Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: Yf5WbWOG8RBkP4hSy2s5HGnpsyebcy9Rhs7CKQ/c7oE=
Subject key identifier: D2:90:37:19:B2:C2:C3:89:0E:5B:D5:F0:71:3A:4D:A0:DA:B4:C9:97
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 019A4EF5854266B48883738F69B70EEE0358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0D4A
Signing time: Tue 04 Nov 2025 13:01:44 +0000
Manifest this update: Tue 04 Nov 2025 13:01:44 +0000
Manifest next update: Wed 05 Nov 2025 13:01:44 +0000
Files and hashes: 1: GVUeOB4dXXqj9XML1jN57j3Df5M.roa (hash: Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: lxUkphRbl/XqSVRe91ifAtXAU1ag3a4yUVplBvynuT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:85:42:66:b4:88:83:73:8f:69:b7:0e:ee:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Nov 4 13:01:44 2025 GMT
Not After : Nov 5 13:01:44 2025 GMT
Subject: CN=d2903719b2c2c3890e5bd5f0713a4da0dab4c997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:98:69:89:98:97:83:a1:63:be:02:02:ee:
00:bc:95:7f:cc:0e:9c:bc:6b:04:ff:f4:45:f6:da:
5e:4d:91:07:a7:b1:ac:95:e4:ac:a9:8a:5f:9e:49:
0b:6d:7a:f7:a9:26:d4:6f:1b:5c:39:05:70:94:06:
29:18:ec:d1:8e:6e:07:47:bb:57:44:33:0b:87:a7:
c1:36:9a:ec:13:20:18:bb:c7:39:6e:9e:34:df:21:
a2:15:de:42:55:99:12:1f:04:00:8c:81:31:2d:6b:
0c:fb:d7:46:4a:b4:47:77:6f:e6:e0:64:27:02:8d:
ec:04:8b:62:1c:62:42:80:5b:7a:e9:0a:8d:78:9e:
6f:9e:8c:7c:92:c5:fc:32:41:3f:bb:75:e9:c6:ad:
19:35:6a:39:19:f3:6a:eb:ce:5f:cc:4a:a7:86:71:
24:09:87:1a:aa:0c:c1:66:a8:a0:49:8a:a5:ba:e4:
f5:12:90:2d:98:d2:ba:94:d6:81:82:53:55:3f:d6:
2e:57:c8:f0:84:8c:a2:bf:a2:1e:76:59:20:25:cf:
c1:f9:31:4d:ca:6d:0f:b3:53:bf:23:46:d0:db:e0:
ef:cb:3e:74:61:d7:88:9e:cf:63:17:83:83:22:8f:
6a:d9:44:77:cb:22:13:6e:4d:21:6a:dc:87:66:a5:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:90:37:19:B2:C2:C3:89:0E:5B:D5:F0:71:3A:4D:A0:DA:B4:C9:97
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1c:5c:68:f0:d8:2f:7f:78:67:59:3b:0a:b6:f1:bf:ee:e5:
80:fd:3a:c3:d7:f0:cf:33:41:58:3d:e0:12:f9:88:60:43:6e:
63:59:5b:5b:86:d2:01:86:c4:24:d6:c5:ed:1d:3e:38:1d:77:
d2:b8:4b:8e:03:2c:b1:6e:3b:aa:57:2e:74:13:66:d7:1f:ac:
09:05:c8:6e:6b:cf:ab:b0:ac:55:63:46:0a:9e:19:c7:2f:0d:
3b:7c:4a:ce:be:2d:f3:00:33:28:32:3e:01:17:49:24:43:9b:
ee:5d:2e:c1:71:03:28:4b:86:28:79:24:1f:57:2d:fb:7c:34:
4d:d3:c1:58:ef:00:87:b7:86:21:cc:d5:17:8b:0f:2a:61:28:
53:6d:3a:01:0f:c0:e9:8a:dd:2f:a6:03:bf:ad:a5:5d:2b:36:
5f:4b:3e:9a:af:6f:58:3f:51:95:70:b1:d8:2f:7d:71:2f:5d:
e9:fc:a3:ee:6e:c0:ff:4a:c2:7c:8d:9e:7f:98:69:97:66:2b:
2f:b5:2a:78:58:99:44:5d:a2:e8:12:64:9e:6d:48:50:f6:b3:
0e:8e:96:dd:bd:15:cc:41:18:fc:3b:11:6e:c3:95:93:ad:fa:
ce:8b:7e:cc:c8:23:d4:79:a0:03:15:40:3b:52:50:79:e5:68:
9d:59:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:13:57 2025 by rpki-client