Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: pElcoCM11takMAtkrsIr0ZnbWt9ws3iopJjdproltdI=
Subject key identifier: 76:CF:95:51:C4:8E:37:C1:E2:78:C3:E8:D0:E6:F4:A5:CA:33:ED:4E
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 019A4D746FB20D5B841465B968485EB3C495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 164C
Signing time: Tue 04 Nov 2025 06:01:07 +0000
Manifest this update: Tue 04 Nov 2025 06:01:07 +0000
Manifest next update: Wed 05 Nov 2025 06:01:07 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: LlIpWTd1aUG3g/+z7rm9uNb6q62BfCADeci7eUuYEbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6f:b2:0d:5b:84:14:65:b9:68:48:5e:b3:c4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Nov 4 06:01:07 2025 GMT
Not After : Nov 5 06:01:07 2025 GMT
Subject: CN=76cf9551c48e37c1e278c3e8d0e6f4a5ca33ed4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:d6:6a:76:aa:4b:15:be:4c:15:50:03:fa:
83:ca:7b:c7:42:e7:c4:c8:ff:33:48:6b:20:32:2c:
10:6a:e4:3f:67:80:7b:0e:92:48:34:0e:9b:7c:b2:
16:a9:df:3a:07:cf:d4:c7:a3:2e:40:43:2b:9f:f5:
34:7f:75:8f:74:25:fd:79:4f:ed:df:80:99:b6:87:
61:d2:b5:9c:68:10:06:8a:39:a9:ce:88:28:84:25:
13:b6:f6:fe:f8:ac:d6:ed:5c:6a:cd:50:65:06:50:
0e:7e:b1:b2:bf:6f:b5:12:1a:c9:e9:fd:21:f0:41:
70:fd:62:62:27:6d:19:a7:06:aa:d7:82:a6:d4:fc:
5d:dd:44:55:ef:bd:9a:ac:88:88:0d:9e:78:95:f0:
66:24:c6:76:bd:01:b3:25:e8:a4:0a:ae:3e:b9:b2:
5d:ea:f2:3d:a5:ce:13:b0:c6:98:02:50:bb:54:32:
2a:a8:79:b6:e5:12:e4:fd:f7:c1:9e:05:f9:b8:48:
9f:21:65:42:1d:79:96:fd:d5:4c:2d:36:29:d3:58:
bf:47:a5:88:4f:1b:fa:19:c1:91:be:4c:8e:a6:85:
be:2d:bd:d9:4e:e2:8d:49:1e:55:73:4c:0d:5c:f8:
e7:e8:57:03:8b:b9:d6:a0:42:e0:3d:68:74:21:06:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CF:95:51:C4:8E:37:C1:E2:78:C3:E8:D0:E6:F4:A5:CA:33:ED:4E
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b0:f8:14:ca:f8:ee:eb:59:75:1a:60:ec:da:89:14:f3:18:
58:e1:04:6d:20:a0:8c:d5:3d:7f:de:7f:ed:4f:e4:a8:b9:fe:
17:a9:4a:78:93:9e:45:c5:9e:cf:39:63:54:f1:d3:da:54:c6:
be:1f:6d:5b:29:88:88:18:c9:7d:24:23:d1:73:49:fd:34:4b:
db:ae:f4:74:3a:e8:bc:f6:61:36:7b:99:60:9c:9c:c0:c0:ec:
5b:fa:ad:c4:61:c7:ed:a0:1c:28:1a:8e:4f:ae:b0:fc:f5:c3:
75:ba:5c:08:36:aa:c5:7e:df:80:5d:74:b8:70:31:b6:0d:7e:
ab:79:ed:a8:e4:2d:f8:74:f8:d2:0c:0f:9d:6c:ed:30:ee:3e:
74:59:8e:96:d2:b4:29:f1:61:a7:60:be:bc:fe:bb:d3:f3:9b:
f9:e3:6c:0a:c1:4f:6f:6a:8f:6d:c1:f1:ea:a2:8d:d5:1a:63:
74:f5:00:bd:e7:54:6b:26:b5:15:44:3a:07:59:86:6a:80:c8:
03:a5:77:eb:24:da:a8:51:76:f8:20:e7:36:02:a5:df:0e:3f:
0e:e5:8c:3b:39:60:2d:92:1b:5c:31:eb:62:f9:90:2a:1f:67:
b3:fc:2e:85:cd:85:00:d7:23:e4:c5:8d:7e:03:e3:70:d2:21:
7b:0e:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:48 2025 by rpki-client