Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: VtyK64sksfgLC5+LnRJ9WmSv6WaCu63QmrNUtMJX/Cw=
Subject key identifier: 08:42:81:83:20:B1:AA:5B:72:25:E6:4F:4E:E1:4F:AC:E2:71:B0:8A
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 019A4F62A1C55A131B6404708772D53D3222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=)
2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: fo0ExgeKQLEKjsfZD0842xWRxQkEf9htzncpktFlzLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a1:c5:5a:13:1b:64:04:70:87:72:d5:3d:32:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=0842818320b1aa5b7225e64f4ee14face271b08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:b8:7b:fb:ec:fc:b6:0a:86:8b:1a:a5:68:
53:19:f4:05:81:85:59:ce:26:4f:5a:a5:35:4a:a1:
74:cc:33:3b:8f:bc:39:4f:47:0f:24:1a:6d:a8:0c:
b9:36:40:ad:ac:1f:12:a9:32:0b:00:36:33:b8:82:
69:ee:85:7a:e3:02:93:b7:68:cc:26:6d:9e:9e:9e:
37:e2:bc:da:ca:c9:44:0f:17:85:af:f8:f7:68:6b:
0c:50:1a:30:8f:c5:6e:da:86:fc:72:2f:51:08:98:
cd:df:d1:f0:bc:e5:57:44:9c:47:00:6c:9a:6a:c1:
6b:c8:78:b4:d8:b4:3a:c5:b2:ed:50:82:8d:e7:90:
ee:e7:02:d7:56:a4:0e:35:a5:0e:aa:91:29:50:ac:
b9:c0:06:11:2e:86:4b:55:22:34:9c:58:a6:90:a6:
dd:7f:3d:e2:6b:cf:02:b8:92:22:5b:f2:6f:5e:0e:
53:18:87:fb:e8:37:ed:fb:b1:a3:44:31:09:8f:dd:
17:38:c6:fc:0b:59:70:9c:79:c6:4e:db:44:db:89:
19:8e:27:01:11:eb:ad:0d:2a:9e:96:59:d2:49:51:
72:32:03:39:ba:bc:76:a8:ed:94:73:35:9b:39:2a:
28:5e:1f:18:8e:03:19:1f:c2:a1:04:39:9c:86:0e:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:81:83:20:B1:AA:5B:72:25:E6:4F:4E:E1:4F:AC:E2:71:B0:8A
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:73:21:78:12:f3:56:05:e4:ce:1d:da:3a:01:6f:6a:20:59:
6f:f4:67:00:13:4d:24:d9:a4:bd:2a:45:7a:19:90:d1:e0:fc:
07:95:49:49:4e:c0:9d:8c:68:f5:e5:a8:44:8f:f6:83:a1:97:
ef:1a:58:56:d5:3c:e0:aa:3c:61:11:b3:4e:a0:92:89:f9:30:
8a:34:35:d3:96:5b:72:3f:54:99:52:b5:97:da:b4:77:f5:13:
03:71:06:c8:0d:34:5f:66:d4:d0:24:b6:5f:bb:09:42:33:5d:
b8:ce:71:a9:e4:37:31:ee:b5:10:0a:dc:85:7c:66:37:f8:cc:
bc:33:32:bb:86:e1:3c:04:bf:09:d3:b2:b8:26:4a:79:b1:ae:
d2:a2:e0:ea:47:33:e4:e9:36:f2:61:53:43:cb:b4:13:45:0c:
c8:d7:36:df:59:ec:de:65:47:c1:09:b4:dc:21:c4:ff:61:75:
55:11:bb:e6:2e:72:49:2c:2b:e3:90:44:14:de:2a:5f:e0:e7:
07:a2:63:27:24:a3:5a:5a:58:07:96:37:9a:57:82:a6:29:31:
db:bc:0d:85:e1:58:27:1d:79:1e:3e:e2:06:98:c0:32:f1:11:
6e:77:b6:99:2c:af:c9:75:e2:06:a9:cb:a6:15:85:dd:3f:b8:
a2:33:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:19 2025 by rpki-client