Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: wg7ME8cA1ZJUKFhu1jH47BgiYCg1EyiLQYt52dqPYfg=
Subject key identifier: 1C:91:B0:EA:D6:1C:8B:06:63:B1:76:23:5A:8D:2E:F8:D4:FC:08:DC
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 019A522C731B329481BAAD76FE9B658B0DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0D9E
Signing time: Wed 05 Nov 2025 04:00:35 +0000
Manifest this update: Wed 05 Nov 2025 04:00:35 +0000
Manifest next update: Thu 06 Nov 2025 04:00:35 +0000
Files and hashes: 1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: IBc6d8bAptg269gVCPq4Rnmr+OwuE76H9hPXLP0VWvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:73:1b:32:94:81:ba:ad:76:fe:9b:65:8b:0d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Nov 5 04:00:35 2025 GMT
Not After : Nov 6 04:00:35 2025 GMT
Subject: CN=1c91b0ead61c8b0663b176235a8d2ef8d4fc08dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:ca:f6:7d:6e:fd:5a:93:41:40:be:03:f1:
3b:04:b6:f3:06:8d:14:43:f2:bb:53:3d:78:08:69:
1c:9b:d2:4c:01:73:80:4d:7c:95:40:3e:b3:66:db:
05:9f:d6:79:58:16:75:c7:59:e2:5d:a1:1a:93:34:
b3:fc:6d:ee:2c:cf:63:97:10:36:2d:13:b2:74:99:
db:4b:4b:6b:c8:d3:ba:1f:4b:c8:2f:d5:b5:63:00:
5d:2a:af:b9:4a:17:4b:00:a2:2b:56:d3:3b:44:02:
e4:12:1c:93:55:b0:f5:a6:44:04:5a:89:32:e5:79:
9b:c9:58:5d:5d:e1:88:b0:e1:4e:0f:05:05:92:db:
2c:16:5c:7c:b9:86:31:90:77:b8:fb:5a:3d:14:8a:
a2:5c:4f:49:26:d0:f4:8d:95:c5:1d:a5:90:6e:5f:
87:8d:28:36:6e:c9:07:d3:32:81:fc:fb:f8:75:0a:
60:7d:d7:61:66:5e:62:3b:df:d5:94:83:a9:41:0f:
aa:fd:30:cf:a1:a1:d7:d5:c4:77:a9:0c:8e:10:2c:
d8:80:4d:18:46:9e:a1:d3:13:d4:24:8f:39:45:76:
36:41:c2:70:ed:f7:e4:45:26:d8:b5:05:c0:2c:29:
23:46:33:49:b2:00:d9:70:f1:e0:de:ca:82:d5:6d:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:B0:EA:D6:1C:8B:06:63:B1:76:23:5A:8D:2E:F8:D4:FC:08:DC
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:16:67:48:d1:27:54:2f:2c:57:11:bd:0b:78:39:ba:d7:
13:95:ce:93:88:8e:b9:e6:d7:60:24:ad:5f:c2:f6:11:5d:dc:
28:14:4b:80:72:1e:5e:db:7d:a1:1e:d0:25:13:96:a6:57:cd:
37:c3:f7:af:79:b7:9a:5a:2a:03:fa:b1:31:c7:18:51:37:d5:
47:88:d7:57:fa:21:46:1b:22:11:fc:74:54:42:9d:2f:89:58:
5b:44:00:de:cc:4a:7b:a8:c8:e5:17:68:4d:dc:89:54:0e:8c:
65:93:73:e7:02:fc:6b:bf:a9:99:fc:2a:66:62:ff:66:59:80:
0c:f8:10:d7:c0:6d:ca:a0:66:0b:24:21:36:87:46:2c:6c:80:
0d:b5:08:63:e1:79:8c:86:58:8c:e7:eb:c3:cf:ef:dd:8d:6b:
f3:00:3a:46:b3:d6:f5:13:dc:1a:2c:5f:a7:44:7c:d5:ed:d4:
56:4f:f0:2d:1a:75:19:b9:92:a8:2a:6b:c1:f2:44:d0:86:02:
f1:1c:86:2d:94:5b:e2:c7:95:9c:0e:2f:4c:ae:a4:6e:7e:9a:
90:eb:51:8c:cb:50:ce:c1:bf:87:8f:48:0e:aa:51:8c:32:a0:
f7:65:09:62:78:88:f1:55:a7:cd:ae:0b:df:7b:82:99:dc:1e:
db:43:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:21:59 2025 by rpki-client