Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier: 3a2xy2vUKcw4icKBjvlW5Smnim0EvvxolPWwY7d7EHI=
Subject key identifier: 66:07:3C:05:23:E9:89:FA:ED:4C:75:E8:4A:0A:46:E5:73:61:B7:7D
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 019A209BDFF37B06B7104AA9BEE055D19512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number: 0C56
Signing time: Sun 26 Oct 2025 13:01:17 +0000
Manifest this update: Sun 26 Oct 2025 13:01:17 +0000
Manifest next update: Mon 27 Oct 2025 13:01:17 +0000
Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: AMJL6f3lUs2qhVI/xApz8C0ogzb4/If4Ym3Kbih/30A=)
2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:df:f3:7b:06:b7:10:4a:a9:be:e0:55:d1:95:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Oct 26 13:01:17 2025 GMT
Not After : Oct 27 13:01:17 2025 GMT
Subject: CN=66073c0523e989faed4c75e84a0a46e57361b77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:80:ab:2b:c2:44:52:e5:81:1e:8e:34:09:
db:c1:15:11:08:40:80:05:ff:b7:63:14:d3:ae:9b:
f6:d4:d9:a5:be:e6:9a:99:c9:e7:17:13:e7:63:5f:
23:59:a5:da:1f:0d:d4:9a:2a:61:94:f2:1a:3d:ec:
57:9c:2a:12:b1:06:ea:e8:00:c4:12:bf:52:6c:89:
f2:d7:20:f5:f1:68:6e:28:ed:46:18:8b:48:50:34:
9b:47:e5:d2:de:6a:28:90:4d:7a:8d:0e:65:08:f4:
28:9d:58:14:e0:cc:24:c4:25:d6:f7:c0:06:ed:24:
c1:9c:e1:14:cb:9a:7a:46:83:b4:5c:b6:b7:c2:8c:
a3:5f:1a:1e:5d:e7:11:7f:41:ed:b5:fa:1c:d8:9d:
37:ad:b7:00:d6:20:67:70:56:07:1a:a8:21:d3:6d:
19:48:33:26:d4:63:52:3b:21:3b:2d:8e:14:4d:37:
52:c8:c4:4a:64:07:d9:d8:42:10:df:64:1f:74:0f:
db:92:cf:01:42:97:05:f8:a1:57:05:07:c2:12:c4:
8b:d9:ff:36:e2:26:c4:ee:d3:64:f3:49:0b:65:6b:
72:2e:39:c4:96:bf:bb:18:39:a2:d4:a7:22:03:95:
e6:ce:87:03:fa:52:5f:c0:8c:02:46:46:73:28:96:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:3C:05:23:E9:89:FA:ED:4C:75:E8:4A:0A:46:E5:73:61:B7:7D
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:c0:f8:aa:e1:83:cb:53:5d:0d:f9:21:5d:78:f3:e9:b3:
cc:05:dc:e3:85:c3:15:50:33:6b:ff:82:f2:23:f6:c5:9a:33:
ea:ce:f9:df:aa:40:cc:48:94:df:fb:3a:57:c5:69:f1:ad:bd:
88:32:a9:dc:cb:56:5c:f5:01:9f:7f:e2:0d:20:85:84:c4:3c:
97:11:cd:14:15:d9:5c:6d:64:cf:49:4d:33:2e:9b:1c:fe:53:
d2:53:92:b2:6c:e1:ef:de:47:df:42:83:2a:7b:0b:eb:0e:f5:
c7:ca:26:1f:90:0d:ae:50:d7:e1:58:0d:f4:13:2b:cd:20:a0:
81:09:b0:6d:25:0d:d2:4b:0d:61:79:c4:f3:47:21:47:4a:49:
2b:4c:14:1a:57:91:d9:37:08:46:ce:36:89:30:e7:e5:0d:cd:
e5:34:16:06:3b:60:e6:36:34:f2:9e:22:d9:2b:e7:a6:15:d3:
45:57:d9:d6:0f:2e:2c:0f:76:7e:57:87:74:7b:f1:12:6c:4a:
ff:df:a2:46:93:87:ba:95:4a:e2:72:a6:79:fb:15:af:8d:b6:
55:6a:40:3a:86:4f:2f:e2:4f:cf:b3:e1:47:ee:ba:59:ea:25:
d6:04:b3:0f:90:48:e3:8e:bd:6e:14:02:f3:0f:30:a1:99:ec:
34:52:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:36:35 2025 by rpki-client