Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: XnW32zInBU+EWeRLrqso7rkYqUBhCXsEP1ArK41mX2c=
Subject key identifier: 0B:17:31:E0:C4:C6:08:A9:C1:F0:E1:55:15:97:87:C8:77:5C:88:19
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019A53AD0389C6A1EEB849A081CCFBCE2DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0692
Signing time: Wed 05 Nov 2025 11:00:38 +0000
Manifest this update: Wed 05 Nov 2025 11:00:38 +0000
Manifest next update: Thu 06 Nov 2025 11:00:38 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: XYKk5aK1zDhO4xkuOJ9NcXwQPN6G4XcGwOlTGLAL5F8=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:03:89:c6:a1:ee:b8:49:a0:81:cc:fb:ce:2d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Nov 5 11:00:38 2025 GMT
Not After : Nov 6 11:00:38 2025 GMT
Subject: CN=0b1731e0c4c608a9c1f0e155159787c8775c8819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:6d:26:cc:a2:f2:69:7c:5d:d9:0c:fa:c0:
5f:3e:fa:02:f3:21:ec:cb:1e:ee:49:e5:c5:66:86:
4e:7d:23:f7:7c:8a:66:bd:62:56:38:e3:2e:d6:e2:
aa:8a:19:93:20:e9:52:a4:cb:5e:77:a0:b3:91:3a:
59:1d:05:f0:ea:14:89:87:18:34:22:59:cf:f3:0d:
a6:f6:0d:71:0d:c0:ba:92:6e:cb:37:0e:ae:2c:d5:
a6:e8:68:c6:c0:32:01:c1:37:90:68:dc:4d:96:ab:
ae:54:fe:ed:ee:0f:be:8a:7c:89:bf:3b:e7:7f:92:
50:45:f4:83:43:9d:aa:24:ee:31:fe:1c:9c:45:9c:
7b:30:4a:fc:2e:04:f3:fb:79:91:b7:c5:2d:23:f4:
99:e4:72:38:14:e7:f1:58:0b:aa:90:59:2a:45:a8:
5a:1d:37:aa:74:d8:4e:3f:05:e1:88:b6:8d:37:e7:
e9:9b:4b:22:66:1e:7e:f1:ef:dc:fc:41:a0:d7:83:
3d:4c:a4:b7:ff:21:c9:25:d3:5f:de:9c:7d:4d:7e:
ce:3a:06:5a:84:4c:66:a2:d6:d5:4f:59:9b:97:7a:
e5:93:12:08:96:db:4e:3f:62:04:4b:76:ec:ae:b2:
7e:50:92:87:45:e8:f8:a2:f4:78:e5:ae:74:d2:a9:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:17:31:E0:C4:C6:08:A9:C1:F0:E1:55:15:97:87:C8:77:5C:88:19
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:16:5b:73:de:bd:c0:89:29:f6:bb:b8:93:75:61:43:b7:9c:
bd:fe:9c:2d:f5:6e:3b:d8:ca:96:03:72:b7:05:42:e0:4f:f4:
e0:3a:b0:c6:d5:21:ce:d7:83:4b:09:53:9a:50:00:a1:4f:0e:
00:11:83:8d:74:21:21:44:e7:e5:f4:d8:94:36:76:a2:13:e2:
07:19:1f:d6:e8:46:65:ee:e7:f6:23:f3:ea:95:44:39:ab:30:
b1:33:b5:96:fc:bd:e4:08:f6:e3:4f:fb:92:5e:a0:96:55:84:
25:70:3b:33:59:d1:54:0c:ec:41:ed:47:38:3c:fe:0a:80:e6:
73:5d:92:e3:74:35:6b:b8:78:a7:b0:6e:7c:ce:3e:5c:6a:86:
b1:a1:c7:d4:11:19:23:28:2c:82:a4:59:85:81:cd:ac:af:53:
fd:ad:5c:0a:6d:df:9d:7e:a7:09:6e:10:bc:b2:81:65:d6:22:
fa:c3:93:cf:47:05:b5:c9:3c:77:d4:8f:b4:3a:32:ca:ed:89:
b1:09:3d:88:9c:8e:28:cd:59:9d:e9:a1:63:a9:2b:73:f1:d4:
b0:b7:d8:e6:fb:02:a3:57:e4:8e:b1:5b:8a:e2:27:b0:1c:94:
a7:7a:f3:1e:e9:df:8f:92:7d:cc:bc:ec:d4:6e:19:cb:78:a0:
92:c5:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:19:07 2025 by rpki-client