Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: 2jKTpwsS0CxViM7pktcKQ6rqbkcfephNDpzgzHoyM94=
Subject key identifier: D3:4C:81:2A:89:20:13:9B:CF:5B:05:EC:9D:A4:40:86:27:58:4A:8A
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 019A047F19328CD4A8C5490014735AB2462A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 16EA
Signing time: Tue 21 Oct 2025 02:00:29 +0000
Manifest this update: Tue 21 Oct 2025 02:00:29 +0000
Manifest next update: Wed 22 Oct 2025 02:00:29 +0000
Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: tHlPIyXolxlC9o9oAZoS28uL6rW6VYu9LltXd+KUjS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:19:32:8c:d4:a8:c5:49:00:14:73:5a:b2:46:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Oct 21 02:00:29 2025 GMT
Not After : Oct 22 02:00:29 2025 GMT
Subject: CN=d34c812a8920139bcf5b05ec9da4408627584a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:bf:b7:2f:ae:e8:ed:25:a9:46:54:69:b4:
6a:ef:b3:53:6c:b1:c1:17:ef:e3:cb:5c:f6:58:7f:
13:25:f3:65:40:57:ce:05:f2:dc:ff:5a:7f:65:84:
17:a9:d7:8c:ea:b4:7d:8c:d1:82:fd:39:fd:4e:b7:
e9:52:a3:76:ff:61:e6:dd:96:3a:f6:df:21:ad:85:
62:c0:46:72:e2:04:8f:cb:e0:54:03:ce:e2:00:74:
c3:3e:89:41:fa:1d:ab:fd:7b:67:b2:b9:fe:e7:5b:
0e:fd:37:ca:0e:4e:d5:fe:09:3a:53:34:06:76:9d:
1c:e3:0d:e8:ae:99:f6:27:2b:24:52:41:25:4b:46:
26:7a:a4:2f:4e:44:38:88:78:52:73:c5:d8:5f:0e:
a7:38:eb:c0:1e:c7:ed:1a:34:03:20:87:12:c0:e8:
b1:b6:88:7a:a2:11:4a:fe:33:30:20:c3:83:16:61:
9f:be:e6:0d:f7:41:11:b7:53:c5:d7:fd:18:e0:2d:
48:d2:a6:49:7e:e9:db:4e:0d:c0:91:7e:b3:51:70:
0c:01:d1:f5:30:5d:99:d9:db:01:44:f4:2c:3b:0c:
a6:be:8a:7b:1b:67:1d:ee:8d:8d:b5:c6:31:08:30:
24:35:5c:e4:7f:0a:51:27:f1:af:27:07:f4:94:1a:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:81:2A:89:20:13:9B:CF:5B:05:EC:9D:A4:40:86:27:58:4A:8A
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:b5:c2:28:7d:0d:52:2c:2c:49:56:f7:dd:f4:65:39:ec:
4c:a6:73:3f:ef:84:a1:6b:63:58:cf:b4:a5:88:0d:c9:e3:86:
90:ee:3a:52:04:a1:07:2c:3b:c4:9c:be:84:b2:c9:e6:e0:37:
15:d1:e2:59:e1:cc:5b:b1:3c:e3:c1:38:77:f6:62:8c:33:bc:
41:82:31:73:82:fd:a0:10:3a:f7:32:84:47:5f:24:3f:c1:e5:
04:28:d1:17:16:f2:8b:9b:4a:70:0a:58:44:67:7c:69:e2:6f:
80:55:9d:9d:63:e8:6f:83:d6:77:ee:35:b5:2d:56:ae:b3:81:
5f:02:6b:24:2c:f0:4a:8d:78:31:66:6c:50:9e:7d:97:9c:39:
4f:f2:30:cf:4e:1a:26:fd:1c:87:bf:61:5a:d9:fb:b3:1f:8e:
30:1e:6c:55:c4:9a:fb:c3:9b:c7:88:ce:2f:c3:10:50:2b:9e:
d5:22:0d:32:37:df:e3:5a:e6:0c:97:7e:c0:be:50:59:5b:24:
a9:af:fd:bb:dc:9a:b2:4a:86:e1:df:b8:7d:e2:0c:e7:cc:4a:
58:40:d6:78:2f:e2:8e:7b:7e:79:37:9d:2a:c7:bd:d4:2f:45:
bc:c4:87:02:97:f5:70:34:4b:e6:fd:0d:28:55:3f:b1:f2:3e:
13:24:30:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:31:11 2025 by rpki-client