Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: mnu7u7zB08gWj6j6nXDcuXGS1Y82nUEpibyXcibVZf0=
Subject key identifier: 1C:8A:3A:61:02:C9:41:E3:00:21:D2:A5:8A:C2:DD:6E:FA:1D:D9:F9
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019A72259FE26F21C12B10AD4E0ECA9226BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 05F5
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: SRqI2jPBgGvRCx5l4eHOQGWWCRmKbxvRa7wOAhmrxlo=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9f:e2:6f:21:c1:2b:10:ad:4e:0e:ca:92:26:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=1c8a3a6102c941e30021d2a58ac2dd6efa1dd9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:6c:61:db:c5:d7:fb:72:a0:a8:d8:24:12:
f3:4f:82:7b:7c:00:d7:15:f4:7d:15:57:36:b4:ae:
57:d2:8b:b5:42:ab:ed:e8:b0:9f:39:2a:3c:fa:6c:
62:0f:84:c6:a9:cc:a4:32:1d:63:71:5c:fc:91:bc:
fb:b8:42:46:ce:11:3b:fe:73:df:a8:ec:7e:16:c4:
9f:6c:62:bc:9e:40:1b:f6:13:f5:60:93:23:dc:1d:
7c:a8:8e:0f:ab:53:b0:e5:86:d6:51:bd:9b:ee:93:
2e:48:60:c5:6f:52:4e:31:b6:79:1c:fe:b4:ab:1d:
3d:a8:b5:f2:2a:7f:fd:68:4a:9f:4c:5c:97:28:08:
69:65:52:f6:d8:45:45:a5:b8:fe:3f:33:a6:b4:7f:
7f:6c:34:05:43:cd:fd:6a:8c:0f:c6:6c:a5:9b:d3:
9c:26:20:c8:40:77:a7:e4:ea:d7:53:28:75:87:2c:
91:fd:aa:4e:41:60:0c:17:1f:9c:c7:3c:11:b5:a1:
06:0d:1f:d7:17:7d:3e:1e:7e:80:e3:b4:dd:8a:6c:
9a:37:c2:d1:14:0b:ac:26:40:ce:da:f1:c1:42:de:
49:50:c1:f2:db:20:08:72:30:a5:49:69:35:5a:f9:
3b:4d:f7:c5:8a:bc:26:76:2d:c1:8a:93:3b:fb:e9:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8A:3A:61:02:C9:41:E3:00:21:D2:A5:8A:C2:DD:6E:FA:1D:D9:F9
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a4:c4:b9:2c:47:24:f1:c7:82:ca:85:91:7e:a5:4c:e9:86:
12:58:7a:09:87:f7:6b:7f:f5:c8:5f:c5:8c:d3:6c:56:13:6c:
fe:48:aa:2b:5f:2b:f6:40:47:ac:87:46:f3:d7:32:e5:dc:ea:
91:b7:fe:52:a2:b1:c9:e6:02:9f:17:68:07:bf:b3:96:af:d4:
22:1c:27:88:55:e3:18:84:d3:b7:7d:97:f5:2d:be:c1:c7:0e:
44:93:7c:12:86:c2:3a:e8:ea:a1:85:4f:3d:d3:ef:4e:f8:cf:
99:89:e6:d5:ba:86:4c:26:04:e5:86:90:92:f2:41:8d:1e:7f:
6c:88:22:e2:25:98:6d:a8:76:57:ab:77:8b:1c:66:59:fc:2e:
f6:a5:87:23:a6:56:75:a3:45:07:69:8b:9c:cb:71:87:f6:c4:
dd:26:50:40:8d:11:34:7d:7b:a8:ff:e8:2e:26:7d:86:8a:30:
cd:cc:88:f6:56:fc:7e:8f:c0:06:3d:73:45:a8:cb:53:4b:54:
64:10:98:5d:d0:05:ea:d0:9d:37:ae:7c:4c:06:dc:bc:0e:b3:
4a:6a:62:1b:a6:03:7d:2a:f3:7d:c2:15:97:e3:55:60:ab:10:
a0:e9:5f:e0:70:54:34:7b:1a:26:d8:c1:3f:aa:ba:40:95:bf:
cd:a9:c4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:38 2025 by rpki-client