Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
File: E_ZReahVuwpt3lZiFisrW6l0hxA.mft (raw, json)
Hash identifier: hOP7HKxI9Tt6o5H4ljtlF24kZE56bRnppdnC8HrBPU0=
Subject key identifier: 1A:B6:63:66:6D:BD:E8:C6:0B:D8:F2:DF:19:81:EB:6A:32:DD:7A:40
Authority key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
Certificate issuer: /CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Certificate serial: 019A4D0602C2C17D979FA07D5A1AD5181D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
Manifest number: 0982
Signing time: Tue 04 Nov 2025 04:00:30 +0000
Manifest this update: Tue 04 Nov 2025 04:00:30 +0000
Manifest next update: Wed 05 Nov 2025 04:00:30 +0000
Files and hashes: 1: E_ZReahVuwpt3lZiFisrW6l0hxA.crl (hash: spDSF8/5FF03OFSB/xjbXZXfXuuWv5e7FQtjZ7YFpxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:02:c2:c1:7d:97:9f:a0:7d:5a:1a:d5:18:1d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Validity
Not Before: Nov 4 04:00:30 2025 GMT
Not After : Nov 5 04:00:30 2025 GMT
Subject: CN=1ab663666dbde8c60bd8f2df1981eb6a32dd7a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:3b:f7:18:eb:ec:2c:36:ea:ef:2f:66:4f:
93:b1:56:5d:a1:9c:ae:dc:63:f2:5d:3c:c0:4e:ba:
f9:6f:b7:00:96:53:ed:35:b6:3f:c2:67:fb:c4:50:
ee:87:a6:d2:0e:f4:ac:27:ef:71:4a:a6:1d:58:cd:
0f:ec:a8:3d:c5:21:ba:b0:8c:8b:0b:11:d1:ed:52:
d7:64:82:01:74:62:62:0b:84:19:3d:c2:59:0e:63:
4e:e6:39:8b:e7:71:81:55:43:5d:f3:0d:8f:45:8a:
a3:29:1a:a8:65:25:ae:d6:a7:18:5b:42:c6:3d:6f:
9b:d5:c9:42:9c:9d:09:f1:d0:1c:db:9d:01:ce:9c:
30:b7:ff:6d:0d:8c:81:4b:71:ce:2e:00:f3:ee:0b:
38:79:03:d6:28:28:f2:3f:73:ad:82:0e:f7:f2:93:
d8:86:28:86:a9:87:3f:6a:a2:a9:26:7e:fe:f5:45:
3d:9c:f0:bf:e9:dc:9f:1f:96:6a:45:f8:a9:70:72:
ec:83:0b:0f:71:db:67:be:a1:09:ed:f9:f1:48:dc:
6b:c6:a2:b5:7f:15:cd:3a:53:13:e0:7e:3b:02:8b:
5d:bc:c2:6a:91:38:92:94:9a:4a:91:c8:7b:3c:22:
99:a6:28:8a:1f:61:e7:0e:2e:80:7a:fc:77:47:88:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:63:66:6D:BD:E8:C6:0B:D8:F2:DF:19:81:EB:6A:32:DD:7A:40
X509v3 Authority Key Identifier:
keyid:13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:04:bf:3b:c3:b1:f8:f5:24:27:5d:15:9d:3d:8f:b8:a7:27:
06:26:4b:1c:81:1d:9f:ab:f8:88:39:b8:ff:ee:35:f8:91:71:
66:a8:cf:e6:e4:84:58:d5:39:07:f5:9d:d9:9d:e9:ac:6c:3a:
3a:67:86:5f:86:ed:20:bf:6e:3a:d4:9a:d6:c3:9b:ad:19:12:
84:1f:29:ba:57:6a:28:9a:c8:39:00:d3:cc:35:ee:5b:10:02:
55:0e:ad:8e:b2:b6:34:7d:cf:8d:f0:e0:09:66:51:ea:82:5b:
23:58:06:21:9d:c4:93:18:99:49:75:d3:29:6b:3a:d6:ea:66:
ae:51:98:18:b1:0c:2c:54:5b:85:7e:91:60:ee:d7:86:e0:7a:
ba:7f:8e:4f:70:70:2a:5e:4c:34:44:8d:fd:11:ac:98:5a:a7:
4b:63:d9:08:26:78:bd:9b:8d:30:9b:57:b7:68:df:1c:42:4f:
69:c0:3e:e5:35:1a:34:09:cc:fa:36:07:fc:54:89:4e:d9:91:
bd:c0:c7:79:73:b6:f0:a1:ff:3d:67:4f:38:61:82:e7:23:80:
b5:2f:3d:de:4a:29:c3:3d:d3:8c:96:e6:77:95:0a:57:b9:ae:
3b:12:45:be:b9:73:33:03:7a:bb:21:73:46:04:ca:f9:5b:ef:
23:1d:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:37 2025 by rpki-client