Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: y8eGKuKw/OpwtFaSlGqIwjYuIJ7eOpAW50KDRociUjE=
Subject key identifier: D6:63:56:CD:DC:B7:88:98:3A:1F:38:0D:EC:CA:2C:96:02:F2:51:CA
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 019A4D05CF3EDF605C56FAE9F0C2C881C44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:00:17 +0000
Manifest this update: Tue 04 Nov 2025 04:00:17 +0000
Manifest next update: Wed 05 Nov 2025 04:00:17 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: j3rrkdXSqRqDrxFgOZuTOKmcI4rBVbtUYcPtfXuMzKg=)
2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:cf:3e:df:60:5c:56:fa:e9:f0:c2:c8:81:c4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Nov 4 04:00:17 2025 GMT
Not After : Nov 5 04:00:17 2025 GMT
Subject: CN=d66356cddcb788983a1f380decca2c9602f251ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:94:6d:6d:39:65:9d:83:2d:c6:91:a6:63:
20:c3:c3:aa:44:fb:7b:5f:23:ae:30:86:02:ca:6d:
ec:38:dd:10:e9:d1:13:0f:6c:e0:86:d0:18:08:4f:
1e:a3:8e:27:97:54:35:4f:b5:14:78:a1:3f:41:b2:
ee:b0:d4:6e:79:7c:4c:ba:b4:47:9b:cb:e1:99:bb:
04:47:ad:08:dd:e5:b7:d0:5f:67:a4:c8:4a:4f:28:
87:b3:67:8b:80:c4:bb:5d:b0:f4:44:d3:e0:73:28:
7c:69:92:4d:4d:a4:51:5e:d8:5f:c3:aa:39:11:6d:
fd:c5:da:e0:ac:c9:77:11:34:3d:e8:e4:a3:93:f9:
c0:8b:2d:ff:f8:04:25:0d:e8:86:72:07:f9:4b:e7:
5b:99:ff:09:25:5b:d1:27:39:a4:2f:ef:20:90:cf:
22:4b:e2:c0:80:5f:98:68:37:0e:4f:94:ae:2a:17:
6f:68:54:7a:ef:4e:54:03:99:88:f0:76:07:96:c6:
40:44:1b:c0:6e:37:ed:da:1d:7c:c5:1a:4c:79:26:
e5:91:fd:e9:99:bd:5b:51:3c:2b:5d:a9:dd:2c:67:
1c:65:85:e0:8e:6e:23:73:52:51:7c:09:d6:4c:5b:
e0:4e:58:81:dc:79:e0:f6:f5:f0:d2:fe:29:00:e9:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:56:CD:DC:B7:88:98:3A:1F:38:0D:EC:CA:2C:96:02:F2:51:CA
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a7:b6:4e:3f:8f:56:e2:1c:4d:f7:46:35:df:06:5e:18:00:
b5:c7:fd:32:55:7a:57:34:ba:3d:32:d2:a2:5f:e5:dc:5b:0a:
e7:f8:51:81:c9:a1:c4:d3:c2:63:08:d6:2b:b6:87:22:49:b9:
65:a5:9e:1d:0c:fc:f1:b6:b7:06:34:fd:08:ce:cc:ef:62:fa:
0b:5e:05:9c:28:80:01:44:f6:0a:f1:54:a5:fa:d3:7c:0e:97:
03:e6:15:3c:e2:56:51:8a:18:41:45:20:17:6b:b1:50:78:ad:
2d:ef:dc:7d:d0:4d:19:e2:4d:82:9b:60:b4:96:61:62:e1:c4:
c9:83:2c:4f:cd:67:15:55:32:33:21:c5:f3:9d:29:b9:87:6e:
9c:64:e4:48:6f:f9:14:43:d6:10:08:f0:7e:3e:f4:0e:73:9d:
a6:7f:45:f2:56:36:11:01:6d:2a:01:13:78:e1:d1:8e:a3:c6:
65:8b:f6:12:49:06:9d:69:8e:7b:07:82:24:aa:3f:1a:f1:13:
68:24:c7:53:81:80:b1:74:b1:47:e8:23:3d:3d:c0:f2:c8:15:
be:b2:15:2d:ba:9e:d6:52:36:72:b2:94:00:1a:6b:64:3a:4c:
89:c5:7d:dc:7c:c3:94:bc:46:2c:7e:9d:04:cd:e3:6a:dc:0b:
32:9e:e9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:44 2025 by rpki-client