Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: 933AB5mG1GjIRzVP/qKaCqYZV4qN7GfNkqhNmiK1oBQ=
Subject key identifier: 64:15:B0:2A:A2:17:4B:4D:2B:84:6C:04:D4:AD:0F:FF:59:A2:56:D7
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 019A4D065502B8D77C3D57CFE2E14AD3792F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 108A
Signing time: Tue 04 Nov 2025 04:00:51 +0000
Manifest this update: Tue 04 Nov 2025 04:00:51 +0000
Manifest next update: Wed 05 Nov 2025 04:00:51 +0000
Files and hashes: 1: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (hash: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: 8OeAnlA9zATEjlYjXgAyXitz+J175TrgQ0N+PplvTEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:55:02:b8:d7:7c:3d:57:cf:e2:e1:4a:d3:79:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Nov 4 04:00:51 2025 GMT
Not After : Nov 5 04:00:51 2025 GMT
Subject: CN=6415b02aa2174b4d2b846c04d4ad0fff59a256d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:13:52:83:00:b2:37:a2:8e:42:1b:a8:02:
7b:6a:e9:48:2f:2e:2c:5b:a5:62:bd:89:47:84:97:
6e:ff:2f:81:d2:73:a5:f0:87:4d:a9:f3:68:2f:2b:
bb:79:03:17:51:87:79:61:4a:18:28:0e:c4:4e:e8:
02:08:e4:a6:cf:d0:e3:7f:86:b6:59:bb:c1:43:3b:
4a:73:cc:4a:3d:63:b0:bb:1e:f2:d0:64:ee:0d:6c:
dc:f0:ca:f9:28:cf:f2:5c:ff:77:c5:5b:e9:43:c1:
3e:bd:96:c9:d9:8c:93:23:ba:e2:33:89:c0:bc:82:
a5:0a:77:69:de:88:f8:2e:82:64:cd:dc:fd:24:62:
bc:28:28:75:fb:06:36:d5:8d:e4:7b:e8:3c:03:8a:
af:38:32:47:8c:9d:41:cf:28:93:51:70:8c:c9:7c:
18:1a:cf:58:5d:e4:e7:6e:ac:3c:1a:c6:21:54:60:
6c:63:c4:3e:a4:df:b9:13:eb:40:42:7d:1a:a8:b8:
e0:74:b6:f5:fe:e9:5e:95:3b:d2:03:b4:10:1d:1c:
51:3a:90:e0:f5:ec:47:c2:b6:37:9f:3d:f3:15:9a:
e4:e7:31:3a:a2:a0:b5:61:94:5c:a0:eb:7b:74:e1:
94:5f:a5:e2:68:8a:a3:2b:5f:11:6a:92:8c:f6:e7:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:15:B0:2A:A2:17:4B:4D:2B:84:6C:04:D4:AD:0F:FF:59:A2:56:D7
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:40:c7:1b:96:8d:29:d5:ee:a3:51:40:c1:fe:04:ed:fb:0d:
90:b0:85:aa:cc:e2:9e:03:d2:1b:5c:f0:3c:6c:d0:98:98:47:
e2:61:8b:16:b4:0c:95:67:1f:5e:d7:8c:cd:3f:dc:2a:ca:d7:
db:f5:a8:ec:52:e2:4a:94:d7:da:55:c4:d5:25:07:98:2a:96:
57:ba:bf:05:f1:f5:dd:39:92:08:e5:06:d4:3e:10:14:78:d9:
00:47:fe:f3:13:ee:c9:08:6e:2b:ad:6f:14:b8:df:d7:fd:4e:
ba:60:d2:d5:e0:2e:a8:12:a7:e5:de:83:87:9b:81:18:1c:bb:
45:fd:8d:d7:07:11:40:f5:de:5d:c0:5f:a9:99:75:e4:a9:ea:
12:b3:65:29:dd:bb:08:7b:8d:f8:cc:78:81:e7:60:c7:b1:24:
3c:c5:03:65:96:4c:81:90:b5:be:64:2b:28:99:2a:ec:c1:c9:
9f:ff:ed:c9:33:3f:d5:1f:11:01:2c:43:a2:6a:91:62:42:90:
44:b2:0f:05:0c:bc:53:21:80:39:42:99:ba:fb:95:9f:ad:56:
00:93:89:5c:e5:05:38:1b:1f:77:fb:39:da:b5:a8:9f:0d:b4:
dd:ed:3b:44:60:1d:e3:50:df:30:21:82:aa:7c:b2:03:98:3f:
94:ba:3c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:43 2025 by rpki-client