5D:06:97:09:E1
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019A2D43EDC442AB0D1639D48F5A818B4ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1704
Signing time: Wed 29 Oct 2025 00:00:17 +0000
Manifest this update: Wed 29 Oct 2025 00:00:17 +0000
Manifest next update: Thu 30 Oct 2025 00:00:17 +0000
Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
3: JYtV1xya2PeTYSiqPGeg1v3D1hU.roa (hash: jSaIThGpGsn1CtL3kupT6o9d7MS0BOry41A4muvp5uA=)
4: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
5: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: 7Uyy4mQYpecfeEMfIzfLgSioEjlT3KaX3TrkgZuTw9g=)
6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:ed:c4:42:ab:0d:16:39:d4:8f:5a:81:8b:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Oct 29 00:00:17 2025 GMT
Not After : Oct 30 00:00:17 2025 GMT
Subject: CN=87c406b07ac850a8f65af7dc9efa965d069709e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:2d:bd:13:43:48:dd:45:fc:59:96:c8:14:
f7:9a:27:0a:4c:0a:12:cf:9b:9e:f4:0b:45:e5:7c:
cf:7f:bf:15:80:29:b6:e3:c0:c1:7f:1c:9e:1e:72:
c6:3e:da:6e:fd:c4:36:d2:1f:87:1c:ab:dc:aa:9a:
8c:22:8d:83:8a:d1:84:b4:ab:39:18:35:3c:3b:d6:
25:cb:c0:cb:14:27:d0:c7:58:e3:76:82:bf:e1:09:
2c:26:ee:e4:34:c8:3e:eb:cb:97:f9:ff:d4:ea:ff:
49:e2:a5:ab:43:c7:41:59:0d:16:7b:01:dc:f8:fa:
d4:4f:f3:28:71:8b:c0:e9:a5:fc:ab:5e:f9:47:05:
9d:a3:92:d9:69:99:60:67:e6:d3:fa:29:35:b1:64:
e9:9c:2d:19:58:72:63:2f:a5:ac:fc:ad:c8:55:3b:
f9:0f:85:8c:65:b2:91:fe:6f:be:07:34:b2:b5:32:
51:fb:b5:0d:94:6c:b7:25:a0:90:b1:6a:44:09:fb:
fe:e1:d0:07:b6:6c:38:71:af:f5:3f:89:1a:04:ae:
f0:3b:a9:58:f2:c0:5d:8e:84:7a:c2:a3:81:75:f0:
29:dd:bd:46:ee:a3:77:33:6d:f5:b8:e2:6e:ac:5d:
9a:bd:ad:4f:ea:09:2a:31:2f:dc:f6:56:02:08:14:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:06:B0:7A:C8:50:A8:F6:5A:F7:DC:9E:FA:96:5D:06:97:09:E1
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:fc:ce:94:e6:42:a9:bc:8c:52:de:88:3b:a4:6d:0d:5c:aa:
c5:49:bd:8e:6f:09:2c:69:72:59:a4:d7:cf:0c:8f:66:46:6c:
91:b9:6e:5b:0f:25:0a:31:96:13:2e:a3:25:65:ba:0d:22:1d:
21:9f:ed:ac:6d:f6:bd:10:83:f4:ad:e4:6c:61:54:71:71:2c:
d0:d7:19:2a:04:75:d5:7c:7c:dc:ef:ac:38:4f:f7:e1:2d:42:
0e:b9:fb:a3:05:39:d5:33:1d:90:f9:97:64:c4:13:53:d9:04:
b4:1c:65:ab:b3:a1:3d:cc:58:d2:6f:7c:20:76:d5:a3:62:16:
66:54:0a:1b:de:14:a7:0c:96:30:81:cb:f6:66:06:5f:07:ae:
01:60:bc:a8:a8:f8:9a:96:e1:9d:2a:55:6e:47:9a:b7:1a:8e:
c4:71:58:ab:4a:00:9c:54:66:96:63:09:d0:c1:e4:7d:d9:5a:
c9:a9:13:66:ee:e1:38:3e:81:61:7d:27:83:af:ff:3f:a2:e3:
ff:89:40:98:19:77:07:ba:8b:c9:78:37:3e:c2:1e:f3:94:9c:
21:81:64:1d:14:2d:08:51:d2:7d:30:cf:7e:8e:e3:45:24:3c:
87:34:77:4e:2a:bb:63:6a:c5:26:88:45:00:4c:4c:86:c6:03:
eb:2a:32:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:36:19 2025 by rpki-client