Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json)
Hash identifier: sXe/l+boXH/Nks2ejWqIh0QDpY4cnfB+pZM3FoK4HrE=
Subject key identifier: 41:24:97:4F:D0:ED:A3:38:C5:03:DD:9D:0A:D9:43:74:12:13:80:E5
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 019A56095BCE94BBAA18B7C941FAF75FE393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
Manifest number: 047C
Signing time: Wed 05 Nov 2025 22:00:45 +0000
Manifest this update: Wed 05 Nov 2025 22:00:45 +0000
Manifest next update: Thu 06 Nov 2025 22:00:45 +0000
Files and hashes: 1: fgM561fL_3Rx-_1J5CJxxdceK50.roa (hash: nwniELmnb3/CT2nQQZ1hAp6RF9PN9bCFIt9tpx0KqDk=)
2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: wV6iRswnfGQ0gx0ZK9SP7YxCo5fpl5mVVDXNr0I9aNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:09:5b:ce:94:bb:aa:18:b7:c9:41:fa:f7:5f:e3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Nov 5 22:00:45 2025 GMT
Not After : Nov 6 22:00:45 2025 GMT
Subject: CN=4124974fd0eda338c503dd9d0ad94374121380e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:f5:0f:07:40:5c:de:b6:b0:f2:f2:46:7c:
37:09:2c:03:b7:22:cd:c8:6a:df:74:c5:b1:88:65:
62:e6:f3:c4:4e:ff:5c:25:da:25:b4:a2:c9:65:e8:
24:94:8f:64:6c:58:d3:67:af:f3:b9:e0:8c:e6:c6:
df:72:8c:e1:2e:e5:ff:bd:38:ca:1b:0a:96:25:e5:
25:cf:4b:f7:fa:de:6e:2b:dd:a6:7a:49:bf:e0:34:
d8:9a:d5:49:18:19:0b:a8:d6:d9:69:07:c5:9e:4d:
a9:3d:96:ac:35:4c:a3:d2:14:42:8a:d2:98:19:70:
f6:b7:00:f8:e1:7e:4d:ee:07:ae:8a:bb:4c:24:12:
15:76:7c:3f:04:e2:be:9a:54:03:c2:52:74:d2:ca:
c4:00:49:b9:35:02:d1:58:6b:55:18:bc:8d:dd:fd:
ad:5b:1d:5d:ad:e2:0b:09:72:f0:a6:53:7d:19:20:
f5:f8:5d:9d:f4:24:1d:14:4a:d8:4e:85:63:50:ca:
37:b0:14:ce:d1:db:8b:c0:b0:af:b7:60:41:ec:37:
f3:08:b0:62:13:6a:30:e3:59:c4:13:55:fd:34:38:
3a:96:79:15:f7:9c:c0:32:89:61:07:df:b4:d0:dd:
15:db:a3:15:60:88:1c:70:3d:57:90:95:45:69:b6:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:24:97:4F:D0:ED:A3:38:C5:03:DD:9D:0A:D9:43:74:12:13:80:E5
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a3:a5:4b:9d:b9:9c:6d:05:11:c6:e7:16:1a:02:52:e3:d6:
68:83:b9:73:fd:5d:73:9f:b9:57:bc:e0:dd:6e:a2:de:0c:44:
8d:05:56:a1:7d:1c:78:b7:72:f3:40:ac:a0:b6:45:98:81:f0:
f9:19:98:7a:40:62:66:2e:76:d3:5b:c9:e0:d8:68:fb:7c:6a:
b4:ad:27:7e:97:ee:69:03:4b:21:af:e8:31:73:0b:27:e5:77:
dc:d5:9e:14:37:de:65:dd:67:7f:10:ef:71:ce:3f:ae:97:e1:
3e:05:b8:50:15:59:28:e2:7a:0e:54:20:2a:56:0a:24:d6:74:
82:3f:4b:bd:5c:69:80:d3:63:ab:a8:38:ec:da:68:92:5f:e5:
f7:55:ee:8a:73:64:52:dd:e5:08:2e:eb:5e:a6:f1:10:91:c1:
80:20:db:e5:a0:c0:fd:f5:a2:30:6a:25:b0:03:96:45:94:2e:
c7:1a:5c:88:54:57:8d:fc:96:d2:20:59:d8:a9:f7:ba:db:94:
c5:9c:64:89:ff:42:04:57:89:31:a7:6e:a7:aa:b9:5d:74:d1:
22:92:f8:0d:fd:a4:cd:71:4d:0d:7e:9c:c9:67:bc:83:6f:67:
57:78:cb:e5:e9:e6:27:a1:b6:77:b4:eb:20:46:23:5b:de:26:
6e:96:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:51:41 2025 by rpki-client