Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: 7OedkWP94EH+rRmn0hRIr6kvM5IeqnV052yJa+fqbrM=
Subject key identifier: 5D:48:DB:DC:DB:47:B6:A9:17:78:43:0D:3E:BE:92:CA:79:47:DA:7A
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 019A4E18D518840AD379A38FA4A2490E00D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 0425
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: Ag03f5sArQVX9141+T/zH/MMFe3g3ONWW+ogUmWDR58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d5:18:84:0a:d3:79:a3:8f:a4:a2:49:0e:00:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=5d48dbdcdb47b6a91778430d3ebe92ca7947da7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:fe:3d:51:d8:e4:b0:ab:a3:73:9d:7e:ac:
32:04:97:75:13:d3:7f:2c:39:92:a4:b1:0f:51:84:
51:2d:f8:f3:b1:da:3c:b1:b5:4e:57:4e:9e:a4:24:
2c:4c:12:c8:6e:65:ca:db:63:1f:18:5b:eb:24:f1:
31:e0:77:84:8f:2f:12:12:ad:f6:a6:8c:29:dd:93:
3f:cd:bd:ad:cf:aa:3f:f6:16:58:82:27:9d:a0:1d:
50:17:14:a8:a3:82:57:bc:07:bd:4a:ca:a1:0d:e7:
ae:5d:ad:44:c5:8c:6d:8e:90:7f:aa:b7:52:8e:6b:
2c:5d:22:99:a7:9a:50:b6:d4:51:b6:3a:5e:d5:30:
d9:fb:7e:84:21:99:5e:1e:73:77:db:33:95:99:ce:
54:cf:64:39:91:a9:26:24:3b:1e:04:8a:8c:b4:30:
e3:50:5c:7d:c1:de:8f:76:36:0e:42:52:ec:e1:d7:
fc:1d:72:12:0e:a3:bb:3b:0e:ba:ec:8b:97:93:31:
04:91:46:9f:79:db:f7:58:ea:9b:75:8e:4b:62:ba:
e3:3d:8f:01:83:39:01:4e:67:5c:85:e8:51:4b:76:
87:99:72:1a:21:80:43:c0:98:86:53:b9:c7:38:3c:
09:e2:1f:f5:ba:28:c1:23:22:0a:8a:5c:aa:ed:a4:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:48:DB:DC:DB:47:B6:A9:17:78:43:0D:3E:BE:92:CA:79:47:DA:7A
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:69:34:82:3c:a4:07:22:29:41:68:91:fa:a5:fe:26:78:a9:
d2:ee:a5:79:47:44:74:53:7e:a7:4f:a6:a1:40:21:01:64:21:
bb:73:d0:bb:83:b4:41:dd:62:da:d8:bc:59:75:79:6f:3a:af:
c3:8e:c4:46:0e:6c:92:90:14:ee:17:c1:e0:dd:31:c4:ee:be:
f7:b5:51:09:48:bf:01:8b:50:e6:4d:3c:d6:4b:58:2a:0d:3e:
7b:45:e2:d4:86:5a:d7:56:75:02:ac:04:6a:e6:88:81:4d:c4:
40:2b:f0:25:7e:0c:e5:38:6e:5d:ad:44:89:8f:6b:ac:bc:9f:
21:68:a3:cd:6e:07:15:8d:43:9c:3c:aa:f1:75:15:84:73:0a:
40:e1:cb:f4:0d:ba:70:94:d4:2c:f5:62:1d:5a:35:22:ed:b4:
19:fe:43:c6:6e:c6:1b:be:ba:ae:51:b0:97:d1:f0:74:87:dd:
4f:7a:0c:e5:f1:9c:f3:8c:cd:23:32:db:27:50:d0:1f:bf:dc:
14:2d:6a:24:10:18:fc:d7:84:67:87:79:d3:1d:2a:8e:c5:d1:
e5:0a:b2:30:bc:5a:56:12:a2:04:f2:1e:ca:6e:0c:0a:31:b1:
16:bf:36:2e:82:bd:d0:0a:f5:eb:fe:d5:cc:98:eb:67:96:81:
67:fe:54:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:30 2025 by rpki-client