Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: dU4HTkpneSCQYN7stS+L6kZ/aqBVHRTNhZoyuoHnrkk=
Subject key identifier: 31:FD:9F:6F:63:6F:E0:24:06:A5:83:BB:AE:75:1D:EE:6F:FA:AF:51
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 019A4DE1F358C94BDEAA1740C37FCB55F0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: mNhzGK5sYDYXuMxJjPuOCo5V0q1n0sAxuVVfwYdDJwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f3:58:c9:4b:de:aa:17:40:c3:7f:cb:55:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=31fd9f6f636fe02406a583bbae751dee6ffaaf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:72:a6:27:6a:b9:48:98:88:49:ba:4c:b7:
1c:58:e5:16:3e:d5:33:32:e9:37:07:35:86:db:16:
da:28:4f:46:5d:8c:f7:8b:44:5f:a8:b2:e9:d0:74:
7c:3a:69:56:fa:14:57:40:58:1f:2b:5e:66:36:86:
55:33:97:cb:19:93:17:ab:8e:04:77:3f:cc:77:cf:
af:53:72:04:a2:07:ba:36:95:4b:c4:67:d9:81:75:
b9:55:a9:eb:ad:07:e2:13:2c:ea:1e:7f:fd:5a:5f:
3e:ac:30:13:6e:a0:6e:b3:4d:f6:fd:d2:03:c5:2d:
f7:8c:10:73:84:66:12:1b:31:16:30:b6:51:81:f0:
ff:c9:39:95:a7:30:5b:72:4e:a6:3e:d9:36:a6:ba:
35:d6:fe:be:12:69:70:61:4c:3f:4f:b1:07:f6:ca:
4a:1f:b7:93:3f:c6:40:04:3e:4e:6b:ec:f4:d9:c5:
85:9a:92:95:1d:ca:4c:58:83:83:07:f1:48:83:a7:
f4:a1:37:c0:86:6e:36:89:59:7c:56:7a:55:3f:69:
b5:97:e1:17:95:41:fd:bd:cb:f5:b6:7a:ff:27:fc:
5c:fd:8d:76:0b:a7:83:de:69:65:ec:47:56:c4:18:
eb:57:94:51:c3:4f:88:ab:67:fb:58:61:bf:3b:e7:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FD:9F:6F:63:6F:E0:24:06:A5:83:BB:AE:75:1D:EE:6F:FA:AF:51
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5d:0a:ae:f2:04:1e:cd:6e:5d:58:b1:5f:cd:4b:ff:fd:75:
76:a6:94:b2:ac:74:5f:79:7f:64:78:54:97:df:cd:49:f2:0d:
b8:4e:53:bf:25:24:b0:d7:61:d8:9d:d2:d1:23:4b:a8:ac:26:
78:3d:cf:95:27:1a:3d:e6:b9:48:69:bd:69:d2:96:56:43:aa:
d3:0e:05:b8:e4:cb:ad:a8:54:34:24:09:0c:df:4f:6f:42:b4:
a5:24:d4:e7:13:ed:e9:f2:3f:f1:bf:39:52:91:d8:84:d5:0b:
ed:7f:9f:ba:da:9c:58:fc:05:f7:b3:57:00:0a:7c:91:19:08:
51:60:b1:89:df:29:fe:52:ec:9a:9f:53:82:0a:44:41:dc:03:
4b:67:7e:ba:54:35:12:8b:16:77:88:b9:54:99:8a:c7:86:98:
b8:f0:81:41:1c:c9:ab:a7:7e:eb:0a:56:36:23:60:14:41:db:
bd:0c:7a:c2:8c:12:c2:2b:96:73:6d:c2:56:36:2f:65:6e:41:
59:98:89:6c:95:1d:6b:25:5c:a7:96:bf:a8:30:8e:1e:89:c4:
07:af:52:16:6a:f1:4f:56:22:82:81:cb:e3:b3:8c:e7:12:e7:
3d:41:ac:49:9a:f5:14:c3:b4:2c:cf:9e:d3:b1:af:a8:00:ca:
3e:d3:b4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:47 2025 by rpki-client