Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: WHG2/GioSeakwdEtMgtFW6Hvocd2+6C3mfmZs2v+Y7c=
Subject key identifier: 4D:69:A6:61:FC:75:AA:AA:B0:43:A6:55:EA:B3:C8:0A:67:BE:74:91
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019A522C83083282F45430309207C63047AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 1730
Signing time: Wed 05 Nov 2025 04:00:39 +0000
Manifest this update: Wed 05 Nov 2025 04:00:39 +0000
Manifest next update: Thu 06 Nov 2025 04:00:39 +0000
Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=)
2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: rCunnRohSeBvLQpXSs2mEzxzpr0DmaSH0QLzuJRtkIM=)
4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:83:08:32:82:f4:54:30:30:92:07:c6:30:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Nov 5 04:00:39 2025 GMT
Not After : Nov 6 04:00:39 2025 GMT
Subject: CN=4d69a661fc75aaaab043a655eab3c80a67be7491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:fa:0e:38:c7:2d:81:15:88:5f:2d:7e:06:
6a:d3:0f:bb:f6:7c:04:de:2a:2d:9b:00:73:56:8e:
17:3b:6c:7e:bf:c0:72:7d:f6:de:c3:dd:ca:1f:d9:
dd:7f:9d:8d:8b:f1:04:a7:5e:b5:f7:ab:0c:4f:f8:
98:0f:0d:f4:e8:22:c6:c7:4f:a6:f0:3a:3d:e1:50:
5d:39:76:55:b2:7d:ef:a4:9e:fc:63:14:b8:59:11:
2f:ba:96:8a:41:0c:93:ed:31:44:fb:b6:5c:0a:ec:
94:5b:a4:c1:bd:cc:a0:a9:d6:15:43:e6:9a:61:50:
ed:b4:45:2c:26:79:2b:f7:b3:a5:ef:aa:85:ab:b5:
ef:91:7c:89:a2:d5:e4:d6:6d:b1:bd:c7:bd:7b:86:
0f:ea:f9:03:60:31:55:33:61:c1:02:bb:71:30:40:
e7:93:00:7f:44:bf:06:dc:25:ca:e4:6a:8f:e0:a2:
1d:38:4c:b3:4b:a1:07:e1:c1:f5:7e:13:9e:20:54:
da:84:24:c7:1d:97:92:ee:7f:5b:96:6e:fb:e4:96:
25:c8:f2:07:0e:51:68:ec:6b:89:6d:db:3f:e9:a9:
82:e5:f3:93:56:e8:36:10:6f:42:dd:4b:8e:8f:04:
37:b9:e0:d7:a9:f2:4b:ad:2f:12:54:6b:56:d5:19:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:69:A6:61:FC:75:AA:AA:B0:43:A6:55:EA:B3:C8:0A:67:BE:74:91
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:65:6c:82:9f:93:01:b0:db:8e:90:f1:47:22:99:54:c3:
c1:97:33:75:6b:20:6c:15:e6:2f:3a:3b:17:07:1a:36:b1:98:
40:be:9d:5f:d0:3a:9c:b1:d9:84:c2:ac:80:fe:77:89:f4:99:
d4:cd:fa:4c:bc:90:6c:bb:4f:99:e2:7f:a1:b2:a0:48:56:af:
ce:bd:ec:03:6a:43:d3:b6:14:83:a9:93:62:94:8d:b6:34:ff:
e0:c3:40:e3:e7:c8:4b:bc:3a:93:d4:5d:c8:39:d1:61:bc:00:
49:f3:40:9d:fb:01:53:bb:37:09:1b:09:ab:a7:5b:2e:b9:24:
d3:c9:f0:71:9c:b8:aa:69:5c:c7:e6:58:6c:3a:a7:11:86:fd:
fb:85:c2:e8:02:2d:07:57:d2:2a:44:be:73:c9:94:f3:48:a6:
94:3c:03:f2:99:9f:58:ab:25:71:d8:06:ed:5a:fd:af:55:56:
1a:50:75:77:5a:dc:47:68:cf:c0:e1:f0:75:ac:bb:f1:f3:ab:
99:23:90:f0:29:3d:c4:ef:7c:fd:f7:9e:2f:4a:b5:14:6d:7b:
c6:b9:1d:59:72:d9:34:bc:e6:42:f4:cd:01:7e:54:99:4e:e4:
e5:8a:48:fb:46:89:74:23:50:d6:7a:75:09:e7:7e:fc:91:84:
74:21:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:40 2025 by rpki-client