Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: VCZ1INEzDl/elPLds77d/IypRonmo5RZpUVWni5jANk=
Subject key identifier: 5F:05:F7:05:F1:21:12:15:F1:E2:3B:1B:8A:85:13:D3:37:A2:CD:A4
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019A51F53811206AD65651F758AFF69AD0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0271
Signing time: Wed 05 Nov 2025 03:00:16 +0000
Manifest this update: Wed 05 Nov 2025 03:00:16 +0000
Manifest next update: Thu 06 Nov 2025 03:00:16 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: uW/5Rv2cRk+RcuxckBH+BiglE+NldXd5aDE433R0kiY=)
2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:38:11:20:6a:d6:56:51:f7:58:af:f6:9a:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Nov 5 03:00:16 2025 GMT
Not After : Nov 6 03:00:16 2025 GMT
Subject: CN=5f05f705f1211215f1e23b1b8a8513d337a2cda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:7c:0c:3a:85:95:f4:a8:ee:56:dd:d4:2f:
6c:fa:81:15:bf:e7:5c:35:55:0a:dd:50:cd:9c:37:
e6:81:54:51:ad:c2:20:cf:7e:fd:e6:88:bf:34:81:
84:f9:e7:90:07:5d:c0:ae:61:71:01:66:8d:5f:07:
a4:33:1a:32:89:04:64:f0:4c:6a:24:ec:01:71:36:
24:89:da:bc:ea:bf:62:97:0e:58:72:8b:47:56:99:
6c:cd:e5:17:9a:83:ea:db:88:eb:e2:cd:93:8f:13:
a6:9b:88:87:39:a6:49:01:de:b0:1e:64:84:5e:7d:
dd:39:d9:c3:a7:aa:8d:8d:55:cd:8c:6a:51:54:2d:
67:31:93:02:50:c2:5e:3d:18:70:e4:b4:84:30:14:
b7:a5:08:0b:a5:06:b2:26:98:27:23:b3:08:15:6e:
bd:fb:3d:4c:d7:ad:5f:0b:d8:3c:f5:57:35:e8:0f:
24:13:68:46:08:eb:55:3a:3b:8a:5c:ac:7b:f5:0a:
3b:b1:8e:0a:38:12:7e:14:51:f5:68:a8:d6:cf:e6:
3d:6b:0a:91:cf:5c:7d:21:10:eb:1e:3d:75:06:ea:
d8:2c:35:52:f9:ac:34:8b:79:e7:95:94:48:47:5e:
0b:3b:e8:c0:99:71:e7:36:cb:c7:5f:a3:ce:e5:ba:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:F7:05:F1:21:12:15:F1:E2:3B:1B:8A:85:13:D3:37:A2:CD:A4
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:f9:a5:72:06:2f:2c:8b:24:da:80:19:58:08:aa:22:d7:
aa:ef:ca:87:3d:ae:09:1c:c6:0f:55:83:ed:5d:1b:e5:d9:60:
76:2c:d7:c9:0a:12:3e:68:2f:6f:8c:34:86:1e:d7:cc:de:75:
0c:43:45:c4:c6:87:b9:a2:75:6a:b7:47:2c:29:35:d6:83:5c:
b6:4c:ff:9b:86:79:70:53:1f:61:1c:2b:28:37:31:9b:56:b2:
e0:db:29:b3:83:2a:22:28:ec:86:f8:ba:9f:b8:d6:77:8c:e3:
19:da:1b:40:43:a6:9c:1d:ec:7f:87:a8:bd:18:38:ce:69:7b:
c7:6f:9b:eb:64:0a:64:23:71:1b:7b:89:d2:46:5e:fa:26:c9:
94:6a:57:cd:f1:62:f0:f0:3f:91:e3:99:d9:ee:ae:98:86:0e:
76:48:f0:36:49:06:cd:47:98:9b:7b:5f:89:57:09:d8:0c:5b:
63:ed:f4:24:c5:1c:41:ab:42:c0:c8:fd:c7:d3:59:6e:64:4b:
58:22:1f:2a:07:c0:19:83:ea:c7:91:37:7a:f8:36:24:2d:ab:
45:11:e0:43:26:c8:2d:ac:95:07:ab:7a:de:bf:2c:99:6b:45:
9c:65:48:20:e2:c8:91:b5:93:41:51:d9:df:06:88:eb:ee:e6:
12:cb:bc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:06 2025 by rpki-client