Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: X4prZ0mbEAN1HBbDWmDFKzKZjZTJZcGAh+hFNZjzCLg=
Subject key identifier: D1:63:8E:8F:C2:FB:E5:D1:9A:6C:EC:71:6F:1E:C9:04:50:28:D6:FC
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 019A4D06CCBD1A9A06E33FDC4255987A65E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 140E
Signing time: Tue 04 Nov 2025 04:01:22 +0000
Manifest this update: Tue 04 Nov 2025 04:01:22 +0000
Manifest next update: Wed 05 Nov 2025 04:01:22 +0000
Files and hashes: 1: vHQRV0jRUXExLLAYBdY2ODpzWoo.roa (hash: 7UhAMCr3OjHllJdnfdmjdJInrKVauXU3M4e5nn0fWuA=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: 08QKj1sJ5iuVlY3A9+C3QlUKNCo5d42e+IhhDCA87x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:cc:bd:1a:9a:06:e3:3f:dc:42:55:98:7a:65:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Nov 4 04:01:22 2025 GMT
Not After : Nov 5 04:01:22 2025 GMT
Subject: CN=d1638e8fc2fbe5d19a6cec716f1ec9045028d6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:d9:77:a3:31:c6:3a:88:ac:c1:d5:a1:2a:
0b:fa:5d:57:36:eb:bc:f2:17:21:a9:c1:ee:7e:2b:
6e:4b:c6:f6:22:9c:0d:63:46:2a:53:59:6c:22:90:
c7:6e:e9:da:99:06:5d:e7:00:e8:de:7a:58:ce:93:
c6:ba:22:ac:bf:0c:58:9d:1d:15:f5:d8:97:fb:9c:
b8:1e:fb:ac:04:b5:1f:d6:e8:dc:58:40:a6:08:4d:
ae:cf:38:17:a2:1c:b6:51:bc:f0:e0:b8:30:e3:b3:
16:d5:01:d6:cb:5d:01:66:41:d6:db:2c:05:30:d6:
90:46:9b:49:d3:62:28:6d:cc:ef:09:80:23:b1:b4:
02:40:68:bd:e7:8a:f4:e2:8f:24:3a:2d:c3:d4:7c:
e3:b9:32:ca:1a:49:59:1b:ab:fa:63:49:c3:c1:26:
06:f2:73:f6:81:9d:14:9c:b4:76:25:69:be:3a:a2:
23:1b:76:e5:53:72:bd:ff:19:d2:e9:88:6b:d1:34:
48:7e:36:f9:d4:5f:f1:95:8b:79:f3:11:91:cb:e0:
36:41:c8:ab:94:53:3f:65:b9:09:29:9c:5c:00:ff:
bf:01:e6:60:d2:11:6f:98:11:07:5e:37:8f:47:2d:
f0:23:7f:6e:4d:ae:51:26:e1:4e:ce:c4:3f:39:09:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:63:8E:8F:C2:FB:E5:D1:9A:6C:EC:71:6F:1E:C9:04:50:28:D6:FC
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0a:29:fa:62:91:05:bd:4e:b8:fa:77:44:af:53:63:b5:3d:
6d:3b:0e:1b:bb:d4:8d:f4:ff:c5:f8:6c:2d:fd:a0:86:d2:8a:
f8:94:74:9a:bb:9a:9c:b8:31:19:5f:26:c6:eb:ea:10:1c:45:
87:fe:e7:83:7e:23:e6:f2:7a:fa:83:a4:67:02:be:64:ba:b4:
61:5f:3f:d0:2b:d4:19:33:7b:c0:c2:d0:1f:18:76:ee:6f:8d:
d4:6e:a0:8d:a8:5c:2f:db:3d:dc:e0:f2:04:8a:0b:ce:65:d3:
dd:f8:50:25:82:e8:ef:16:64:46:d9:0d:d3:3d:9d:11:c9:26:
64:ea:10:98:1c:0a:07:d9:1c:6f:77:f0:51:de:ec:68:b9:af:
59:a3:21:0b:55:38:fc:05:24:59:29:f5:c4:d1:d7:f1:32:20:
89:50:5c:c7:fb:53:3d:45:4d:94:8d:a3:81:29:11:e8:01:c2:
29:68:e2:b8:bf:db:59:f4:ac:84:a3:15:67:34:d8:ff:5c:6b:
18:81:b7:d3:3e:57:e7:62:07:20:27:a8:35:45:7c:89:1b:84:
c0:c6:6a:14:5d:a3:11:38:55:2c:3b:44:26:12:fb:20:c5:c0:
7d:b9:e6:e5:5b:cd:90:1f:95:c2:ea:e8:fd:8d:a4:1f:80:1d:
e4:db:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:17 2025 by rpki-client