Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: 0lWlYR1sLnjfRWYa8O1AxEOR/yPG5OLNOqd+DNq2Z68=
Subject key identifier: 70:FD:BD:9B:AD:BE:8A:AC:7C:FC:93:43:F3:93:27:BB:D7:FB:90:03
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 019A4D3CED7A6E2A8CCF4FB42DF2F1EEE206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 09EE
Signing time: Tue 04 Nov 2025 05:00:29 +0000
Manifest this update: Tue 04 Nov 2025 05:00:29 +0000
Manifest next update: Wed 05 Nov 2025 05:00:29 +0000
Files and hashes: 1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: SAKO+p/FZhFFV7n/dUA0e4P6gs1/RaqrfRMW6T8GgTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ed:7a:6e:2a:8c:cf:4f:b4:2d:f2:f1:ee:e2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Nov 4 05:00:29 2025 GMT
Not After : Nov 5 05:00:29 2025 GMT
Subject: CN=70fdbd9badbe8aac7cfc9343f39327bbd7fb9003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:86:68:78:d6:6c:3f:5c:11:e2:f4:b8:89:
2a:dd:93:1d:4f:aa:f1:45:97:b9:87:5a:53:d2:ad:
b9:77:74:28:44:41:29:cf:d0:39:84:8a:60:a8:10:
cc:ea:15:82:0e:5a:6a:50:fd:bd:5b:7c:ae:9c:f1:
d3:84:0b:93:ef:5c:b3:ec:6c:22:41:95:fc:cd:0d:
90:4f:7b:a0:0a:a0:63:fb:95:e2:3e:66:5c:db:01:
d1:74:a4:12:86:50:16:51:0a:58:b0:01:93:6b:f2:
e4:70:40:0d:f5:80:db:a0:9f:a5:ae:07:5b:07:ce:
17:b3:d9:bd:45:a3:a0:d1:34:d0:9b:91:9f:8e:6f:
b8:94:6d:ad:e0:74:17:5e:d1:d2:18:b7:a4:eb:67:
41:d8:4d:1e:34:91:50:82:6e:74:81:91:37:24:31:
d9:63:17:9b:26:ef:4d:d5:31:81:7c:bc:19:3d:c1:
48:34:4c:21:fa:21:cd:bd:16:80:17:49:3f:d2:bd:
f1:e7:64:66:fd:08:a2:6c:2d:70:7f:da:6f:96:c4:
41:82:13:04:62:c9:dc:a3:41:10:2b:fa:6e:34:0c:
48:8d:79:dd:1c:ab:c6:c5:4e:07:1d:ff:3b:f2:ec:
ab:f9:37:e4:68:1a:50:ac:e0:f9:20:72:83:73:85:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FD:BD:9B:AD:BE:8A:AC:7C:FC:93:43:F3:93:27:BB:D7:FB:90:03
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f2:98:20:3f:2f:a8:8a:f0:59:03:c5:0a:73:1c:41:d8:ec:
d4:98:86:68:b4:cd:3a:ac:17:54:a2:ad:33:8f:e0:35:26:6a:
a6:60:f8:76:8b:61:c9:e4:cd:49:b1:66:9d:2f:77:71:db:f5:
11:82:11:61:34:2c:a4:df:00:2f:6c:27:7f:14:ea:4c:0a:54:
7b:ca:58:01:3b:1b:47:b1:47:c9:40:51:80:ed:b5:55:ed:d2:
7b:d6:e7:c7:99:80:50:33:46:ab:53:82:a0:e0:50:e4:f2:e4:
37:ca:aa:a0:9c:61:5d:76:a0:dc:2e:b4:13:92:a3:e9:7c:cc:
69:7a:ca:c1:05:34:c4:01:ca:63:c5:95:17:a1:42:ec:93:1f:
f1:99:53:e7:4a:8f:1d:80:4c:cf:55:3a:c4:67:3d:86:2e:c3:
0e:2b:9b:92:7f:e0:df:55:a7:94:6e:77:c1:9f:e8:51:e7:d2:
9f:68:ad:58:c8:24:a0:73:69:b6:45:1f:93:6f:e5:62:af:c1:
15:21:a7:e2:d7:a5:de:c0:e6:79:fe:74:cd:19:97:65:a8:ec:
2d:76:32:d2:eb:71:08:24:f4:91:93:04:cc:1a:75:06:58:38:
5a:94:8a:e6:64:d1:9b:3b:5f:b7:1b:f3:bd:23:7b:7f:23:e5:
1a:14:70:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:13 2025 by rpki-client