Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
File: ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json)
Hash identifier: w+bjQlDVz/7yUrEEyj6rVOoSNgT9HNlZZ7rr+vH68uM=
Subject key identifier: 1F:3B:5F:5D:70:8F:89:E7:6A:EC:2F:CA:74:A4:B3:A8:B6:67:E5:53
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 019A4F9983DEB6F2F9D02834EA86C5C39FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 16:00:52 +0000
Manifest this update: Tue 04 Nov 2025 16:00:52 +0000
Manifest next update: Wed 05 Nov 2025 16:00:52 +0000
Files and hashes: 1: 8AY6X4XCRyiZxzFlt6tsbjR30jM.roa (hash: 5ZRaImHY2F/S3wQVqNNqg0MgU/7l0llwd1UlTTznV7w=)
2: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: /HTPGmWwB9iXdiFTXaNIO7Pos9D7/SS1gpBF6sq6M80=)
3: bth8nL17vmRfjOgOkE44hcyUW-U.roa (hash: +2CIURrrMY1RojUxyGB46gsHzcj2R0An7rXyNN3SRxE=)
4: fyItLKzWB2M2DcciXcjMC9ehbVo.roa (hash: 3hotdI7UkUaU/+3bTtSUK7y3DutUUFvTPfXcX54WRXY=)
5: xn5m4EslppaLzMQirkAjRslNCRc.roa (hash: UOBKdq1hXA/nlG6uZfbozsCpkf5JEX4D4dlwEvI1lPs=)
6: y9bz4yP_EEqSJFJp-Pek8JbvZOc.roa (hash: kA5Ei/WRVk5KhopTqBlcPpplFexyb5cDOtoJ1Rgm79k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:83:de:b6:f2:f9:d0:28:34:ea:86:c5:c3:9f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Nov 4 16:00:52 2025 GMT
Not After : Nov 5 16:00:52 2025 GMT
Subject: CN=1f3b5f5d708f89e76aec2fca74a4b3a8b667e553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:60:6f:fa:bf:7d:6f:82:d6:7e:3d:9e:6d:
7a:6a:6d:9f:54:0e:d0:21:ce:5f:29:89:99:53:45:
6d:5f:c5:10:e5:49:91:52:06:1e:29:23:b9:0f:de:
c7:a9:90:28:da:90:fc:dc:e0:df:d3:fb:c7:96:aa:
61:94:c1:6f:78:fe:67:e0:b3:3d:b8:e4:9c:22:5c:
82:08:a9:99:75:34:61:be:b5:a9:3e:4a:f0:34:2f:
47:8f:5c:01:39:a0:b2:8c:80:14:37:f8:65:a9:71:
be:59:da:54:f5:c2:89:56:45:68:21:92:85:73:6c:
a6:f4:8a:32:44:ac:00:73:8f:88:84:02:52:d4:5f:
a0:ce:30:a3:98:4d:46:61:70:7d:35:3e:b2:92:36:
a9:39:3d:2c:d3:26:b3:79:e8:ec:7d:70:03:e4:c0:
72:56:40:e3:01:48:6b:a4:cd:38:ce:e2:fa:02:a2:
1c:4f:69:b0:05:ef:ef:b7:8e:15:3a:c5:54:76:b1:
23:3a:c0:d8:96:23:7f:5d:4a:2c:39:7a:20:e8:9e:
4a:c7:12:14:46:ce:59:93:29:0b:4b:f8:d5:38:1e:
99:cf:ed:0e:96:6f:aa:12:99:6f:ba:d0:01:39:4c:
cb:c7:8f:73:0e:13:c0:55:91:0f:71:03:eb:f0:f7:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:5F:5D:70:8F:89:E7:6A:EC:2F:CA:74:A4:B3:A8:B6:67:E5:53
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0f:d8:da:e7:09:c9:c2:ba:ec:83:99:b8:e1:e9:39:da:d2:
59:d6:83:a4:f0:29:10:9b:db:61:87:63:5c:5a:bb:b4:14:29:
b0:40:0c:5b:be:1a:16:4a:70:3d:b1:85:d1:5b:a6:44:fa:3c:
26:ac:90:6d:08:c7:f7:ae:cb:67:6c:4b:6a:d6:6d:7e:2d:f0:
24:c4:c8:8c:06:7f:20:bd:6f:df:e6:47:c8:0e:0e:a2:7f:1d:
82:d1:5b:17:48:14:1f:37:da:b5:31:30:21:e0:3b:01:7a:76:
ae:57:8e:87:05:9d:36:77:b6:59:a0:9d:79:74:21:5d:62:e7:
a8:8b:19:45:33:95:22:9b:1e:9e:71:c2:4e:10:51:49:e0:19:
67:30:79:34:a3:56:99:08:c5:c9:49:f7:de:d5:4b:67:e8:13:
44:dc:43:fc:3e:35:00:e7:99:e2:bd:d7:c5:96:e1:50:a5:13:
49:6b:7e:33:88:09:26:6c:02:0f:38:3b:51:77:a9:37:bd:3c:
cd:f3:16:f0:4f:cb:3b:79:0a:29:e0:01:ed:fc:a0:40:13:81:
b5:0a:1b:5b:e1:80:4c:09:21:43:f3:13:9f:ca:df:31:1e:a1:
fe:01:35:36:1f:02:ee:63:0c:8c:c5:26:aa:77:e3:ad:2d:43:
76:35:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:54:36 2025 by rpki-client