Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier: Kq5eP5VhpsFRIU3Q3fBAw8mHBohmD+v39ZS5+yTkV8A=
Subject key identifier: 25:CB:4C:B4:B1:23:71:E0:04:5C:9A:AF:6C:73:A4:64:9C:11:C5:FE
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 019A4F62D199012DDE4B11DA71EC0C648198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number: 16E1
Signing time: Tue 04 Nov 2025 15:01:07 +0000
Manifest this update: Tue 04 Nov 2025 15:01:07 +0000
Manifest next update: Wed 05 Nov 2025 15:01:07 +0000
Files and hashes: 1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=)
2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: Cfu2WDQP+7IwkqlBYBTUMOKhr45+E6YL6/RhknZ72Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d1:99:01:2d:de:4b:11:da:71:ec:0c:64:81:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Nov 4 15:01:07 2025 GMT
Not After : Nov 5 15:01:07 2025 GMT
Subject: CN=25cb4cb4b12371e0045c9aaf6c73a4649c11c5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:09:34:c1:32:c1:0e:4c:30:82:c4:9a:93:
df:cf:32:ca:dc:2f:ea:71:54:9a:58:76:40:86:d6:
d3:5e:4d:cb:b1:80:4a:ce:3f:1d:28:6a:d0:e9:b6:
b6:41:cc:36:55:52:4b:df:47:fb:e3:60:54:03:1f:
39:ed:dc:5e:1d:bd:5a:0a:f0:da:9a:c1:ca:53:e1:
b4:4b:c8:3f:48:a0:00:69:48:c5:b7:0d:ba:8c:90:
b6:72:b9:b4:59:9e:eb:9e:dc:b2:fe:fb:d9:7d:64:
dc:4c:de:10:49:d2:4f:3b:4f:69:f5:82:83:60:af:
4b:cb:1c:7e:b7:21:b5:eb:ec:f8:c2:12:4c:ee:0e:
f6:54:0b:bc:33:e8:b4:b3:a2:20:5a:7a:0b:ef:d0:
5d:8b:42:67:0e:57:0b:8e:5f:02:ce:5e:c4:b7:b2:
5e:59:4b:5d:86:2e:29:68:7f:1b:a3:fa:3b:21:64:
eb:ad:12:c5:a6:6f:38:ea:ad:3c:74:d8:10:8d:75:
2f:ba:40:e5:6e:c4:0e:e4:2c:4f:1e:54:a4:f3:05:
0c:b0:8d:14:a0:17:59:de:8d:4a:57:2a:85:72:86:
ee:df:4e:33:14:51:df:c4:d3:54:1a:84:75:f3:39:
8d:20:f4:e5:0a:f3:3d:56:3e:46:c9:36:b4:9d:68:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:4C:B4:B1:23:71:E0:04:5C:9A:AF:6C:73:A4:64:9C:11:C5:FE
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:91:27:51:b0:6e:cf:c1:da:21:ad:59:44:05:ed:7c:18:8e:
dd:e4:79:7c:02:4c:b3:9e:2d:21:44:89:14:50:2c:85:b3:d4:
94:fa:d8:8a:79:63:86:52:37:fc:f9:11:db:07:c3:17:e0:85:
18:0a:4d:9b:0f:c3:44:cc:5f:89:db:7d:96:aa:05:4a:50:05:
21:c3:03:f9:e8:11:80:b7:b9:8e:0c:a0:29:d5:02:10:4c:49:
75:60:24:92:55:37:eb:f2:3f:31:cf:b1:f3:03:39:01:d2:f8:
dc:93:ff:80:1f:fc:1a:2e:e3:b2:be:40:d2:d4:c0:6b:32:03:
89:0d:73:10:19:82:ea:51:fb:47:a1:9d:2e:7e:a5:62:82:91:
55:df:7a:7f:9a:40:67:b2:3f:8d:db:40:46:06:0c:fd:79:00:
d2:b1:7c:bf:d2:86:41:33:ee:0f:79:3b:32:0e:de:48:2f:10:
03:10:26:37:17:12:f4:92:33:2e:d0:d3:46:98:51:8c:bd:c9:
77:a0:c4:88:c5:76:46:dd:bd:e7:9d:d3:64:ff:76:28:e7:e4:
a0:ad:d7:98:a0:83:a0:b2:95:38:8e:37:72:30:76:2f:38:ce:
c1:21:90:8f:1a:3e:62:a8:36:ea:df:d2:bf:f3:1a:12:8a:0c:
cf:63:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:18 2025 by rpki-client