Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: aiK1XR6UVX5ZsYW7K4hAAj7AmZ7oHJ3fKtVEpEyI+8Q=
Subject key identifier: 06:82:1F:00:3D:E2:D5:73:64:E2:93:70:D9:D4:C1:56:68:A5:60:D8
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019A4C61040C42C2612490AEC3BF55143550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 1008
Signing time: Tue 04 Nov 2025 01:00:17 +0000
Manifest this update: Tue 04 Nov 2025 01:00:17 +0000
Manifest next update: Wed 05 Nov 2025 01:00:17 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: MAOvsSJiPb4c+p12rbMaarNZFu4F1F+HeX0tpsIwvN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:04:0c:42:c2:61:24:90:ae:c3:bf:55:14:35:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Nov 4 01:00:17 2025 GMT
Not After : Nov 5 01:00:17 2025 GMT
Subject: CN=06821f003de2d57364e29370d9d4c15668a560d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:6a:fc:a2:df:0d:01:46:02:61:4e:74:c5:
5b:42:e7:69:18:20:ce:70:01:09:86:c4:4a:4a:a0:
d0:cc:13:2f:3b:36:c6:2b:80:98:73:89:9b:63:45:
43:77:ec:c6:51:72:85:e8:15:a1:96:3c:7b:9b:b2:
1d:2d:33:6c:5a:36:69:ef:a4:e2:34:41:93:54:d4:
f6:0f:f4:df:47:8d:a9:b2:9f:5e:d7:47:01:56:63:
6a:41:a9:c4:c5:87:41:88:8b:22:e0:a1:01:2e:ba:
76:b4:f4:3a:f1:b2:89:0d:e4:3f:84:01:15:71:31:
a1:99:a7:02:60:51:09:47:08:10:6a:76:81:5f:93:
a1:54:58:f8:f7:67:be:73:16:4e:15:f0:67:45:b4:
2b:8a:5e:44:bd:0d:0f:2a:2a:47:46:64:92:ba:56:
a8:77:88:cc:35:1f:ef:6b:e3:6d:21:c3:8d:52:9a:
39:7a:1d:06:b5:a6:a4:fb:fe:75:14:0c:8a:e3:e4:
b6:5b:be:25:eb:1f:39:62:f8:b3:42:57:4c:26:17:
9b:99:f6:11:a3:9f:84:ce:c5:c3:ce:77:af:19:8a:
8a:ff:9e:3d:f1:ed:50:5b:41:0c:89:2c:b7:92:6d:
0d:c8:71:de:d0:16:48:83:73:62:e1:f6:45:b0:96:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:1F:00:3D:E2:D5:73:64:E2:93:70:D9:D4:C1:56:68:A5:60:D8
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b5:dd:d2:56:66:d7:56:23:91:84:ac:0e:6e:95:50:a6:0e:
09:1e:35:05:9e:26:a0:68:2f:80:bb:29:04:f3:01:f7:60:38:
18:72:8b:ce:5b:e9:2c:fc:18:f3:ce:8b:14:1f:eb:19:03:26:
6c:c3:39:ab:71:d0:8d:4c:d5:35:71:bf:02:e6:95:8a:c5:65:
b0:d1:70:cc:38:e4:38:d8:87:5c:f2:60:8a:9e:5e:89:ba:20:
ca:64:9e:5b:52:1e:b6:61:fc:cf:3d:75:99:12:fc:7e:a3:00:
ef:b3:14:8f:ca:47:b0:d2:66:27:f7:f6:41:3b:48:88:88:ff:
17:3e:0f:7f:77:4b:25:1f:df:08:99:3f:ad:68:25:17:4a:cd:
a4:48:8f:73:75:3b:05:35:e1:4f:b0:c9:d6:a4:97:66:d4:f4:
be:f0:26:6b:9c:1b:6c:2d:e6:ae:c4:ba:c2:04:28:38:b6:e6:
e6:46:57:ab:f2:e0:25:22:8c:19:ad:3b:7a:07:07:70:15:51:
2c:a9:02:7e:a2:c5:d3:f5:f0:3e:d6:ea:f9:7f:f5:bf:92:e3:
66:6d:12:e9:a3:97:ed:9f:05:22:ea:5d:1d:9d:f2:d5:42:fe:
55:ea:d0:a4:67:b8:d2:df:ab:09:10:fb:3e:9c:2a:4c:14:00:
72:55:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:21 2025 by rpki-client