Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json)
Hash identifier: 0RU4Kw1+asf7S9FQRL20jphj5eRMomhDjqtnzbHNBpA=
Subject key identifier: 40:A1:08:14:14:83:6A:88:F5:C0:0B:E0:35:84:D9:62:05:1E:B6:6D
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 019A4EF5E582DA1D2C009C54B0F9CA2A4BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
Manifest number: 06F5
Signing time: Tue 04 Nov 2025 13:02:09 +0000
Manifest this update: Tue 04 Nov 2025 13:02:09 +0000
Manifest next update: Wed 05 Nov 2025 13:02:09 +0000
Files and hashes: 1: EsGGI1P8V7qCIrWJmfPudsu7pMI.roa (hash: RgD/iTo2o3seqIZhRljS2dvXiiazUq7PXVkPQR+sYAc=)
2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: Gn2JIBjeZdO/hj9BKLmL9kxE0nmdj+xFlChSx/0mF1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e5:82:da:1d:2c:00:9c:54:b0:f9:ca:2a:4b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Nov 4 13:02:09 2025 GMT
Not After : Nov 5 13:02:09 2025 GMT
Subject: CN=40a1081414836a88f5c00be03584d962051eb66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:e6:e6:78:2f:b6:69:3c:b9:25:90:d2:e8:
7d:49:96:a1:64:1d:23:46:1e:6a:67:f7:f6:43:32:
8d:02:80:6c:89:32:98:34:bf:95:0c:b2:df:ca:7e:
74:3b:bf:e8:37:0f:4d:20:88:a4:d4:a5:d1:81:74:
fb:f6:44:86:07:2a:85:cb:e6:0e:39:c5:c1:06:cf:
6e:97:fc:d0:98:9f:4a:c6:e9:1b:66:0f:ad:98:47:
7d:24:d2:41:79:64:29:12:b4:99:31:71:a8:be:34:
ab:4e:28:b9:2e:b0:32:f9:93:48:b1:e9:09:37:02:
d6:63:ce:1c:41:51:50:5c:70:c8:5e:4f:d2:cf:a8:
24:74:a6:b8:6b:4d:f3:e2:3c:4f:11:26:a4:41:f9:
de:a7:b4:90:f2:3e:5a:c5:5f:05:a3:f9:bb:4f:41:
a5:e6:f3:ff:ea:07:1c:f5:da:1d:d9:f9:4a:cb:e2:
fa:cb:69:8b:9d:9f:36:25:d7:bb:7f:60:f9:3b:18:
18:80:8f:ce:61:10:83:29:8e:00:b6:51:e4:3c:cf:
91:28:1e:38:b8:eb:67:54:be:5c:83:21:31:3e:33:
4a:47:86:f4:16:bf:67:49:a6:3e:50:f7:0f:e3:1e:
1c:84:38:f3:09:3d:3f:58:2d:20:63:f7:63:be:4e:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A1:08:14:14:83:6A:88:F5:C0:0B:E0:35:84:D9:62:05:1E:B6:6D
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:13:55:3a:69:0b:88:72:36:ff:c0:bd:96:23:89:e7:14:37:
c6:7c:43:8c:ea:b4:d4:18:be:73:a8:86:25:60:fc:bc:b5:03:
da:8e:5a:2e:56:b1:6c:06:fe:9f:c8:0b:fc:35:a3:40:7a:66:
17:00:70:e3:5d:0a:16:5e:db:96:0b:94:81:44:fb:e9:ab:64:
87:10:d7:eb:03:5e:ea:25:22:7b:6e:cb:10:a6:3d:21:f4:75:
35:e0:d7:77:fd:11:eb:a1:8f:b2:96:1d:69:a9:b4:b9:59:32:
da:22:58:20:fc:53:eb:92:62:09:85:2d:1a:74:33:02:0f:ac:
a4:a0:79:5b:28:7d:03:9c:f2:aa:59:75:6e:cb:ec:01:ef:58:
f1:3e:07:4f:09:97:45:a8:1b:75:56:9a:22:08:73:6e:bf:21:
15:67:50:65:6d:6c:b0:ba:71:22:4b:95:eb:70:7d:d5:65:4f:
2e:54:9c:bd:ea:3d:1c:58:00:28:7f:1e:2b:5e:90:b3:b0:10:
6a:91:89:87:c0:15:9e:68:87:7e:87:4e:45:36:51:99:a3:12:
6f:71:87:78:81:9d:3c:57:72:21:eb:23:3a:b1:14:c7:c7:53:
6f:ff:3b:69:b5:5f:08:65:1f:6b:bd:11:44:20:3f:53:b3:f9:
f9:21:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:41 2025 by rpki-client