Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: ze9Hs/nT+qM0CMCm0L7VzqI2QX4NyLYGcgF6LCZW2pQ=
Subject key identifier: E9:D7:88:EF:03:6C:02:D9:D1:19:AD:14:21:51:F0:A6:40:A1:77:80
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019A4C97D2F9625E91F169381EFB930426AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 06B2
Signing time: Tue 04 Nov 2025 02:00:08 +0000
Manifest this update: Tue 04 Nov 2025 02:00:08 +0000
Manifest next update: Wed 05 Nov 2025 02:00:08 +0000
Files and hashes: 1: GnRBgfOJgqgbCKfVmItzXv5DJ54.roa (hash: MiCCH7uvupnb1UHdVT5mWDwROiRyBunRSB+jjWhogas=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: MtIVNwvtboGR/h1I75Ws8VRknHG6u6NBRhxKM6XTrHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:d2:f9:62:5e:91:f1:69:38:1e:fb:93:04:26:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Nov 4 02:00:08 2025 GMT
Not After : Nov 5 02:00:08 2025 GMT
Subject: CN=e9d788ef036c02d9d119ad142151f0a640a17780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:e6:ef:1c:3f:5f:8a:65:3f:ea:a2:4c:82:
fa:59:01:ed:b1:0f:4d:46:62:43:c2:9a:5a:8b:3c:
00:46:83:21:39:69:5d:36:aa:da:e6:1c:96:f9:cf:
70:7c:76:44:97:f8:eb:67:10:3e:8a:da:40:05:9c:
5d:00:2b:7a:37:45:37:a5:69:61:7b:3c:45:3a:26:
56:42:1a:51:02:11:2e:8e:a0:6a:01:88:8a:40:42:
de:cf:f4:66:39:74:1a:9f:43:17:72:90:33:8e:4c:
3d:95:37:11:1a:d8:37:65:fa:2c:f0:05:ed:d6:fa:
f3:b8:c8:f5:28:0c:ce:05:8b:ab:35:37:55:ab:72:
4d:f0:2c:8f:75:77:0c:b2:42:2a:73:e7:3f:c2:f6:
78:10:62:bd:18:88:c4:88:9d:56:d7:03:7f:ba:55:
a5:49:10:88:14:d2:f3:b7:a1:e6:10:33:f5:47:85:
0b:f8:47:e3:12:54:99:b6:f7:4c:af:4b:b6:e1:ef:
13:54:ce:71:0c:66:04:f6:c6:82:7f:43:d7:d3:25:
f0:9e:64:a6:23:8f:13:4e:d6:55:48:44:ec:c8:54:
8f:8b:96:4d:db:b8:41:b3:72:c0:1f:0a:cd:82:20:
22:97:2e:ba:13:d2:d8:3b:ff:4e:dc:23:29:9c:e3:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:88:EF:03:6C:02:D9:D1:19:AD:14:21:51:F0:A6:40:A1:77:80
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2b:b6:cd:98:de:d9:42:23:5e:ef:fe:b8:45:c2:6c:2b:e6:
48:54:53:8b:12:b3:1c:9b:2b:15:00:d0:4b:6c:61:12:0c:5b:
6e:fd:bc:5d:cf:4e:a3:6b:da:f3:53:20:b9:87:6b:f2:fc:cc:
a4:18:31:50:49:2b:c6:49:b4:48:7d:65:c9:03:be:9d:bd:61:
7a:63:dd:18:08:8d:fb:b7:68:18:bc:24:91:12:16:79:0d:48:
41:cf:e7:98:ea:a1:9a:74:5a:50:5b:77:69:f3:9b:aa:68:84:
23:8a:36:21:24:35:5b:5b:cc:40:13:fc:c9:a6:d7:3a:e6:90:
56:2f:11:af:6f:29:a0:17:df:c0:d7:9e:9c:cb:bc:00:d6:53:
5b:15:cf:6c:eb:92:ac:61:71:1f:b4:57:3e:19:55:69:9e:21:
9d:de:35:77:55:9d:4e:f6:66:9a:d1:36:42:fc:17:ff:1a:47:
15:e5:2b:5c:b6:e5:85:37:a3:e7:e5:9b:ab:c5:6c:bb:08:80:
da:2f:e1:66:5a:c9:f2:d4:e2:b9:33:7c:96:02:57:39:e5:1a:
79:62:ad:b9:43:ff:7d:8f:1a:b6:ab:20:61:52:88:1c:03:86:
4b:ab:38:84:4e:57:46:f8:1d:89:3f:48:f9:3d:48:0e:31:d2:
bc:d9:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:09 2025 by rpki-client