Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: NWwpoGQeSii4/PEd6FUHhKEIURK9L3RwaCMnpLH7uKk=
Subject key identifier: 70:22:27:5D:F1:8D:72:35:F2:13:B0:B2:AE:FC:1D:45:8E:D2:F0:A8
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 019A4DE1C9B47EE88E4AA19537A9BABC240B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 1073
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=)
2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=)
3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: F4R8wC/lW4Lp571fUa7J1wFTnfIaz7UTanTRfSNLmck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c9:b4:7e:e8:8e:4a:a1:95:37:a9:ba:bc:24:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=7022275df18d7235f213b0b2aefc1d458ed2f0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:d5:a3:b4:0d:77:e0:5c:ab:5f:0d:9c:62:
aa:ff:92:4c:35:b1:ef:18:d7:38:91:ce:f3:7f:23:
02:7b:80:cc:7b:2c:f0:bc:74:50:95:2f:20:d4:7d:
d1:dd:6b:fa:da:4d:5a:b6:5d:6d:ab:6c:f7:21:8b:
5b:b6:f6:d1:15:0c:12:fb:ac:e0:9d:d2:61:38:32:
ca:69:6a:bb:9d:4d:af:cf:81:5a:37:51:c5:df:74:
37:89:34:d2:d1:8f:80:ea:d5:16:67:db:d3:96:d0:
63:61:df:8b:ec:23:41:a2:6c:32:54:1e:62:40:e4:
f9:ac:f0:6f:c1:7c:79:04:87:ec:4c:b4:a4:33:5d:
24:bb:7d:f8:4c:83:6d:b2:ec:70:b6:1c:1d:c9:ac:
c4:71:1d:7a:2d:a4:46:82:2f:65:ec:a0:36:16:88:
77:e2:3d:be:b0:67:17:6a:b4:58:c4:d1:11:ea:dc:
ad:41:e5:bd:e5:fe:6c:c0:41:2a:30:0e:cc:e3:f4:
2f:55:d4:d7:88:3f:59:de:1e:43:af:39:cd:34:f4:
82:90:ef:48:c7:eb:49:66:14:e5:51:ee:6b:74:1e:
9d:d1:da:65:b8:3e:80:8c:b8:ec:7a:96:2e:e9:22:
a2:f7:53:15:85:ee:89:b5:8c:8d:b2:49:d5:8b:69:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:22:27:5D:F1:8D:72:35:F2:13:B0:B2:AE:FC:1D:45:8E:D2:F0:A8
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ea:b1:40:e7:59:17:c3:93:9d:9d:10:77:0a:46:18:fc:11:
25:05:35:c7:ca:a0:2b:f3:91:38:af:fb:32:a9:12:94:28:76:
14:42:1f:0a:ac:60:d6:a4:17:79:3a:8a:4e:7e:39:23:ee:a1:
c2:51:fd:4b:b8:ea:9c:5b:fd:dc:21:71:5c:5e:2b:7e:ac:f8:
48:c3:2e:24:6f:0a:21:87:e9:f9:62:4b:98:9a:2f:7b:a4:ad:
fc:b7:47:90:50:46:12:2a:49:3d:c7:10:5a:4f:6b:66:85:d6:
26:04:df:5d:7c:43:66:70:38:c3:26:c1:47:2f:e1:61:ef:b3:
b6:ec:51:8c:7a:aa:09:e1:d9:f2:02:f9:04:b7:d7:89:54:04:
b9:13:74:61:92:2f:ec:4a:a2:59:09:a0:4b:52:2b:da:13:8d:
51:78:0a:8d:f9:1b:2a:84:2d:10:69:0d:6d:a3:c7:b0:a9:79:
00:b0:d1:3b:bf:63:c5:ff:ca:ac:7a:14:39:30:20:c6:c6:f2:
f0:34:ef:09:d7:b2:cc:3c:20:b8:26:be:e6:01:a4:e0:1d:14:
7e:5a:d9:5c:b0:99:5d:89:60:f3:57:81:c0:fe:5d:ab:13:4f:
de:8f:f1:86:a1:eb:ab:8b:df:11:ac:11:85:4f:08:1f:67:45:
c3:af:3b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:11 2025 by rpki-client