Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: t2by4B54r7bCWu7sfaaHEuqoxUT8MV6Nc8o8TFn6uzs=
Subject key identifier: C9:35:82:6C:B8:B1:C9:CD:02:A3:E1:08:A8:FD:D0:6B:CE:A9:99:0B
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 019A51F5DBD2AF75CF02A9913E39387841AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 0497
Signing time: Wed 05 Nov 2025 03:00:58 +0000
Manifest this update: Wed 05 Nov 2025 03:00:58 +0000
Manifest next update: Thu 06 Nov 2025 03:00:58 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: 36KfODx84uLBLkq2r/c7+wlNTnhuyxGH3gy9ogqYBOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:db:d2:af:75:cf:02:a9:91:3e:39:38:78:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Nov 5 03:00:58 2025 GMT
Not After : Nov 6 03:00:58 2025 GMT
Subject: CN=c935826cb8b1c9cd02a3e108a8fdd06bcea9990b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:ed:03:ea:02:46:25:27:44:bc:24:5f:22:
2f:a1:06:29:59:29:50:2d:91:ee:62:03:2e:de:0b:
72:6c:82:40:9d:bf:ca:bd:37:73:b8:d7:46:45:6a:
bc:df:f9:34:bc:d2:36:ee:01:ea:97:a3:83:cb:0a:
9b:28:16:3f:85:51:d0:87:c8:dc:90:a7:b6:a2:64:
62:7a:52:34:44:16:11:6e:20:50:23:74:d8:40:70:
1a:c4:c8:cc:3c:b5:44:60:1b:0f:8f:85:a5:f4:b2:
62:b8:8e:d5:1a:dc:1b:d9:b4:c9:81:f7:81:6e:d6:
03:fa:97:06:82:0a:9e:e6:f9:30:54:e1:c2:46:23:
f6:d2:ba:38:55:32:b2:3d:54:64:78:35:3e:e4:c0:
2e:0e:31:7c:99:80:ac:89:c2:ae:b0:d4:b2:76:12:
92:fe:d4:2b:48:34:fc:82:ed:96:fc:60:09:4d:d5:
ec:9a:a3:41:a0:8d:eb:67:b9:3f:f9:47:6f:8e:79:
43:30:84:f8:ec:70:37:05:5e:9e:05:3c:d6:d1:cc:
fb:57:d2:84:46:94:95:9f:be:45:5b:da:46:e8:b1:
e7:79:14:10:1a:77:af:f6:be:11:1b:9c:05:d2:dc:
26:0a:6a:aa:a6:6f:26:03:ab:92:b7:35:ae:db:89:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:35:82:6C:B8:B1:C9:CD:02:A3:E1:08:A8:FD:D0:6B:CE:A9:99:0B
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:92:b7:e5:f7:70:34:39:13:66:32:0e:34:da:6d:25:98:d9:
18:d0:e8:34:f5:c3:9b:04:69:42:fa:1f:3f:de:be:f8:12:81:
2c:40:8f:f9:d7:94:4a:aa:f2:a1:ed:8e:91:5d:c9:b7:01:1a:
50:5f:76:cd:0e:da:ab:e9:fe:06:9c:ac:bf:ff:08:a3:86:83:
5f:43:31:17:a2:93:0d:cb:93:6e:ad:83:ae:b3:1e:24:1f:40:
85:b5:6b:99:89:6e:fa:c1:c8:0d:94:e3:7f:b1:01:5e:c0:2e:
26:f0:47:2e:0a:ed:7a:3f:8a:6b:98:31:4e:7d:a2:77:29:c8:
65:7c:e9:bc:47:06:01:ac:6e:35:b3:36:c3:9f:21:37:01:77:
8b:a4:17:be:d9:8f:12:f1:bc:86:4a:fc:d4:c9:57:1b:70:ad:
da:6a:c0:28:93:31:d2:ed:3f:3b:93:6c:08:99:d4:66:d5:8d:
10:61:cf:99:e0:cc:da:f1:d7:f2:82:57:0f:d9:81:73:69:3c:
be:24:f4:e9:6d:4d:c1:37:e9:82:35:53:a6:b6:fa:de:bc:e9:
73:e9:93:cd:30:84:b3:74:42:19:52:1e:f6:88:84:42:9f:3f:
77:e2:3c:1d:5f:b2:ee:43:a6:38:c6:7b:d2:fd:ff:f6:5c:8e:
73:50:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:39 2025 by rpki-client