Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier: dQ0bKfOWI3m5weU6fPs2HnbDIugYpANv7nhPoobGnw0=
Subject key identifier: D7:0F:5B:A6:A6:D5:46:88:98:B6:D6:F8:2D:D3:B8:EC:3A:15:A3:AA
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 019A03DA068C27520ECF282489B33E1139C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number: 0705
Signing time: Mon 20 Oct 2025 23:00:11 +0000
Manifest this update: Mon 20 Oct 2025 23:00:11 +0000
Manifest next update: Tue 21 Oct 2025 23:00:11 +0000
Files and hashes: 1: dg19fPDPdlao_unFvCVYC9RvrNk.roa (hash: 1cfvjDRPYU7JD/YdM+FbsUT+iUhZddEmRAh2tZhtxpM=)
2: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (hash: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=)
3: mrfqZX09-GYD22YGA7OHI1KATR0.roa (hash: iAu2ErUzWfhvcM5+CamqqvdYTRwJsRA5N+3mtIKS/Kc=)
4: ovGP4arKXoonSAQIQ1WNcsWj-gQ.roa (hash: T9HKSRGXUzrIsVuq9KTvv/Pp6ahuWPC0kj3dMzK0+WE=)
5: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: Zb42BbllwK0sSeoVwiCFppIFiTTKTvDgVePDhI8lMcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:06:8c:27:52:0e:cf:28:24:89:b3:3e:11:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Oct 20 23:00:11 2025 GMT
Not After : Oct 21 23:00:11 2025 GMT
Subject: CN=d70f5ba6a6d5468898b6d6f82dd3b8ec3a15a3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:51:1e:47:3f:53:48:94:35:18:b0:40:55:
66:91:99:19:6d:8d:f2:d6:9c:af:ed:cb:d0:c9:83:
9e:04:30:36:86:f3:c5:c7:5d:87:07:dc:61:55:46:
59:5e:0c:ba:38:d3:9f:3d:44:8b:d4:66:4e:44:90:
47:60:fe:b3:b5:94:7a:84:76:ad:72:cf:f3:64:ca:
a8:a2:9b:2a:d1:1b:ae:63:80:d9:ec:2a:1e:35:25:
bd:0c:15:4a:09:3f:8e:58:c4:71:c2:4e:eb:e6:2e:
62:ca:66:5f:e8:9c:62:98:6a:a9:2c:6a:e7:b7:06:
93:4f:ca:75:c1:6d:29:2f:63:8f:ec:d8:ab:4d:83:
d8:f8:24:0e:6f:ea:86:e3:bb:47:48:2c:af:0f:4a:
5f:84:b2:f8:bc:40:18:e4:48:df:7a:30:57:d5:41:
9d:08:e8:20:60:0c:b5:a4:f9:c0:cc:06:96:9c:a3:
01:cc:1c:65:77:c8:c8:d3:97:44:74:ce:52:be:1a:
ce:78:54:80:02:f9:f4:6c:e7:a5:ec:f7:ee:37:d2:
35:a8:a1:79:d2:46:ca:51:60:7a:64:43:e0:5b:7a:
ef:a1:ec:6b:a5:c3:46:25:d2:25:43:44:35:28:c4:
67:16:20:32:02:90:f1:d3:03:33:ec:e3:60:b5:0c:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0F:5B:A6:A6:D5:46:88:98:B6:D6:F8:2D:D3:B8:EC:3A:15:A3:AA
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:25:68:03:8b:22:69:09:86:c7:9a:4d:f6:ce:8a:c9:c3:99:
a9:8d:87:38:40:3e:f1:d4:48:0c:bd:70:f6:84:db:2f:59:0a:
c0:fd:53:e7:44:6f:6f:92:d4:3b:58:65:7b:b3:3c:90:fe:5f:
e2:c3:fc:cb:c7:4f:80:df:23:36:42:21:6e:dc:be:e0:e7:2f:
aa:f1:25:27:d6:45:eb:79:92:aa:29:8d:5f:f2:0b:12:fb:c5:
f4:4e:87:ee:24:e4:d0:a0:84:14:d1:b1:fd:b7:23:10:89:08:
8e:84:ee:bd:d1:e4:7b:8a:8b:c4:4f:97:8d:1c:ee:3c:b0:8c:
4c:b9:05:39:45:29:f3:75:65:7b:8a:57:62:bd:f2:d1:dd:7c:
d8:95:06:df:1b:f5:14:96:6f:95:0a:95:01:a7:76:5d:6a:7a:
f1:67:90:4c:ba:7c:ea:f1:34:c4:1f:4e:1c:f9:36:00:e9:83:
66:43:8a:be:d3:23:2e:e1:2a:a4:03:be:df:8c:fd:5a:d4:f5:
d0:29:1e:73:80:3e:6b:47:be:e9:40:4b:01:3e:26:8d:9f:ae:
ef:52:d2:f7:d7:1d:0e:65:40:9e:ba:6f:0f:ba:be:63:30:e9:
35:a2:e7:22:ae:6c:98:d0:d8:98:13:ab:08:df:4d:2c:f6:b6:
0f:8e:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:15:08 2025 by rpki-client