Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: CS76SvslLd4zauj/rnzr93r90EPq5ZfbMxZ6cgLmTno=
Subject key identifier: 5F:57:7A:73:E1:39:F4:B1:22:28:F9:61:68:24:E6:8D:E4:FE:E6:65
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 019A4E867ECED9A463277988159CB229D25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 1290
Signing time: Tue 04 Nov 2025 11:00:28 +0000
Manifest this update: Tue 04 Nov 2025 11:00:28 +0000
Manifest next update: Wed 05 Nov 2025 11:00:28 +0000
Files and hashes: 1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: VftqhEZR6g3Z9hQmRiV7AS3bi7ZgfOk9LiMyyGDl7LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:7e:ce:d9:a4:63:27:79:88:15:9c:b2:29:d2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Nov 4 11:00:28 2025 GMT
Not After : Nov 5 11:00:28 2025 GMT
Subject: CN=5f577a73e139f4b12228f9616824e68de4fee665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:12:11:07:d9:3c:8b:1c:c5:05:cb:b6:90:16:
b2:6c:2a:44:8f:bd:56:e5:1b:c9:d8:28:a9:e0:c6:
7a:ee:d8:de:8c:0e:d7:69:b3:dc:f9:60:37:6b:5b:
50:bf:d3:54:66:74:f7:d9:77:d3:f4:40:63:20:90:
4c:65:99:4c:c8:a2:4a:3c:f6:c8:c4:c0:e4:d3:7a:
28:35:a0:b3:39:b9:89:7f:24:e8:5c:43:0d:19:d2:
3f:6b:e1:e3:d9:50:be:d0:51:17:ee:14:6d:f9:f4:
c5:e8:4c:43:83:af:bc:b6:ce:83:1c:0a:91:18:d6:
73:73:2d:a2:19:3d:5b:c2:c6:4e:78:e2:c7:bd:25:
e5:5f:32:35:2b:df:94:b8:f2:cc:e5:56:d8:3a:37:
d7:a5:22:04:20:38:1c:f0:73:64:30:80:f9:b7:b6:
32:dd:ea:70:a7:09:42:d6:d6:9f:b1:de:58:41:11:
86:9a:96:98:a3:66:5d:1f:f5:95:ce:01:f3:ec:74:
59:6c:72:c5:4a:e6:c0:b8:a3:1d:b3:c8:f3:b1:39:
29:9d:7d:a6:83:c2:66:ce:ac:41:9d:6b:27:08:38:
33:8e:79:7d:f3:d7:c9:bc:3c:4c:45:31:0f:51:0e:
ad:7d:9b:1e:78:a1:fa:3e:4e:db:af:75:a3:e8:9d:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:57:7A:73:E1:39:F4:B1:22:28:F9:61:68:24:E6:8D:E4:FE:E6:65
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e4:d5:62:be:24:a5:ad:84:3a:e2:6e:c1:11:72:e1:3e:20:
db:89:ea:d0:55:ba:9b:3c:97:80:6d:0f:b2:f6:c2:45:7b:67:
4b:8d:62:b9:47:77:18:1b:bf:50:89:08:f2:79:72:24:22:ff:
90:f0:de:fa:4f:cb:2d:5f:6d:d4:2c:60:cf:ed:9d:0a:9b:c7:
84:f9:24:6d:54:3f:9b:b7:29:40:20:dd:96:39:28:40:c9:9a:
5c:83:22:71:e4:54:33:38:82:91:b7:d5:81:1e:55:b2:7c:9e:
b4:80:3f:44:16:9c:47:97:9d:4f:90:95:3c:c7:fc:82:6f:06:
7e:32:cf:44:5b:bd:b0:a6:60:a6:85:d9:39:6c:f2:4b:cb:db:
cc:7d:7a:d8:ba:78:f9:e0:54:b5:eb:ec:d9:dc:ed:d9:e9:69:
6e:9e:0d:86:64:bf:9f:9c:72:4a:b0:fb:f6:d2:1d:19:78:b2:
bd:78:eb:1b:13:7d:2a:92:b2:e7:94:4a:a3:10:e6:30:68:f3:
cc:59:8b:93:14:bb:c3:20:b3:32:8b:ce:a2:c0:de:52:71:d1:
f5:27:e4:d3:db:31:32:54:2d:6a:b4:28:aa:41:f3:a2:bc:97:
07:d6:6f:79:94:6c:37:b1:a3:3b:62:58:fc:c8:d6:da:3c:e3:
5b:b1:17:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:46 2025 by rpki-client