Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: DV+WdY1x/zpV5qRSJ00rKPeREnLQPF+UcnGPq2hhH8I=
Subject key identifier: 48:CC:50:73:F8:99:CA:74:B4:79:A8:61:73:C4:8B:0B:12:3D:68:76
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 019A4DAAF4BF21A9F3C65D2B378F824FB71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 0744
Signing time: Tue 04 Nov 2025 07:00:40 +0000
Manifest this update: Tue 04 Nov 2025 07:00:40 +0000
Manifest next update: Wed 05 Nov 2025 07:00:40 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: xlUQMZ2wny0lGCh+2keVMUo/mosDUr6Bd5wDJkWuxqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f4:bf:21:a9:f3:c6:5d:2b:37:8f:82:4f:b7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Nov 4 07:00:40 2025 GMT
Not After : Nov 5 07:00:40 2025 GMT
Subject: CN=48cc5073f899ca74b479a86173c48b0b123d6876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:bf:6f:b7:31:b2:e6:a4:bc:d1:18:78:87:
f3:f9:82:b7:82:b3:3a:c1:ed:6f:06:a4:c9:0a:a6:
36:a9:4a:3e:78:8a:d7:b3:9f:1a:32:19:8f:99:8d:
a3:5c:77:d1:18:a6:bf:9b:df:77:a1:0d:6b:df:4a:
8f:01:15:18:21:70:80:a6:ca:5e:d8:04:19:af:8e:
8e:10:87:14:58:26:85:83:b8:fd:9d:53:05:4f:13:
e4:7d:6f:9a:e3:40:fc:67:c0:2a:7a:25:90:28:44:
f9:be:5d:44:46:86:da:05:d3:c2:d7:4b:96:98:3e:
ee:65:f8:b1:42:ad:81:06:bc:74:32:9c:12:a2:f2:
38:a7:2b:21:6b:f4:d0:bc:ae:4f:a2:21:63:bd:03:
d4:b2:fd:15:d0:0d:0e:f0:35:18:41:9a:bd:24:57:
e8:00:d6:ed:fb:48:b1:8b:13:b6:59:06:bd:d2:fa:
d3:d5:9c:fc:81:d3:8b:2e:92:03:86:95:90:b0:f1:
8b:f8:00:b0:6f:42:0e:b6:16:68:4a:3b:72:c8:d1:
73:d4:a8:ef:ea:c4:bd:18:48:57:ad:12:b6:c9:72:
eb:93:14:e5:16:a0:63:4c:44:10:40:a7:d0:dc:49:
11:b1:6f:47:cf:38:ed:e4:6b:e1:01:ac:ac:9a:f4:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:50:73:F8:99:CA:74:B4:79:A8:61:73:C4:8B:0B:12:3D:68:76
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a2:b7:a5:09:7e:31:61:58:f4:e0:bc:c8:86:f2:05:2b:4c:
70:24:68:22:56:d7:6b:63:6b:ec:ac:32:f0:d1:56:f6:4c:4f:
2b:f6:30:1e:c4:ea:a0:34:33:47:63:21:80:da:0c:62:21:55:
58:48:0f:d2:6f:15:9d:d6:4c:66:5d:a8:2e:ce:ca:3c:5d:0d:
e8:18:77:ac:1d:cd:c3:5f:2d:a6:65:4b:6a:a4:0e:03:2c:e5:
5c:82:fa:db:96:f2:a3:e3:0e:54:01:1f:66:fd:da:3e:9d:4f:
dc:27:6d:54:a7:d9:aa:af:fc:be:d4:66:01:95:e1:09:37:eb:
36:f3:ae:e4:86:e6:50:f8:89:ca:d1:19:07:e2:a2:a1:36:a9:
75:2a:0b:39:60:29:1f:a5:18:d0:38:92:65:d0:3e:38:64:65:
7d:fc:1f:27:18:a8:84:08:f8:03:61:03:33:59:c2:08:a0:4b:
db:63:74:da:23:ce:ca:ee:65:70:87:1d:42:b6:89:e4:dd:49:
0f:b9:86:1e:3e:1f:a8:5d:a7:ed:58:d9:47:63:10:85:cf:2f:
c3:97:3b:6f:31:41:6c:5f:8f:96:75:02:ee:ca:96:b5:2d:ca:
30:05:3c:45:b0:9f:0e:1b:ea:1d:4f:fa:29:c9:44:fe:9b:b1:
50:bb:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:07 2025 by rpki-client