Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: gPYYYyWhPPIR8z2If318ElqCrnOoNaIQum7j1T/0yKQ=
Subject key identifier: F3:0F:1E:AA:96:D3:49:96:93:EC:79:23:52:E6:26:B4:18:18:F1:49
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 019A51F5CF70D8D9A9B69059C7464062E358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 0FE7
Signing time: Wed 05 Nov 2025 03:00:55 +0000
Manifest this update: Wed 05 Nov 2025 03:00:55 +0000
Manifest next update: Thu 06 Nov 2025 03:00:55 +0000
Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: go5rQwGVE/CHLSBwVBTzJM48zLA7tSVyE0Tlu6G7G6Q=)
2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:cf:70:d8:d9:a9:b6:90:59:c7:46:40:62:e3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Nov 5 03:00:55 2025 GMT
Not After : Nov 6 03:00:55 2025 GMT
Subject: CN=f30f1eaa96d3499693ec792352e626b41818f149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:67:e2:8f:19:27:83:87:e6:64:72:90:26:02:
1c:3a:ee:1d:1f:df:a7:5b:77:1b:25:96:c6:83:01:
e0:6b:7b:b5:d5:09:68:ff:bc:83:92:88:f1:d3:3a:
7f:2a:6f:e7:fb:9f:f8:be:80:66:bf:50:67:63:32:
6d:e5:7c:9e:56:4d:64:a7:58:4c:ef:ac:8b:f2:67:
74:06:9b:46:7b:0b:c1:5b:f6:c9:15:28:3e:1c:c9:
7a:d2:cb:77:79:45:39:fb:31:93:fb:2a:dc:75:ea:
bb:6e:fc:14:5b:99:31:d9:11:ed:7a:86:27:fd:a6:
2f:8a:e2:98:ed:98:ac:ac:d5:b8:cf:e3:d2:a2:5d:
f3:84:2b:ca:58:a2:3e:73:75:f7:02:6c:1c:da:40:
dd:b0:83:ff:8f:9d:de:d6:c7:1b:eb:3e:04:cc:6e:
92:60:16:2b:af:28:de:63:90:5e:d0:ea:3d:47:6a:
71:39:57:7f:8e:1b:53:c7:af:87:b4:0c:7d:93:e0:
a3:82:9b:5a:85:25:15:78:2f:7e:7f:e1:95:e4:46:
03:a3:50:32:b4:0b:04:b6:d1:2a:cb:ff:cb:db:cd:
a7:4a:de:24:67:9e:6d:db:95:03:94:c2:ea:8a:b7:
d9:1f:04:d4:83:60:b9:4b:88:64:df:93:9f:a4:44:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0F:1E:AA:96:D3:49:96:93:EC:79:23:52:E6:26:B4:18:18:F1:49
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4f:b4:f8:48:86:3b:51:16:bb:d5:2a:a9:26:97:2a:25:de:
ff:1b:16:4d:32:99:ae:c3:d3:fb:1f:0f:70:f3:4c:00:67:78:
b4:8d:e2:6c:ba:bd:4d:ee:b6:89:61:df:18:8c:e4:84:8b:3b:
61:7b:29:85:45:2f:58:f4:f7:60:4c:2b:ea:ea:61:ee:bc:44:
1e:42:19:62:09:2a:d7:c6:a8:d3:25:c1:87:b8:2e:c6:cf:18:
e4:17:98:b5:14:f1:df:4e:2b:cc:95:74:6b:70:c9:4e:87:eb:
19:b4:ef:e8:97:ad:e9:c4:95:e9:11:22:5c:5a:c7:c0:b0:b9:
4f:ca:d8:1d:4f:66:cc:7c:10:f5:01:ec:96:1e:b1:a8:52:e2:
74:01:31:3b:32:af:02:44:52:bc:eb:53:c5:d2:0b:0e:ba:d3:
ed:75:c4:94:9f:24:f5:b1:a9:9e:d6:c5:a6:23:71:1c:e8:94:
51:5b:e0:61:67:c4:13:7d:73:75:37:28:57:6d:a9:fb:f7:4e:
cb:9b:6a:61:a9:23:ed:fb:3d:6d:75:18:46:61:0e:7a:87:0b:
08:74:80:cc:77:1e:5f:c4:28:93:ec:ab:43:25:80:89:45:87:
1d:3f:7f:ae:c5:5e:66:8a:8d:40:89:0a:a0:b3:25:7f:12:84:
16:dc:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:54 2025 by rpki-client