Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: cwYUPm7i4citaP997Y8j/yusKxUzbpviSQIMnitX9Rw=
Subject key identifier: 32:4B:FE:60:28:C3:F1:F4:EA:A1:1D:B0:AA:73:9C:02:EC:90:6B:BC
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019A51F5AC81ED89B6D681703EA42614CE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 026E
Signing time: Wed 05 Nov 2025 03:00:46 +0000
Manifest this update: Wed 05 Nov 2025 03:00:46 +0000
Manifest next update: Thu 06 Nov 2025 03:00:46 +0000
Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
2: 9s50Q9-1ULqilThpHU79jiFEiIA.roa (hash: 5aJJUqP+R3fj8M4AoRNns1YealoNvLa9oSKi6PcBG8E=)
3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: zRzN2S042dMM8M+td5zcM9f0eLS/DHMiy7uycDDOAX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:ac:81:ed:89:b6:d6:81:70:3e:a4:26:14:ce:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Nov 5 03:00:46 2025 GMT
Not After : Nov 6 03:00:46 2025 GMT
Subject: CN=324bfe6028c3f1f4eaa11db0aa739c02ec906bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:25:e3:df:54:9f:7b:f5:4a:ff:87:27:a0:
b2:84:ca:01:62:18:aa:00:00:95:04:3a:4a:fa:9f:
a9:c8:16:d0:d1:33:5c:c1:0e:b5:c5:ba:cc:42:58:
7d:6e:b2:a1:64:3e:e8:8f:1c:15:34:a3:74:73:ac:
f3:25:bd:5d:ca:e7:29:36:a5:81:5b:dd:0b:c9:60:
44:86:6d:4d:e0:18:9a:53:40:67:b0:3c:c7:88:25:
9b:76:45:12:ca:3e:45:70:2d:b9:ac:41:e0:59:8e:
f7:88:37:68:3a:b9:8e:9a:16:85:96:5f:79:e6:fd:
c0:cc:41:e4:bb:16:4a:1b:18:39:00:6e:b6:4e:90:
69:47:ac:64:90:d9:90:13:b8:a2:15:c0:1a:d8:b7:
9a:60:00:7e:37:f3:50:da:cc:92:bd:48:77:5c:9c:
09:c7:99:c4:4b:8e:31:e1:c8:cd:12:c0:3e:15:c2:
07:2e:ad:73:7b:26:24:17:b2:70:a5:25:a0:c6:67:
69:ee:b4:00:b1:ef:42:1a:95:1d:0e:5a:69:a3:3d:
ce:a3:0e:d1:54:e7:0b:87:f9:75:d5:2f:f7:4f:92:
99:90:a5:d7:ad:17:c7:49:dd:6d:0a:67:81:bc:7a:
b7:ce:62:6c:0e:0d:82:cf:b6:11:31:d8:e3:2c:b9:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4B:FE:60:28:C3:F1:F4:EA:A1:1D:B0:AA:73:9C:02:EC:90:6B:BC
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8e:ba:18:b7:55:b7:c1:ab:39:0e:c9:62:0d:53:2d:04:94:
33:b9:35:07:05:e1:4f:b4:6f:53:f3:19:f8:53:dc:20:3a:e0:
98:2c:4e:7a:40:1c:ff:30:c2:dc:6b:19:42:ed:c5:13:9b:4c:
2c:88:30:58:d6:06:24:68:c2:d5:a6:2c:f4:ac:99:49:69:c2:
44:02:a5:71:04:74:28:11:ed:be:40:41:e0:02:33:c6:2e:c8:
c5:b0:35:e7:69:34:a0:0f:f6:b9:66:fc:ea:98:bd:ae:f7:d1:
bb:2d:9d:f9:2c:86:ab:70:e4:53:db:ac:6a:f4:83:f2:04:e7:
8e:04:de:10:0b:0f:09:6a:a6:71:99:4f:1b:f3:6f:9e:e2:a8:
c4:e2:52:e4:60:6c:cf:b1:bd:bb:49:8f:87:7f:4f:8b:61:97:
d1:88:c1:bb:1d:a9:d3:16:87:a9:29:3b:5d:b0:ad:58:c2:93:
e4:90:ef:73:25:c5:08:cd:ce:9b:b9:c8:2b:e8:50:04:fa:41:
65:12:38:81:81:b4:a3:84:17:26:39:48:cb:d9:e5:da:96:77:
f1:1c:d2:51:8b:59:ae:50:3b:c1:47:a1:6e:98:09:4d:b7:99:
f0:5f:49:59:f9:14:11:8c:58:75:9a:2c:a9:6b:de:c8:61:9b:
3c:d3:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:55 2025 by rpki-client