Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: PwVZmLiP8WusZ4/UEwpIML8+75BIpf1xKzNrwWFFbj8=
Subject key identifier: 26:B3:71:12:79:3E:59:5C:BE:4C:17:41:DA:5D:EC:24:BF:98:DE:B1
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 019A4DE1B8DB440D2A5B39790B9091BEC75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0A30
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: mLeaSaXzBNKGecbSgFBHCHoy3/zPfjCv5LXGVOVY1Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b8:db:44:0d:2a:5b:39:79:0b:90:91:be:c7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=26b37112793e595cbe4c1741da5dec24bf98deb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:5f:db:a7:2b:e5:d3:91:59:64:2e:59:9e:
bd:c8:e7:8c:98:49:e9:7f:9f:f8:e0:5d:cc:49:5f:
17:58:cf:2f:2d:b8:a2:4f:25:aa:e8:e6:03:d1:44:
0c:48:f0:94:10:e6:2b:8e:30:3b:1e:d8:6a:f3:50:
6c:e4:bd:be:82:2f:f0:b2:4b:1c:7f:a3:5b:53:bb:
21:72:44:d8:9a:f1:9a:25:0f:cc:33:e5:71:ce:9a:
9e:74:2a:71:dd:4f:7d:89:4b:7b:53:7c:9a:87:e1:
93:4a:ac:86:c2:a7:db:0d:65:01:ab:2e:f5:fd:69:
ba:42:a6:db:bb:38:95:cc:d9:33:07:36:54:d2:17:
be:dd:6e:a6:a2:f1:5b:a9:e3:62:29:8c:17:2e:54:
19:99:9c:6e:d4:0e:2e:06:25:f6:85:0c:20:8d:55:
22:f7:58:79:d2:88:20:93:63:56:7f:d2:27:0d:6c:
9c:07:9e:ee:7e:4a:73:a5:65:00:83:97:45:fe:d5:
5b:ea:9d:23:5d:ee:15:b2:8d:1b:38:76:a4:4c:a2:
d8:75:b8:06:c9:ff:4d:d2:e3:29:65:37:99:1f:6e:
ce:a3:8b:99:65:3f:c9:53:c4:ad:b7:8e:e8:53:7a:
a9:ab:ee:f7:fd:e8:d1:15:8f:a6:3a:31:7d:8f:ad:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B3:71:12:79:3E:59:5C:BE:4C:17:41:DA:5D:EC:24:BF:98:DE:B1
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:69:45:4e:9f:00:90:5e:40:a5:7e:29:8d:bc:0f:4e:8c:e8:
b6:84:bd:17:13:c3:30:08:14:35:36:a2:75:60:2f:ae:5f:42:
06:14:71:af:bd:a7:8c:7f:3b:8c:5d:eb:ff:14:c8:b4:84:f1:
56:93:f5:a8:86:a2:c2:cf:e4:88:5f:8e:b2:2c:40:6e:f0:f5:
f9:35:62:4e:4e:c2:54:c6:81:3b:88:68:aa:37:85:2d:eb:28:
9f:4f:86:8c:99:2d:62:af:79:37:45:3d:0e:0b:fa:ac:02:43:
22:81:d4:e7:de:a0:0b:15:34:8b:e3:80:a9:86:eb:bd:ab:16:
c5:b0:5c:4c:04:78:db:8e:26:60:bf:21:84:03:71:72:5c:55:
33:4e:3c:62:f6:4f:74:e2:a2:bd:e6:a9:e2:80:58:7d:ac:63:
39:2a:5e:d1:a7:33:ee:87:5a:a9:56:48:fd:c6:75:a6:96:c6:
28:1c:64:48:08:77:a1:e8:bb:16:c3:81:ff:56:f5:19:5a:28:
ea:3d:2e:b6:f5:f9:f6:d9:23:81:7d:2b:58:c7:73:bd:86:d0:
e5:b9:20:19:02:9b:f5:47:bf:46:1a:18:d8:ea:2b:e4:65:5c:
9b:e6:13:05:77:3b:d8:c8:a9:4c:ee:ef:51:ad:ab:73:ce:ea:
8a:f6:52:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:43 2025 by rpki-client