Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier: lZQr6b4Vtx0OXxIYxnldve2B+dQSqzr81g0vvaobsZg=
Subject key identifier: 9A:E2:F4:41:52:ED:2E:FA:90:9F:87:2B:93:B5:DA:D6:72:DB:F0:4F
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 019A1F88727B8C818673DCC89C68385F2430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 08:00:27 +0000
Manifest this update: Sun 26 Oct 2025 08:00:27 +0000
Manifest next update: Mon 27 Oct 2025 08:00:27 +0000
Files and hashes: 1: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: fJaI9Neic8QTlq9E9+D4mfSOnVD8CXXTtsAd0yGWCwU=)
2: lAbVacJrgztu_NhHYXWokojqeEc.roa (hash: b5DQ5YmTJodarXLSdRJFMbK2K3dk6jpwFRrIoIXaqxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:72:7b:8c:81:86:73:dc:c8:9c:68:38:5f:24:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Oct 26 08:00:27 2025 GMT
Not After : Oct 27 08:00:27 2025 GMT
Subject: CN=9ae2f44152ed2efa909f872b93b5dad672dbf04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:37:28:7c:ee:20:e3:de:12:45:f0:c4:64:d7:
04:5f:bc:26:c0:3e:e3:c7:e7:bb:b5:ee:00:6a:05:
e8:c7:16:fa:d2:ce:59:08:c1:f6:99:d1:ea:62:a0:
f2:50:4b:10:1e:1a:26:fc:01:11:ee:4c:57:1b:7b:
21:e3:8f:5f:d9:1d:bd:a2:94:b1:0e:7e:c4:4d:55:
74:6a:48:1e:54:67:7e:40:df:de:7f:33:7f:a7:20:
82:77:6e:de:fa:01:fd:68:c8:06:f3:cd:2b:49:47:
c9:64:ba:96:b9:09:61:d2:83:2e:be:8c:1a:4d:a0:
13:0f:65:1d:f7:a7:a4:1f:15:d7:22:ab:82:6c:4d:
95:bb:b1:8f:f3:65:86:d6:40:32:e0:80:bf:51:0f:
bd:ac:ef:46:7d:d1:e7:c9:8a:10:30:c9:de:1f:63:
f2:f6:29:5f:a7:0c:b9:9e:46:1b:89:5d:44:83:d0:
6a:19:e8:ba:41:c4:d9:b0:08:80:11:7c:c1:25:d3:
5f:e2:6e:c6:e7:a9:95:52:e3:4d:38:54:58:12:c5:
be:76:74:51:8b:6c:3b:57:08:6d:5d:ef:e3:14:fe:
68:a2:4f:63:1f:39:21:f2:68:94:14:fe:d2:e5:83:
49:62:e9:fe:b1:5b:e3:c0:72:8d:0e:9b:0f:ed:cd:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:F4:41:52:ED:2E:FA:90:9F:87:2B:93:B5:DA:D6:72:DB:F0:4F
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:0e:90:e8:64:56:38:77:51:34:f2:3a:b6:eb:53:a7:1c:
de:f3:28:1f:b1:16:7b:c0:4a:e0:94:ed:50:45:79:bb:c6:ef:
93:60:e7:2d:68:c5:cc:e8:ff:ae:d1:06:e3:c9:d2:34:1e:b9:
d8:2c:18:34:a0:83:e6:86:bb:8a:c1:39:4f:f0:39:e2:ed:7c:
a2:fc:2c:46:a6:9b:be:4d:03:73:57:25:65:ab:83:cc:dd:ea:
eb:53:9e:27:12:63:0c:f7:7d:ed:ce:e9:3b:ec:ac:bc:86:7f:
40:60:af:b5:56:8b:71:d3:de:26:ec:48:98:ec:01:a5:fa:16:
08:89:95:78:63:5e:ed:9a:08:69:c3:4d:f3:71:4f:a2:40:b5:
f5:84:d5:db:5a:52:5a:bf:75:98:c7:20:f6:6f:27:6a:86:c5:
c1:b4:12:55:9e:29:15:e5:6c:a1:97:eb:dd:ae:19:0e:65:15:
3f:4e:ae:29:b9:22:bf:07:31:a3:8b:b0:79:24:b2:c1:37:64:
d1:e2:49:82:ee:33:6d:2b:69:35:cc:27:c0:bc:10:5c:33:25:
74:a5:c7:9f:f8:da:46:27:6d:18:c0:03:4f:c1:e4:4c:29:dd:
f2:84:d9:ee:2d:38:1e:fa:d9:ff:6f:b2:75:7d:3d:b4:e8:e8:
93:0e:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 15:27:12 2025 by rpki-client