Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: DSHt28bofSg3eVVYxMpF+y5xGYBNzOOdEVm9LmTLEVU=
Subject key identifier: 4E:0E:F4:6A:89:24:43:55:F9:CC:D3:44:7B:B1:67:02:88:74:15:8A
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 019A5187E7A6DC9DE70581C642DE869D0770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 0777
Signing time: Wed 05 Nov 2025 01:00:52 +0000
Manifest this update: Wed 05 Nov 2025 01:00:52 +0000
Manifest next update: Thu 06 Nov 2025 01:00:52 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: zZqqPKhUlG2lwUAAncz5zqvh3UuWyYyuGc9ZmOSIOrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e7:a6:dc:9d:e7:05:81:c6:42:de:86:9d:07:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Nov 5 01:00:52 2025 GMT
Not After : Nov 6 01:00:52 2025 GMT
Subject: CN=4e0ef46a89244355f9ccd3447bb167028874158a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:63:ae:1c:0f:cf:e4:56:b7:3c:5e:51:f5:
51:f7:6c:9d:9e:80:ed:73:f9:5c:5a:1c:aa:b5:5b:
27:40:d2:de:ba:c8:cd:f6:78:dd:13:b1:01:c1:f9:
08:5d:26:d3:32:26:5d:a3:1a:e8:36:b5:17:0d:b2:
c5:fc:d6:39:89:ff:d8:ed:fe:67:52:96:a3:92:68:
aa:23:4e:7b:b0:12:06:1f:7d:01:6b:49:79:d2:78:
2e:4c:95:6d:14:ef:16:ff:6a:30:1a:d3:5d:a3:f8:
fc:25:7a:02:d1:64:81:8b:19:48:6c:07:8f:27:34:
78:29:09:e3:24:03:2a:3c:2c:50:0d:61:04:a8:b0:
83:6c:04:0d:d7:a9:18:54:ac:c5:d5:13:1f:9a:03:
65:5d:ce:42:53:34:61:c8:6d:3d:09:0d:81:f7:37:
26:45:1f:4a:e6:f7:57:62:1d:a7:93:4d:da:44:8e:
7c:52:0f:be:bc:77:87:21:67:95:a5:97:ca:59:52:
ac:88:29:ca:cd:2e:c0:46:3c:a7:18:c8:0a:a6:c2:
f0:72:41:ff:05:e8:bb:64:24:3b:fc:00:7a:a3:4b:
7b:4f:01:5b:bd:e7:b1:e5:d5:9b:50:06:4f:ce:01:
39:2c:ae:b3:80:3a:64:cb:9f:18:0b:b4:83:b8:d3:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:F4:6A:89:24:43:55:F9:CC:D3:44:7B:B1:67:02:88:74:15:8A
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:72:35:f8:f4:3d:fa:be:32:68:6b:05:b3:d1:82:0b:0a:56:
5b:c3:93:64:a7:08:bc:ec:69:c7:06:32:e3:8a:f8:48:31:cc:
10:dd:1e:d9:12:93:67:58:44:68:39:41:b2:8d:17:9e:91:86:
f7:4f:11:2c:60:d5:7c:e9:2f:36:cc:17:90:0f:1e:7c:c0:19:
d9:d5:00:8a:62:3f:20:3f:bd:33:29:ca:b6:ae:77:bb:78:96:
25:64:2a:76:6d:d9:19:f3:85:04:22:7a:67:b4:81:d5:da:f1:
27:d2:cb:37:d2:f4:c8:d0:bf:50:c4:95:1c:50:e5:2f:bb:00:
1a:56:35:2a:e0:d9:6f:a2:d2:5a:14:a1:70:4e:4c:0a:58:3e:
a7:ba:32:71:65:c9:23:7e:15:e9:50:e9:1b:c4:e6:0c:ad:41:
3e:16:1a:52:0b:30:33:fd:81:f7:60:22:ca:72:8c:af:06:6c:
9a:eb:44:bd:f2:3d:cc:98:1b:ff:ca:a9:0e:b5:60:e7:19:a3:
c1:9c:5b:7b:7a:15:d8:ce:69:69:c2:80:9d:e8:ad:de:ee:20:
d0:a6:60:79:20:7a:e5:89:04:d8:32:fd:b3:7f:cd:1e:ef:48:
f2:d8:86:fd:63:bd:a2:50:45:1f:c4:31:54:8e:f9:b6:33:18:
38:41:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:07 2025 by rpki-client