Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: clg0kjCMrkgqt/MvSUx0DP6HnRE3iPZbbMIxisZmqdU=
Subject key identifier: 40:3C:61:A1:D1:6E:4F:BF:39:A9:6F:15:D8:33:54:EA:C1:53:FE:6C
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019A4F62C1672EB9373EDD6C100FA3AB919E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 042E
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: iKdhclCRVDJOB1B3hnbzH7EEhi9xkuCbSg8eDAq298Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c1:67:2e:b9:37:3e:dd:6c:10:0f:a3:ab:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=403c61a1d16e4fbf39a96f15d83354eac153fe6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:65:d9:23:76:18:14:39:f3:52:a6:ad:02:
84:49:5c:62:39:3c:11:ca:98:24:cd:69:95:ea:27:
4c:83:01:68:fd:b7:b5:27:c2:f4:14:bb:36:bb:5e:
6d:85:b8:8b:d1:3a:ae:0b:51:23:b6:e7:03:73:f1:
f5:a2:60:6c:8d:e5:8a:ac:bf:91:9f:ee:cc:2a:7f:
ab:30:55:2d:20:9c:9a:0c:d3:a2:28:1b:6c:d6:1d:
e7:df:be:6b:da:20:19:d7:b2:cf:ff:62:03:2f:79:
ff:6b:02:1a:82:ca:9b:d5:33:af:b6:b5:70:ef:0e:
2b:1e:4b:06:8e:e4:51:ec:84:cb:30:6f:31:6b:e0:
a0:28:a8:d8:df:bd:01:b6:99:a8:0a:51:27:58:aa:
fe:3b:c6:74:92:71:65:24:7e:ea:92:f5:cb:8e:d7:
f5:20:a6:a1:40:89:84:b6:0c:7f:d2:72:a9:cd:37:
16:ec:b2:dc:b7:19:96:2b:34:c0:4e:26:5b:ba:2f:
2b:12:c4:3c:5a:cc:28:93:51:fa:c0:bb:ab:3a:db:
1b:28:b1:e0:3b:3d:21:a7:93:bd:64:40:fb:66:87:
6a:26:02:d6:99:5f:ab:06:34:c3:cb:8e:fa:bd:e0:
51:cc:3a:64:ff:7b:6e:63:20:ac:97:da:19:ec:b0:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3C:61:A1:D1:6E:4F:BF:39:A9:6F:15:D8:33:54:EA:C1:53:FE:6C
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ac:8e:66:94:a1:ef:89:42:08:3e:a7:18:88:c1:70:d7:53:
56:f0:64:14:33:c6:2a:8f:15:08:dc:3f:cc:c3:d2:9f:29:f6:
c3:7a:42:fd:18:b5:06:9c:d8:5d:08:fe:bd:cd:86:e8:57:b2:
97:4d:17:b4:33:09:74:1c:74:fe:91:af:31:e5:89:b2:2f:7e:
5c:22:c7:83:6a:fb:f1:49:a1:40:df:eb:f3:88:f9:de:58:0b:
b0:70:ad:11:d4:60:b8:ce:9a:67:c7:c4:6b:a0:9f:b2:df:aa:
ad:44:f3:99:b9:8d:d2:5d:62:e1:50:a7:26:aa:d6:b4:de:fb:
73:4c:77:54:dc:7c:13:e7:2a:c9:3f:a8:04:f3:e2:bc:db:02:
fc:3d:8a:f1:9b:db:d5:ea:db:3e:70:a2:1e:11:f4:6e:5b:56:
a6:92:81:37:84:d6:b2:85:26:d1:cc:ac:1e:8e:3b:61:dd:77:
01:65:a9:1b:f7:92:b3:a3:bb:91:a4:7c:64:c1:21:9a:09:15:
1a:95:2d:b1:be:c9:ef:e6:c2:25:d0:a5:18:87:16:1e:7d:a9:
46:f5:58:3a:02:c6:7a:9f:18:68:0f:ba:cb:25:89:f9:d4:cf:
60:28:f2:aa:b5:8e:f5:df:19:76:1c:50:37:3d:5b:3e:fc:09:
09:df:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:47:24 2025 by rpki-client