Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: UkveCkOqlcDASZlu85QPGL4Ik6Mtj9/2y5Bi0k9RF/w=
Subject key identifier: FA:46:91:8E:F5:62:F4:BD:FE:3A:FE:C4:2D:92:A8:80:7F:E9:D3:CB
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019A300ED459C9727CD1A9F23F2C636E2ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 13:01:09 +0000
Manifest this update: Wed 29 Oct 2025 13:01:09 +0000
Manifest next update: Thu 30 Oct 2025 13:01:09 +0000
Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: WuGYJugMLasW9Ke72jk91PVm0tK9GtegYF6tvFX8gE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0e:d4:59:c9:72:7c:d1:a9:f2:3f:2c:63:6e:2a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Oct 29 13:01:09 2025 GMT
Not After : Oct 30 13:01:09 2025 GMT
Subject: CN=fa46918ef562f4bdfe3afec42d92a8807fe9d3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:00:af:b4:52:f5:79:81:41:41:f3:ac:d9:
4b:e4:b5:b9:38:11:59:b4:80:ff:61:3f:0b:c6:5d:
76:a1:ca:25:ce:cf:79:59:93:0c:0e:35:21:34:69:
e3:ce:cb:99:17:17:48:99:eb:1f:bc:f1:0e:e5:53:
30:7a:45:77:7c:28:f1:2c:7d:22:1f:73:8b:18:d5:
d9:86:85:26:5a:31:bb:fa:5a:0e:1a:2e:59:8e:23:
94:7c:6e:62:63:a8:a9:ac:43:66:c1:6c:dd:44:e7:
d0:b1:c9:a6:23:11:36:84:d6:aa:d7:a5:38:4f:0a:
67:11:03:b5:72:66:53:03:b1:c5:46:81:5c:44:b4:
3f:35:4b:77:a5:22:7e:4c:a3:06:68:a3:06:2e:d5:
4e:68:dc:22:86:a1:ed:1c:dd:1e:3e:97:4a:f7:01:
36:01:49:84:5a:af:7f:4f:b4:6b:94:b6:ca:06:fa:
76:de:10:b4:30:a5:10:b2:54:3f:13:1f:4b:17:21:
52:53:e7:02:88:99:25:ff:a6:08:a4:3a:20:93:32:
be:0e:40:df:47:7e:f4:e3:17:b0:e8:17:c9:66:bf:
9c:0f:d9:60:20:57:ce:eb:f1:13:d1:06:05:30:45:
b6:1a:21:97:bb:cd:28:ee:9e:67:05:b5:c5:e7:ac:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:46:91:8E:F5:62:F4:BD:FE:3A:FE:C4:2D:92:A8:80:7F:E9:D3:CB
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5e:3d:55:d6:91:f7:cf:36:06:65:95:9f:98:05:45:1d:96:
44:b7:5a:67:3a:dd:03:de:2e:87:c9:57:88:c0:db:db:df:a4:
80:6b:7b:b4:62:f6:c9:57:df:ff:83:2f:43:e7:71:21:92:cd:
13:07:30:9f:ca:5c:4f:64:22:4b:c1:42:b7:9b:6a:aa:a7:b7:
aa:b6:78:f5:b4:b3:6f:75:63:93:b7:8b:f7:3e:8f:b2:05:9d:
6c:86:b0:27:2b:86:66:4f:58:bb:03:ea:47:95:40:26:63:24:
91:95:65:73:74:79:5e:61:ce:2e:a4:44:40:c6:fe:03:63:9e:
93:32:ee:e4:28:42:d5:8e:cd:a0:6a:05:0e:02:d7:ea:7e:75:
0d:09:6a:03:3a:50:58:51:8d:77:b2:2a:19:87:e7:7a:bc:8c:
2c:4f:9f:80:2e:1b:72:31:e1:d2:20:a8:31:7b:0d:c5:9e:98:
57:19:86:2e:b8:f9:48:4c:cb:20:ce:bf:ba:80:98:8f:e3:f5:
73:da:28:21:f6:b3:63:c7:4e:f2:ce:ff:34:ba:ef:5d:d2:f7:
36:52:bd:db:b6:9d:7d:51:6d:9e:73:ac:d8:fb:e8:40:6b:30:
5d:46:ea:5a:da:b8:1f:73:c9:b1:37:10:21:17:af:12:e3:bb:
36:55:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 17:49:27 2025 by rpki-client