Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: m4E/JoHGYj1aTIhunzfTAwniReCXgvZtuDzT06+1mSw=
Subject key identifier: 67:DC:27:05:0C:E7:5E:F6:AA:6C:B8:9B:2B:76:56:FD:4A:7C:17:F3
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019A4D3CED0AD45C351A942FD739B34D3C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 05:00:29 +0000
Manifest this update: Tue 04 Nov 2025 05:00:29 +0000
Manifest next update: Wed 05 Nov 2025 05:00:29 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: rwOiuZZfYbCpq0xQVDB2K1lg1vyGDfrOHhDI49LpDds=)
2: g2292tg5HkQKxN5v3A20HQE7HPE.roa (hash: 8kwF0PMfxaM4q7cGmN1tVvvHsfTo4uOxn6Qw92CswWg=)
3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ed:0a:d4:5c:35:1a:94:2f:d7:39:b3:4d:3c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Nov 4 05:00:29 2025 GMT
Not After : Nov 5 05:00:29 2025 GMT
Subject: CN=67dc27050ce75ef6aa6cb89b2b7656fd4a7c17f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:74:c9:b8:2e:fa:1e:74:69:42:df:c8:cb:
c1:63:8e:0e:a2:f7:20:44:86:82:7f:b2:13:8a:c1:
d2:82:99:45:eb:17:6f:6e:ec:79:0b:bc:fc:8b:73:
8c:31:cd:96:f0:05:f8:3a:25:d0:c4:b2:21:b5:39:
63:13:e3:67:be:2c:48:6b:f0:4a:2f:29:6d:ee:75:
d0:07:3f:3d:2c:d9:0c:c4:d0:7a:65:ec:20:9b:01:
91:47:e4:dd:79:66:e2:75:a6:86:4e:21:e9:a5:b7:
3d:69:7e:11:33:d4:a4:f0:5b:8c:3c:45:f2:ba:0a:
9f:fe:3a:b7:71:62:47:c7:a7:47:fc:21:4d:9e:3e:
78:e5:d5:0b:b8:4b:cc:76:d5:33:1b:ca:ff:1b:0c:
8d:34:18:00:ef:9d:66:bb:56:f8:fb:a5:eb:e3:7e:
6d:02:f6:66:6e:54:9c:36:d2:ab:fb:f2:8c:2f:44:
43:b0:be:3d:bc:c8:39:8d:97:b0:4a:7a:a4:8a:3b:
f6:de:e6:dc:db:06:48:0d:8d:c9:61:6a:0d:36:6f:
9d:48:c2:b1:05:db:a5:39:4e:fd:a3:a8:96:3c:61:
d1:ef:65:94:02:dc:36:b8:7a:e3:a8:d6:4a:de:c1:
01:a9:a7:b4:40:85:f8:7a:31:b3:86:dc:2a:78:27:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DC:27:05:0C:E7:5E:F6:AA:6C:B8:9B:2B:76:56:FD:4A:7C:17:F3
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f6:0c:61:15:0c:ef:b1:48:6b:e3:0c:68:9d:4e:53:09:2a:
fa:31:88:bf:4f:9c:d9:f3:a9:14:2e:1c:97:3e:ec:7d:36:7b:
84:89:c9:c6:4b:a3:a1:7e:71:27:97:ca:b9:a2:a0:a8:71:e0:
04:47:e9:30:92:05:b3:69:af:73:5f:30:8e:04:21:36:5b:52:
ad:a0:3b:23:be:66:d9:bf:f5:77:cd:da:51:ad:ea:19:b4:b7:
97:42:4a:21:c3:a4:54:84:94:49:52:33:88:96:1a:0e:f2:04:
de:c3:eb:1a:14:e0:f4:a9:69:c5:cd:39:ed:78:75:3f:f3:24:
32:59:44:f4:c1:57:bc:58:50:31:ce:3d:c9:b4:75:a1:7d:e3:
a3:c6:57:01:00:03:e9:0a:88:81:8c:4d:69:a7:bf:1a:f3:84:
8f:92:10:fc:86:4e:1c:79:e0:6d:b9:e3:9a:94:cc:d3:b1:c1:
8a:cd:a1:60:4b:65:e4:b1:95:20:bf:52:49:46:71:13:60:46:
e4:62:e6:3c:e9:b6:4b:c8:e9:46:c4:5b:af:28:f9:3e:b5:43:
c2:18:37:74:0b:bc:59:c7:b9:72:68:43:1c:e1:31:6e:59:27:
d9:db:c3:11:09:39:f8:56:58:88:c0:85:8f:0e:55:81:74:42:
e0:e3:f0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:54 2025 by rpki-client