Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: 7PUxXyzMCAJidEHLfPToCqGl0CtOZoCBnkYgdMcl1cQ=
Subject key identifier: 98:E9:A7:20:81:FF:E2:03:AC:83:1B:AF:93:E5:36:3A:6E:BF:DF:F2
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019A09DCDF7B6CB1A0D232352D91DF514AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 16EA
Signing time: Wed 22 Oct 2025 03:01:01 +0000
Manifest this update: Wed 22 Oct 2025 03:01:01 +0000
Manifest next update: Thu 23 Oct 2025 03:01:01 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: sjiFETQR53c2oenTEfCZAIsPu+tWtkJbnJYBmYFXRow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:df:7b:6c:b1:a0:d2:32:35:2d:91:df:51:4a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Oct 22 03:01:01 2025 GMT
Not After : Oct 23 03:01:01 2025 GMT
Subject: CN=98e9a72081ffe203ac831baf93e5363a6ebfdff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:4e:b5:43:94:38:48:f0:7f:3c:6a:4b:dd:
60:8d:d4:68:20:b2:e1:5c:65:50:e8:8f:32:62:26:
fc:07:a3:2b:99:ee:1f:dc:ce:8d:59:ba:e9:ed:69:
58:fa:6a:b4:09:1d:6d:aa:55:0f:ab:aa:ae:52:3a:
87:6b:8a:a1:d4:61:53:f8:65:53:75:4c:d8:40:13:
a4:8e:ae:1d:e5:5d:2c:45:87:ea:d4:62:d8:9d:c8:
15:f3:08:68:3f:fb:c1:f7:23:f7:aa:3b:44:40:c5:
5b:72:c3:7d:ac:ae:89:fb:c8:0f:d7:70:48:63:a7:
d7:5f:88:7d:36:f1:28:87:f9:31:c6:f3:51:40:a8:
c0:3b:fa:69:ce:3f:48:23:89:e0:e0:02:6a:d2:5d:
46:48:cc:46:8b:7f:54:a0:c5:e3:ff:54:28:4a:c1:
de:fa:dc:ed:a0:73:ac:e5:a7:35:be:83:92:2f:96:
b8:0d:41:ea:fe:89:8d:6c:03:6e:54:07:3f:73:57:
42:b8:f3:ec:29:b8:29:85:62:2a:a9:b7:d1:6c:92:
3c:21:87:81:ca:d1:94:cc:ef:c6:81:9d:fd:44:e1:
e7:52:15:32:91:79:21:52:31:be:b7:cd:b2:4e:2f:
bd:90:95:d7:7d:c1:63:eb:f5:b7:55:04:bf:51:6a:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E9:A7:20:81:FF:E2:03:AC:83:1B:AF:93:E5:36:3A:6E:BF:DF:F2
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:40:c4:4b:fc:64:63:07:74:68:a4:82:35:70:9d:e2:fe:27:
0f:7e:83:e5:29:c7:41:77:10:31:fe:1e:98:9c:ba:13:2f:7b:
6f:49:eb:9d:8a:2d:6c:da:45:75:c2:c5:6d:67:96:1c:7b:d4:
49:7f:70:94:ce:51:24:37:b8:9a:ae:0c:d6:78:4d:cd:41:9b:
56:f7:d0:fa:74:41:93:b3:89:4f:8a:27:09:4a:56:b5:1c:38:
29:93:68:55:0e:fb:c2:df:92:d1:ff:5f:e7:52:bd:a7:84:63:
0b:f2:e8:6c:38:02:5c:bf:70:51:a0:75:dc:9f:a9:3f:12:b2:
5d:06:11:ad:6d:6c:69:4c:92:b9:34:ba:88:c5:5b:ac:13:41:
5c:71:21:8b:d3:5b:97:3a:df:ba:7c:5a:8f:e4:af:b5:82:80:
5c:b5:38:27:b4:b3:33:80:33:8d:42:77:d9:b7:aa:f8:37:21:
e3:42:13:e3:cf:31:93:00:5b:b7:8a:fc:fb:07:7d:74:19:87:
a3:b5:76:af:c5:2d:5b:83:16:b6:88:b1:27:fa:2c:d2:02:c0:
0a:4b:2c:5f:59:c7:9e:98:fe:80:65:e5:86:6d:e8:3f:0a:e5:
fd:1b:88:6f:1a:2a:63:e3:38:e4:f7:38:af:db:66:55:84:40:
81:1b:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:36:17 2025 by rpki-client