Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: Npzx1OkOCt8g3ORwcNp3dUXmwa7pLpphmcziIRwikCY=
Subject key identifier: DF:12:3B:71:20:00:C5:A8:BF:72:F7:C3:FF:A0:E8:18:D7:77:E7:35
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 019A500720FF48CF359C75FFEE4A71492829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 16A8
Signing time: Tue 04 Nov 2025 18:00:35 +0000
Manifest this update: Tue 04 Nov 2025 18:00:35 +0000
Manifest next update: Wed 05 Nov 2025 18:00:35 +0000
Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: cFsWof3ZAHMzPHzgAAIlNr0Auf/FcFdH7oV3BugG/0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:20:ff:48:cf:35:9c:75:ff:ee:4a:71:49:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Nov 4 18:00:35 2025 GMT
Not After : Nov 5 18:00:35 2025 GMT
Subject: CN=df123b712000c5a8bf72f7c3ffa0e818d777e735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:71:70:74:b3:aa:1b:af:09:d4:81:10:07:
0d:66:02:11:f4:57:d2:8c:3a:e3:d1:c7:22:aa:19:
b7:db:80:46:d3:f9:94:6f:fb:36:bd:7f:cb:cc:d0:
2c:14:b6:9e:d1:b5:c6:ca:2e:55:88:13:31:81:70:
b2:46:14:20:80:0d:47:b1:0f:91:22:23:d4:d2:aa:
e6:2c:14:53:ed:06:96:1b:33:0e:95:90:cf:0a:e0:
e9:a5:92:c4:ab:ac:9f:26:4c:99:b6:47:46:bb:c8:
45:7f:7c:59:0f:d7:c1:4a:40:18:a6:d5:b9:70:aa:
30:d2:d1:a9:ae:b7:85:bb:3a:2d:15:f1:4f:47:17:
f5:bc:26:94:ef:f5:4d:65:85:5c:da:95:98:d3:56:
f8:72:d4:15:40:f0:db:7b:7c:9d:58:fa:90:d1:02:
96:a1:95:0d:32:35:8f:63:b2:51:d2:10:19:9b:27:
11:34:d0:4a:06:90:ce:ca:5b:2c:67:0c:8a:1a:75:
77:a6:c9:0d:8d:6d:16:b4:b1:58:f1:3d:d9:e7:2d:
f0:3c:ad:28:29:ba:31:bb:ab:d2:8a:fc:be:ef:c9:
c4:9a:c9:df:ac:20:0f:9a:ef:cc:80:0d:45:69:3a:
32:ed:27:e1:31:42:3c:34:00:97:91:ed:2c:af:ad:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:12:3B:71:20:00:C5:A8:BF:72:F7:C3:FF:A0:E8:18:D7:77:E7:35
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f6:cc:ae:e0:98:63:6e:91:3b:f3:25:44:eb:5d:bd:f1:10:
90:1e:80:b0:6d:20:35:4f:a9:2b:85:e3:53:29:d1:ff:1c:06:
34:f3:cf:64:19:2e:b9:e1:b7:8e:cb:34:7c:25:43:f8:0b:94:
f3:a9:e5:18:53:66:53:2b:59:0c:d8:16:1b:80:aa:38:f3:09:
69:b4:93:c7:8b:71:77:91:3b:8d:09:90:1b:c5:e9:8c:a8:18:
41:c1:3d:f2:ac:d2:d6:47:0c:49:a6:13:8c:e4:86:29:3d:42:
ca:2d:eb:1b:b3:e2:db:f3:48:fb:2d:d9:6d:e2:71:26:17:cd:
82:9b:3f:68:e6:fb:38:56:a0:77:65:bc:e5:09:4c:78:2f:d6:
a3:aa:6b:4f:6e:cb:c5:af:9b:74:cc:34:17:6b:e4:70:ee:80:
32:71:44:d6:87:92:9a:f7:94:cd:8e:34:75:58:7d:cb:87:0f:
4c:b9:33:4e:13:11:54:67:8b:6a:85:3e:ff:12:df:05:19:65:
8f:b1:bd:30:80:f8:a0:3e:40:a6:b9:a3:4b:f2:5b:08:7f:60:
a7:35:26:2b:8d:42:04:cc:bf:bd:1d:16:81:0d:9b:7e:2e:a4:
d2:2f:58:03:88:ca:a8:96:31:91:64:79:e3:fb:0d:df:02:53:
3f:1f:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:38 2025 by rpki-client