Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: oxfOsbNIbZshDNXFUvUpkGFJCqHrNHE45j+7hbwmXPI=
Subject key identifier: D4:88:2B:A5:9A:FE:10:33:A3:9A:21:76:79:68:66:80:F3:0F:A7:BA
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 019A4EF53982415537DDFE918466417A9759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 07CE
Signing time: Tue 04 Nov 2025 13:01:25 +0000
Manifest this update: Tue 04 Nov 2025 13:01:25 +0000
Manifest next update: Wed 05 Nov 2025 13:01:25 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: lvEMj1pSFfbLo5CRDHSp2ZYHB0JWuSxt3ecPagwrUQI=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:39:82:41:55:37:dd:fe:91:84:66:41:7a:97:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Nov 4 13:01:25 2025 GMT
Not After : Nov 5 13:01:25 2025 GMT
Subject: CN=d4882ba59afe1033a39a217679686680f30fa7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:41:df:d5:31:53:74:1e:62:bc:4c:28:a0:
b6:07:2b:be:60:94:99:b9:99:9a:22:32:fc:3f:73:
98:c3:6d:5c:87:c6:06:15:8f:fe:26:6d:bd:70:49:
23:99:b9:74:bb:88:3f:cd:70:81:24:69:3a:7e:75:
74:27:ef:01:77:c8:ce:6a:7c:cc:d0:c5:b2:ea:9e:
73:4e:ec:86:09:23:c0:59:48:00:91:c7:39:0d:97:
a1:ac:b7:3b:ce:de:d8:ca:9c:7f:8c:ad:ec:fa:e6:
64:b1:cd:6b:91:3e:69:19:1f:c8:84:02:0c:ae:fa:
a7:0c:81:2a:08:0c:ec:6d:20:c2:9f:de:87:e0:9c:
6d:e8:ac:0f:7c:32:f3:6e:98:23:41:7c:39:91:4b:
31:8f:ed:69:10:c1:95:06:80:34:7f:24:88:ed:a9:
bf:bd:8e:74:67:83:be:0d:96:f9:c2:45:f6:73:97:
fb:cb:e0:ee:46:0b:32:87:dd:cb:7e:9d:c7:8c:59:
1e:9e:18:97:e6:39:a5:09:a3:f6:b7:2e:b5:ef:a2:
0f:bf:b3:26:d4:a2:7d:aa:bf:ad:e8:88:1b:5c:8b:
f3:5a:8e:ee:00:5a:62:f3:27:67:48:95:ba:53:de:
0a:fc:38:c4:25:5b:0b:93:fe:88:7a:e9:8a:f5:46:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:2B:A5:9A:FE:10:33:A3:9A:21:76:79:68:66:80:F3:0F:A7:BA
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4d:55:56:b9:bf:e8:cc:fe:d3:bb:dc:44:f4:78:62:93:d3:
92:0e:99:55:96:9a:07:2d:7a:18:26:3b:b1:a3:da:b6:31:a2:
cd:4e:2d:ab:77:74:d5:7c:fa:01:a0:18:37:d8:71:13:86:57:
3f:1a:e6:b5:1b:f2:65:df:d0:44:0f:1c:72:e8:68:ca:c9:d9:
89:e2:c8:98:ba:cf:ec:29:31:dd:ed:ab:ff:27:d5:a2:b4:06:
56:ca:3a:0a:07:cf:9c:2f:10:fc:20:aa:d9:19:7f:3c:50:fc:
93:be:d6:e9:7c:e9:61:85:11:6d:2c:ee:7a:80:40:5a:5c:ea:
84:fa:36:c8:57:64:cf:c6:8a:61:a6:23:23:c8:d5:b7:f8:9c:
6a:a6:7d:38:bf:d7:ab:7c:1b:4a:d7:73:54:a7:b0:63:af:d3:
a1:54:f2:5e:93:13:94:f5:f2:da:ef:09:55:0e:9f:9b:9c:4f:
bc:11:06:1d:cd:c3:4c:29:f1:f7:11:ff:77:92:aa:e9:6b:6e:
28:3d:44:c2:09:b5:5c:3a:fb:be:3d:1a:c6:2a:17:b4:ae:35:
71:aa:a4:fc:96:36:94:c1:1f:06:a1:ef:98:bf:a6:a9:75:1a:
fd:23:d9:a9:9a:00:a4:4c:91:82:76:70:54:4a:fb:4c:37:dd:
62:1c:b3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:08 2025 by rpki-client