Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: Ri1qsOeyVYQqmjtElzV/SuWpby8cjC5w4CrdK03/8JU=
Subject key identifier: A4:5D:2E:39:C9:73:F6:A6:C1:15:72:D0:D6:B7:15:C4:3B:8F:23:DF
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019A4F62CEFECA3D081CF228FB5ACED4A10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 035E
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: U5WoHlXc4QVBy7wNXiQ2I6tNbeEpaAzV1kDa2MoQMG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ce:fe:ca:3d:08:1c:f2:28:fb:5a:ce:d4:a1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=a45d2e39c973f6a6c11572d0d6b715c43b8f23df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:0f:4a:47:a3:cb:39:0e:fd:08:c9:a0:0d:
4d:85:e2:5c:9a:3b:04:a7:1a:6b:4f:5f:8a:7a:2d:
2b:56:e3:7c:50:2d:80:17:f5:b4:51:68:31:41:a5:
b6:f8:b1:4d:de:ac:16:b4:04:56:be:44:ee:2f:b9:
e5:d7:f3:a5:6b:aa:36:23:b0:a7:b8:39:6b:9a:df:
de:09:43:97:03:f3:27:2c:3f:7d:9f:98:15:54:25:
f8:b6:cb:1d:4a:ed:24:04:00:ae:d5:88:79:ac:cd:
99:62:28:5c:d4:8e:23:f7:5e:36:36:f1:2b:0a:5c:
a6:0e:1c:36:7e:70:12:a4:a1:27:95:06:67:c6:31:
61:46:44:70:ae:8e:11:58:61:a5:f0:51:41:66:f7:
2e:f3:15:f7:21:e0:38:36:56:e3:72:6e:03:8f:e2:
99:4c:5e:86:fb:c8:39:ce:cc:bb:c4:f5:f3:48:fc:
61:59:90:11:5f:70:2e:5d:a5:51:3e:b8:e7:62:22:
3f:13:64:67:fc:d4:2c:26:c7:70:e4:79:ae:5d:12:
0e:ee:fc:65:49:e5:8b:c5:c9:ed:3b:0d:14:28:3f:
7d:57:43:aa:7e:3c:bb:ed:d5:51:94:32:1d:47:73:
86:a0:3f:39:a1:39:61:61:c8:88:da:5c:a7:f8:9d:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5D:2E:39:C9:73:F6:A6:C1:15:72:D0:D6:B7:15:C4:3B:8F:23:DF
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:aa:64:55:af:d8:32:89:96:b6:e8:f4:b5:77:6e:c2:b2:
49:5a:9f:fa:f7:22:31:6a:37:4f:fd:b6:45:ec:56:f0:f2:c2:
6e:de:05:38:90:c0:83:86:f7:62:93:82:ce:15:58:72:be:b0:
fb:df:30:c4:90:43:ee:f5:e2:2d:11:d3:37:10:5f:40:ad:ac:
b8:a2:f6:7f:80:e0:25:11:1a:c6:04:79:34:46:67:41:c1:f9:
ec:50:bd:d6:04:8b:b7:b9:4a:c9:14:a8:ff:2a:26:08:c3:14:
e7:1a:71:a5:38:79:98:5a:b1:59:6f:82:f6:74:2b:4f:d0:83:
fd:8f:33:cd:26:17:2f:f9:ef:75:8d:9d:a1:91:b3:f5:12:1f:
a1:80:6f:a9:80:89:f8:dc:66:c7:fb:8e:b5:9c:72:ac:95:3b:
38:ce:2d:53:7f:c2:ce:74:4a:96:f6:97:dc:02:3a:95:0f:91:
b4:de:57:f5:22:37:e2:a2:7f:cb:ed:9e:d4:56:63:a1:40:c7:
75:ad:73:ba:10:53:10:a3:f6:39:78:2e:e3:6d:c0:5b:27:f4:
44:06:6b:73:a3:e3:99:e4:e2:59:dc:54:02:49:3e:91:a8:dc:
e5:1e:6c:95:c2:db:d8:57:67:a1:55:5b:98:cf:3c:de:f0:c9:
0e:63:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:48 2025 by rpki-client