Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File: zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier: A4Cz7o75UEmvdlcoA7TUkFhlexJNjkRfX0nYgA2y0rQ=
Subject key identifier: 1E:4B:9C:CF:78:D8:A0:3D:75:99:E8:8E:7C:77:13:FA:89:71:F2:2C
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial: 019A5187E008FBDB75534A80BB38D460DA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number: 02B9
Signing time: Wed 05 Nov 2025 01:00:50 +0000
Manifest this update: Wed 05 Nov 2025 01:00:50 +0000
Manifest next update: Thu 06 Nov 2025 01:00:50 +0000
Files and hashes: 1: O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa (hash: ARirtfJZlvrV6Gh7ZW/gDyQsG60JpK7a/eIqEIlcaSo=)
2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: rSUBzaCEOP+NpdeRecU8k1RMECvfRBBkk52ZkQWchVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e0:08:fb:db:75:53:4a:80:bb:38:d4:60:da:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Validity
Not Before: Nov 5 01:00:50 2025 GMT
Not After : Nov 6 01:00:50 2025 GMT
Subject: CN=1e4b9ccf78d8a03d7599e88e7c7713fa8971f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:cb:29:14:66:e7:5c:05:b8:c9:2c:ad:b0:
6f:9c:2f:41:9c:bd:dd:89:ac:00:8b:29:e5:27:5b:
6e:84:f4:c8:74:00:e2:53:db:cf:20:0d:b6:5b:e8:
81:b6:e1:a1:2d:e5:2b:1b:a5:31:1e:c7:cd:b6:a7:
4a:5a:d8:58:c4:c5:0b:31:5a:20:b2:e9:b3:ad:10:
c9:df:1a:a3:7e:fc:9f:f0:01:f2:45:c8:03:55:6c:
05:e5:5d:eb:55:85:8b:d0:47:62:9f:57:28:c6:30:
97:7f:33:84:20:7f:02:f8:46:ab:27:b0:28:f5:92:
c3:59:97:d2:3d:de:b6:71:cb:f3:f4:33:74:c7:3e:
82:ec:d8:51:1a:a7:b5:b3:95:1f:21:2d:87:a4:e4:
4c:34:74:b5:aa:a9:41:4b:04:1d:73:99:37:91:14:
43:8d:92:56:11:96:7a:16:38:f8:24:03:46:05:e8:
00:c8:db:7f:46:9f:72:83:fc:6b:d1:31:84:6b:09:
47:b6:80:56:54:6e:2c:9f:7b:5a:35:f5:84:12:11:
e2:09:7e:e0:50:d7:09:ed:51:dc:30:86:cd:42:bb:
ef:99:77:c1:2d:ec:0f:03:ad:23:d1:2e:ac:5b:84:
3b:fe:bf:ec:fe:39:18:6f:2b:c9:2c:e0:de:a0:d4:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4B:9C:CF:78:D8:A0:3D:75:99:E8:8E:7C:77:13:FA:89:71:F2:2C
X509v3 Authority Key Identifier:
keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:76:42:76:b9:ed:4b:0d:4c:d9:bb:f0:c3:47:33:6c:63:61:
eb:b3:9d:37:13:01:b3:4c:72:27:6b:39:bf:0e:a9:ea:16:51:
35:1d:e9:9d:10:eb:cf:f1:ca:35:cb:eb:df:6d:c9:f5:b0:38:
ba:4b:1f:39:b5:eb:94:c2:88:3c:eb:18:1d:20:fb:da:d1:23:
e2:df:f9:02:f5:81:c8:9f:86:46:a4:90:06:d3:22:61:1d:78:
7e:69:7d:75:2b:17:9c:fe:6f:76:21:ce:81:bb:0e:20:d3:cc:
aa:6d:16:97:ae:a3:d4:52:d4:19:27:95:2a:a7:6b:64:91:b8:
01:61:81:b3:fd:28:9b:8a:08:1b:b7:13:2d:07:f5:39:f0:d2:
1d:18:c9:df:b6:56:49:06:61:b3:78:43:9b:b4:d3:b1:76:89:
85:1a:93:e4:32:fa:db:f7:4c:b5:de:bf:fb:10:02:05:11:5e:
11:9e:4b:1b:e7:22:eb:53:71:59:03:e4:6c:28:98:cd:6a:00:
11:ba:3d:75:1b:6b:db:86:89:8d:40:72:00:02:96:a5:c3:fa:
d1:02:ea:e8:1d:9a:68:ec:7b:54:42:dd:14:d3:cc:4a:61:01:
1d:da:68:b4:77:78:33:a2:4f:77:49:1a:d6:92:cc:d2:28:e2:
7e:3d:78:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:51:52 2025 by rpki-client