Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
File: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft (raw, json)
Hash identifier: wm2IkNABqKTmicQm0IEBi5eLgybaqg2Lw1EKxF+16LY=
Subject key identifier: 14:C4:13:49:18:6D:6A:C6:ED:4C:F7:1A:D8:1B:98:C5:B6:30:B0:5B
Authority key identifier: CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
Certificate issuer: /CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Certificate serial: 019A4F6273B2A67B245BFB05C2EB6C0547DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 15:00:43 +0000
Manifest this update: Tue 04 Nov 2025 15:00:43 +0000
Manifest next update: Wed 05 Nov 2025 15:00:43 +0000
Files and hashes: 1: DnTbZNQqyk7b1Kpp-h3yl2scJwY.roa (hash: TJ12NvtCptbjwY91XKfeBV5bJZ6ugQZ1nYOaUhjOlp4=)
2: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl (hash: oNCCvE7IqGlVPEbFFU2zMttCjg6SZ1w363h7rlanbp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:73:b2:a6:7b:24:5b:fb:05:c2:eb:6c:05:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Validity
Not Before: Nov 4 15:00:43 2025 GMT
Not After : Nov 5 15:00:43 2025 GMT
Subject: CN=14c41349186d6ac6ed4cf71ad81b98c5b630b05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:6c:67:84:d9:90:a6:b8:59:2d:32:09:a2:
0c:f8:33:7a:02:11:7c:cf:49:e1:cf:73:d3:fe:40:
9e:fe:9e:ef:82:67:29:8f:5b:2d:21:bb:b1:d7:95:
ba:5a:f9:2d:bd:ad:c4:6c:64:6b:8a:e3:35:2e:4b:
87:17:c1:c4:ef:ce:48:8c:a7:4d:1b:42:f1:85:ee:
8c:cb:f4:5b:ee:19:ee:94:ca:3d:77:28:ad:f9:4e:
83:51:20:47:5a:37:65:45:98:0d:23:3a:80:d9:f0:
5d:d0:72:85:4c:68:90:33:9c:fb:0a:ab:0a:f2:dd:
73:33:0c:4e:d7:8f:dd:22:f5:a4:70:46:74:c1:65:
3c:d5:d9:21:70:40:21:49:2b:97:e3:3c:53:19:b0:
9d:f6:3f:0f:01:2e:d8:32:9c:ca:94:91:ae:1e:47:
c9:71:ab:32:7d:d2:19:08:24:1c:55:c1:56:e5:1e:
06:cf:69:38:e4:f5:9f:72:48:0f:d1:8e:4e:ff:f2:
6c:27:b4:be:b6:a2:17:dd:92:1b:18:07:86:0f:65:
16:3b:c6:9d:19:6b:f3:14:fe:5d:81:2c:a6:98:32:
51:13:83:bd:54:d7:1d:01:5f:ee:1c:fe:ee:9b:95:
d9:c5:fb:e0:27:0c:0c:89:1a:7d:d2:66:3a:55:7a:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:13:49:18:6D:6A:C6:ED:4C:F7:1A:D8:1B:98:C5:B6:30:B0:5B
X509v3 Authority Key Identifier:
keyid:CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:67:72:22:a3:60:c3:61:bf:02:83:57:7f:fa:ac:c2:a4:a3:
32:98:b6:f1:b2:4f:6c:4b:ea:73:66:23:d7:84:a3:87:3e:ff:
12:54:16:09:d6:3b:66:96:9f:fd:d6:cc:88:6b:29:b7:af:20:
1a:3c:15:d3:81:09:33:b9:8e:dd:d7:37:65:c0:12:aa:de:28:
80:43:9e:c3:64:f1:64:11:43:98:dc:7d:4f:7a:25:59:dc:23:
8e:d0:1c:a8:17:73:8e:b7:13:46:84:fe:c5:27:c6:13:2e:1b:
ea:8c:3e:82:5a:84:4b:fe:d7:80:6f:b9:82:22:31:1f:36:1b:
d6:ab:49:71:ae:f7:81:f1:16:46:12:f0:f3:ad:6b:3c:93:1d:
a7:8b:7b:f3:db:fa:dd:6c:83:13:f6:72:5f:cb:eb:37:e5:7a:
07:59:1f:73:d3:b8:f8:3a:08:a9:4e:3c:63:de:d5:1a:d2:6d:
cf:ef:f3:f3:8e:98:0a:f4:49:d5:3c:6a:7e:95:a1:23:85:cb:
ad:74:12:8b:e0:c4:33:5c:0d:44:11:66:a2:cc:b5:db:47:40:
0e:d1:1a:7e:a9:00:41:c1:ab:57:0a:16:ed:3d:68:b2:63:11:
e6:ab:6f:92:89:67:86:98:cc:f6:b2:36:c8:23:f7:44:d7:b8:
b0:b9:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:15:59 2025 by rpki-client