Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: hQR66/pyNDGGazclrTTeeJM59Rn+op5NdlXf4Pf70aM=
Subject key identifier: 6F:A8:7F:F5:2B:68:E7:D6:CA:49:16:E3:87:E1:BD:28:20:67:40:2F
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019A533EB87EE84B82E15FAABCBD20DF1B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0616
Signing time: Wed 05 Nov 2025 09:00:10 +0000
Manifest this update: Wed 05 Nov 2025 09:00:10 +0000
Manifest next update: Thu 06 Nov 2025 09:00:10 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: gUokS/EA7Bj7LotSYedLlx3TJw0yeiLa5G+bpUEw23o=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:b8:7e:e8:4b:82:e1:5f:aa:bc:bd:20:df:1b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Nov 5 09:00:10 2025 GMT
Not After : Nov 6 09:00:10 2025 GMT
Subject: CN=6fa87ff52b68e7d6ca4916e387e1bd282067402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:f5:5c:ae:c8:d5:89:5c:91:cb:d6:b4:e1:
72:91:d2:34:92:7a:ed:5a:4f:04:b9:85:4d:1e:c8:
08:4e:ce:ec:17:66:c8:97:d3:2b:d7:8e:56:c7:e9:
38:6e:c8:8f:64:ac:af:8e:b3:e2:db:4c:26:a2:8f:
f0:76:d1:c8:21:00:17:22:28:a5:05:6c:f3:23:ef:
dc:ee:70:d5:28:72:ba:c9:1d:c5:95:0e:15:a5:d2:
30:2f:53:cc:14:75:6d:9f:1d:eb:bb:4d:ad:ca:06:
d5:14:f9:e6:2d:e1:ae:c2:b4:d1:0c:d2:d1:05:27:
75:36:0a:38:fe:d9:9d:f4:3f:6f:d2:5a:73:bf:9a:
0e:f3:47:94:95:51:7a:e3:64:52:17:fa:ad:2a:4a:
d1:33:73:14:72:6f:77:b9:21:c3:69:eb:e6:46:16:
2b:6a:79:3f:e5:5a:05:66:8a:40:6e:61:e9:21:15:
c6:dd:e3:b5:2b:c6:47:da:40:e9:e4:6c:13:72:ab:
c7:fd:ea:9b:c8:ef:14:36:c6:ae:6e:00:50:0f:31:
45:0c:30:a7:30:f4:cf:45:dd:c7:53:9f:8d:d7:a0:
f5:dd:58:ab:7b:b8:7c:25:14:3c:70:73:09:aa:47:
ed:96:bf:5c:b8:56:ff:5a:6a:81:1d:aa:18:10:1e:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A8:7F:F5:2B:68:E7:D6:CA:49:16:E3:87:E1:BD:28:20:67:40:2F
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6c:70:d3:8b:86:1f:41:c2:79:30:0a:5b:0e:c8:19:06:a3:
f8:41:7d:87:08:f9:3f:5a:db:7f:6e:a0:f8:19:85:a3:e9:94:
2e:23:59:21:02:c2:e9:9f:05:bd:37:f0:7f:6c:a1:a5:1d:67:
f0:91:f2:bb:d1:1b:7c:59:93:43:1f:36:3e:22:05:19:d9:03:
10:10:5b:36:ae:1d:0f:c4:21:0c:ca:77:82:f0:0b:4c:24:93:
50:4e:d6:38:89:a8:64:93:a7:8e:bb:ed:64:81:33:cb:53:43:
8e:bd:ae:d1:14:8f:10:79:3b:2b:e2:42:b4:ea:8d:0b:3d:af:
fb:f5:7a:2a:bd:33:c6:9b:ca:bc:b6:c1:67:89:c8:37:01:bf:
78:97:90:bf:dc:9a:09:e8:7e:93:00:4f:55:3a:49:75:84:91:
c4:d6:b6:77:54:bc:a1:c1:dd:63:0c:13:9e:5a:9a:58:a5:d4:
5b:41:4f:bf:0d:25:c2:1c:e1:80:90:ea:26:44:da:44:c9:b3:
c7:e7:48:52:71:f4:d2:7e:3a:eb:16:04:0c:19:86:64:74:b2:
67:de:86:d0:3a:75:21:79:76:ee:b7:15:31:8c:4b:5b:97:5d:
10:40:68:d6:da:20:b0:d7:48:06:dc:79:2e:33:bf:5e:0e:07:
57:05:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:30:55 2025 by rpki-client