Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: QnBKi7oe+ja/64b0K+j8h76Z5eRJ2ta4pWH5mfCApnw=
Subject key identifier: E7:C7:C4:CB:CE:1B:EC:DC:32:A3:98:B8:EE:3F:97:4D:E1:3C:6B:4E
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019A4C618D556234CA644060CFE45B5A93AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 01:00:52 +0000
Manifest this update: Tue 04 Nov 2025 01:00:52 +0000
Manifest next update: Wed 05 Nov 2025 01:00:52 +0000
Files and hashes: 1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: v2p7YdfhKVDeBY0TZORNPN7Iqv1GqNz+xp2hGu1lvS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:8d:55:62:34:ca:64:40:60:cf:e4:5b:5a:93:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Nov 4 01:00:52 2025 GMT
Not After : Nov 5 01:00:52 2025 GMT
Subject: CN=e7c7c4cbce1becdc32a398b8ee3f974de13c6b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:4b:9d:c5:87:49:56:16:94:99:37:f1:ff:
40:67:6e:ec:40:f5:bf:a4:7b:d7:ef:01:d7:cc:0d:
39:1c:19:7a:3d:97:43:63:65:26:61:64:ff:5d:fd:
0d:d6:97:24:16:5a:a0:4f:92:97:36:66:8f:bc:6d:
2c:3d:89:4f:94:b3:bc:f8:29:e5:ea:3e:ed:90:1a:
ca:66:9b:09:08:03:80:ea:02:94:a5:cb:cc:f0:f5:
fc:b4:05:3c:3e:05:68:c4:e4:48:67:17:64:44:2c:
13:42:f5:4c:40:45:10:4a:24:2a:6c:85:94:b0:e8:
47:1d:dd:1d:c0:db:95:62:60:51:77:4a:06:0f:7c:
68:53:5e:3e:6d:1a:4d:a5:5d:86:c1:6b:05:6e:a6:
6b:cd:cc:f7:f6:04:53:3d:88:4e:9e:4d:ea:f5:73:
f0:08:af:ba:d5:0d:c0:b4:ea:c6:39:03:85:6d:78:
d3:a3:88:89:72:fa:02:f3:58:60:55:2f:3d:21:7c:
2c:9c:0a:bc:36:49:21:34:e3:38:84:f3:16:1d:75:
d8:c6:f5:67:02:cb:e4:c2:fb:78:a8:5d:d9:71:7a:
82:56:b5:67:68:08:75:14:c8:1a:9d:fb:4e:2c:11:
14:63:b9:ef:3c:78:d5:24:5f:94:eb:aa:8f:0f:59:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C7:C4:CB:CE:1B:EC:DC:32:A3:98:B8:EE:3F:97:4D:E1:3C:6B:4E
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1a:26:be:1b:92:ba:17:0e:bf:b9:be:4f:88:56:f7:1b:60:
e4:f9:15:14:0e:8a:bc:02:7b:63:b8:08:4a:32:92:97:b9:8b:
ae:32:22:3a:8f:ee:76:57:70:47:4b:d0:f6:42:f0:ab:52:3f:
6c:1e:f1:d2:05:dc:ec:71:e6:10:c8:8d:f1:d1:de:d3:86:f5:
c0:ed:76:97:8f:90:22:48:fa:68:53:b8:1a:15:f1:cc:89:1a:
9a:8b:a3:a4:3a:34:87:58:47:e3:4a:58:18:f2:98:10:1e:ed:
35:aa:28:e7:3a:ff:39:ef:5f:0d:35:55:77:5b:c2:f3:5e:5d:
e3:33:43:2d:ff:87:c2:7e:ef:ed:94:51:55:f5:fe:e5:5b:69:
e4:0c:44:8e:25:27:d8:00:4e:1f:1f:d3:ca:d7:a8:55:83:00:
6c:db:1f:b5:58:eb:9b:d3:ea:fd:2a:33:fc:75:0b:9d:8b:48:
6b:e2:dd:60:0b:a0:55:77:db:61:37:ac:a3:51:47:cf:e7:7f:
cf:5b:3a:bc:35:af:f6:c6:8f:6f:c9:e5:d9:21:06:98:31:c7:
36:51:b0:83:d1:05:70:c3:63:b2:f1:1a:0b:63:63:8a:97:93:
04:fb:a2:f5:35:53:da:54:ff:68:54:d1:dd:5e:ea:bd:54:2b:
63:10:1d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:43 2025 by rpki-client