Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: 2mfqHlviU81U+uzHiX1NwS4Y+9xbhE1oiclhXpyKlpQ=
Subject key identifier: E5:86:3B:AC:B5:3A:01:BE:46:1C:1F:F3:0B:BD:67:CA:03:BC:C4:4D
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 019A4F992663E9F2F3A6E0E69A47F0DA44D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:28 +0000
Manifest this update: Tue 04 Nov 2025 16:00:28 +0000
Manifest next update: Wed 05 Nov 2025 16:00:28 +0000
Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: HscrFSY0ISlewJETsyPCW4L4ReWJmks6ocqYA8urA0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:26:63:e9:f2:f3:a6:e0:e6:9a:47:f0:da:44:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Nov 4 16:00:28 2025 GMT
Not After : Nov 5 16:00:28 2025 GMT
Subject: CN=e5863bacb53a01be461c1ff30bbd67ca03bcc44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:ce:04:fb:96:8c:ff:37:d2:fc:c6:f2:b8:
4f:f6:ed:c0:49:55:b7:58:58:b6:54:ff:9f:10:d5:
cb:6f:6d:3d:56:09:5e:1b:da:cc:cb:ab:db:4c:4a:
bc:2a:5f:e5:e1:8c:8f:77:04:ac:ba:6f:77:c9:85:
7e:7a:7e:50:3f:c2:33:92:1a:c9:57:63:d1:f2:d1:
10:f1:fc:09:ef:84:e9:aa:cf:8a:4d:f7:da:16:25:
1e:93:8c:f7:56:23:29:50:3c:a4:db:47:b3:a3:25:
33:3d:6d:86:31:37:5b:8c:63:b9:f5:44:3b:3d:fe:
13:3d:9a:ec:29:e5:96:48:c8:48:9f:03:88:fa:c9:
4b:01:8a:05:66:0c:bb:eb:b8:73:58:65:93:a0:77:
e7:53:c0:dc:d5:50:df:4a:09:d1:d9:7b:12:13:11:
bc:e6:49:a4:80:7b:6b:69:fc:b4:82:dd:02:ad:c1:
5f:0e:8c:5a:e3:30:3b:28:54:5e:d4:fd:fb:74:50:
44:ee:c0:d7:fa:2e:b1:99:40:a8:b3:20:89:f6:55:
20:13:3b:70:68:4b:92:5a:40:ab:9d:76:4f:fc:86:
3f:a6:9b:30:ab:cd:c2:3e:57:a7:26:a2:3d:8c:a2:
6c:f2:05:c8:a2:7d:ce:46:7f:58:92:6c:66:2a:67:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:86:3B:AC:B5:3A:01:BE:46:1C:1F:F3:0B:BD:67:CA:03:BC:C4:4D
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1f:09:ba:71:a3:fe:37:a2:9e:37:07:e0:98:f2:fc:1c:89:
07:ff:03:0d:41:4c:dc:f3:f9:e2:54:2e:ad:05:17:4a:8d:ac:
97:74:b3:1e:34:d9:0c:e1:8a:27:9e:70:41:62:ee:d6:72:6a:
5d:99:d2:58:3e:f0:e8:6e:20:c4:30:fe:8b:1b:34:ec:2a:cf:
0a:c0:5b:6f:c2:08:50:c7:90:ef:4e:c2:11:25:ad:64:4c:79:
95:c5:0b:f9:34:d3:3c:cc:db:1a:cb:dd:f4:50:cb:4d:e5:2b:
bb:a5:0d:13:c8:33:6f:5b:f2:f0:be:e5:54:a0:43:b3:9f:4b:
27:58:09:63:0a:ee:61:e9:f0:4c:48:85:00:85:20:6f:ea:ea:
05:65:42:9f:1a:f7:96:5b:4e:33:c7:b7:0e:d1:23:36:dd:84:
04:5a:b7:ab:36:09:26:bd:91:4a:ee:b6:2b:38:a7:c0:ed:78:
2b:73:49:15:a5:d8:71:ad:82:90:6a:de:82:f1:0b:28:10:a4:
dc:d3:13:73:93:18:b2:64:6f:b3:9a:f2:42:bb:41:3e:a7:e7:
d1:a4:86:36:88:1b:65:56:4d:67:40:cb:4d:59:dd:38:ea:6b:
da:b4:a8:b8:14:00:28:45:bc:05:c9:28:36:b4:fb:15:39:0b:
85:fd:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:19 2025 by rpki-client