Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier: /PT6Lw66p0cJgC0k2OZ6IylRaRK8AYBMbakqTDv/Ekw=
Subject key identifier: 8F:29:C7:D6:A7:A1:FC:32:6B:6F:5E:12:71:6B:21:74:62:7E:76:34
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 019A4D3D07B546E281D979689241A636F917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 05:00:36 +0000
Manifest this update: Tue 04 Nov 2025 05:00:36 +0000
Manifest next update: Wed 05 Nov 2025 05:00:36 +0000
Files and hashes: 1: VeyJDEEty7IaphGW3rZRjoHUojg.roa (hash: nlnkQXVcXOy604OjeWWR6cJfH3A2u1gS0XEnkUUPxgU=)
2: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (hash: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=)
3: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (hash: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=)
4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: fKZSC17Bt8XD+QV6i7eZQstgRnjIOiUQttmH20JnarE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:07:b5:46:e2:81:d9:79:68:92:41:a6:36:f9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Nov 4 05:00:36 2025 GMT
Not After : Nov 5 05:00:36 2025 GMT
Subject: CN=8f29c7d6a7a1fc326b6f5e12716b2174627e7634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:33:18:88:0c:fc:92:30:5a:f9:ab:3b:9e:
10:b1:8d:51:be:68:aa:22:d6:39:01:1a:a8:b0:ee:
e3:cd:4b:4e:ea:9d:b1:cc:90:5a:aa:4a:74:2b:b9:
34:62:30:d8:0f:62:71:7d:6d:b9:76:c7:76:89:5f:
d1:64:e0:30:42:5b:35:e1:6e:f6:53:e4:b6:93:34:
7e:89:88:fc:e0:c6:5b:18:88:62:e4:5c:0a:23:ea:
75:31:cd:5a:98:27:c5:4b:28:79:2b:25:f2:10:a2:
01:0c:a3:96:0c:58:6a:35:fb:a3:be:42:4f:3f:ad:
13:10:9e:2e:f6:4d:7a:ef:23:b4:4d:fd:36:c7:f6:
72:71:47:5a:eb:8f:f7:99:80:35:24:0b:38:90:ef:
f6:f1:e0:0b:43:42:65:45:7c:66:d6:72:ac:8c:38:
e9:29:70:ce:ff:3a:8a:22:f7:b0:ee:93:73:1a:59:
83:86:56:47:34:a7:19:f3:ca:c3:ab:47:ff:5d:67:
d8:64:c3:fa:ec:0e:6d:2a:48:73:14:80:92:0e:f4:
a5:40:e4:88:16:e1:0b:6b:d0:0a:8a:d5:44:1a:36:
fe:cd:49:89:85:40:2e:e3:43:70:bb:d7:ff:3e:c7:
96:87:27:bd:7c:65:ad:4d:db:52:19:3b:e3:2b:17:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:C7:D6:A7:A1:FC:32:6B:6F:5E:12:71:6B:21:74:62:7E:76:34
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2b:d8:e4:09:f0:d1:db:09:d3:e1:a5:3f:2b:94:40:79:70:
a6:b7:e8:1c:66:23:94:2d:03:e2:d9:65:a6:fa:2d:ea:e9:fd:
b7:7d:a9:df:0d:56:90:ec:b7:4e:be:b1:30:31:b0:dd:da:f3:
82:f9:37:d9:56:87:e8:7c:56:2a:9e:d5:f7:15:8e:ee:bf:24:
ff:42:64:30:07:22:08:33:d7:fa:0c:da:2d:99:33:89:80:e1:
22:22:4f:52:79:2b:90:c4:b8:bd:dc:59:b1:67:96:50:51:6e:
2b:3f:7b:00:71:e1:60:6b:98:eb:81:c8:0c:47:fc:aa:9f:16:
d4:e3:0a:6c:bf:57:bb:92:69:33:fd:39:ea:b7:71:bf:0b:b1:
b5:3d:3e:ba:eb:58:70:b0:a7:9e:60:73:39:53:a5:46:62:cb:
da:74:67:f7:8c:42:ac:87:51:fe:a6:aa:ec:8c:fa:66:3a:07:
81:c6:9a:af:43:ea:b4:1f:32:fd:4b:18:39:f9:4e:5a:3d:ee:
4a:ef:4b:8d:79:4b:48:02:e9:f2:73:06:2f:15:cf:fd:b4:a0:
7f:a6:9e:ff:45:01:75:3f:1b:2e:c1:7b:b7:80:07:26:25:7d:
56:54:90:d6:1e:ce:a5:0c:85:96:f0:58:ba:6e:58:38:b2:6d:
7b:5d:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:36 2025 by rpki-client