Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: FBWzQwYLchUIU3ZRcZ84t54JtCYmHP2xl0QIw+cbGak=
Subject key identifier: 45:49:8B:47:7D:4C:89:94:62:7F:66:DF:E9:B0:60:BA:52:7B:D6:6C
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 019A545171CCAFA3B1F88F6F241A93455FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: 01C5
Signing time: Wed 05 Nov 2025 14:00:14 +0000
Manifest this update: Wed 05 Nov 2025 14:00:14 +0000
Manifest next update: Thu 06 Nov 2025 14:00:14 +0000
Files and hashes: 1: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: Fk3EYLFNHTQKCndububca5hkbe7ZX52PjQwFzUca8wA=)
2: y_jzZWxrMh2AT3qjdH5sDFcbnso.roa (hash: UBOvdV+QBpMo/gPKyJWNtGffNnN28PAA/OvI521Vudc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:71:cc:af:a3:b1:f8:8f:6f:24:1a:93:45:5f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Nov 5 14:00:14 2025 GMT
Not After : Nov 6 14:00:14 2025 GMT
Subject: CN=45498b477d4c8994627f66dfe9b060ba527bd66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:81:66:7c:22:fa:5d:4a:7f:21:5c:a7:34:
79:af:90:da:7d:80:64:52:36:58:f5:0b:84:f3:77:
2e:87:89:a1:ef:71:91:26:b7:1c:45:31:57:ff:37:
ab:3e:b8:bc:3c:34:37:f0:ae:ee:c6:e5:b1:80:76:
59:b0:7b:53:69:d7:45:a4:f5:55:03:50:b6:74:36:
62:05:a2:21:ce:ee:31:b6:d0:70:e6:cf:ee:fa:5e:
e0:19:ff:04:27:48:07:a5:a0:df:20:13:23:a7:ad:
90:38:6e:82:3d:bd:ce:0d:7b:7e:e4:2a:d2:23:cb:
fa:36:8b:ca:e6:27:f5:ba:37:89:7f:41:fe:58:83:
15:73:3c:36:d8:7d:87:af:b9:07:28:4f:3a:63:5d:
af:8b:bf:6c:52:be:ba:0f:4c:88:bc:90:60:1c:59:
05:1a:b1:fd:6c:18:37:19:60:7d:5e:83:6e:ab:0c:
79:e2:13:e9:5f:4a:c3:41:db:af:80:b4:b3:be:01:
a1:7c:33:79:0d:44:a6:7b:3f:57:fa:f8:75:75:b8:
5f:de:ff:fa:f9:03:86:65:ab:6f:29:02:55:e9:9d:
74:0b:b0:57:49:47:67:19:99:a0:34:e2:aa:28:48:
a3:85:8b:84:a6:e3:24:0b:01:64:eb:73:9a:37:0d:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:8B:47:7D:4C:89:94:62:7F:66:DF:E9:B0:60:BA:52:7B:D6:6C
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d0:04:0b:6e:eb:da:41:41:e5:2b:d8:a8:14:6c:16:0d:8e:
ed:00:2e:1b:b1:4c:44:38:4a:47:f6:ed:ee:d5:a6:39:d5:8c:
ea:64:5a:b5:c3:bb:1e:cd:ed:e4:4f:50:f0:2f:7a:14:64:ac:
8a:c6:69:c4:9e:b9:1b:f0:ea:37:f0:dd:16:98:5c:23:2a:5b:
15:22:14:81:e4:96:7f:78:35:c9:5a:76:1b:43:17:1d:43:af:
ca:d8:a6:78:4b:ef:39:39:4e:25:19:ee:70:2d:17:c8:0f:90:
a7:e7:04:08:cb:73:b5:13:4c:64:57:a4:5a:e9:2c:1b:01:e0:
a5:07:09:cc:17:28:90:54:e3:30:63:7d:2c:cb:85:bf:2e:57:
30:2a:da:1f:bb:04:44:36:e6:b6:50:b8:2f:97:bb:50:95:be:
1d:e6:f6:39:8d:ed:a9:7b:ad:0c:0b:c1:ad:5d:d5:96:df:20:
6e:b6:82:cc:6a:1a:c7:1e:ce:49:db:88:2d:ee:11:68:a9:2a:
cc:6b:45:75:74:8b:08:c9:e4:86:5b:ac:49:75:1b:2a:3e:28:
6e:87:08:b8:a2:6b:26:d6:1d:a9:fc:fe:da:97:d5:cc:69:05:
1e:d3:79:64:2b:da:b6:ff:6d:fe:40:56:e3:55:ba:e5:86:c4:
78:7e:17:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:13 2025 by rpki-client