Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: bApSIg+jaXSL7l/MbZF+LJPP0clb+F4FkdAqF8f0aI8=
Subject key identifier: 37:BE:75:55:51:02:D4:2A:25:AF:C0:A2:45:96:C6:8B:16:72:C1:DA
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019A28C2F003485293F3C1F7A4BF0757D90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 041A
Signing time: Tue 28 Oct 2025 03:00:55 +0000
Manifest this update: Tue 28 Oct 2025 03:00:55 +0000
Manifest next update: Wed 29 Oct 2025 03:00:55 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: r8o9SMNfHhfuv42h7X5ELBY7oMrNOrxB9oxpyp4aFcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:f0:03:48:52:93:f3:c1:f7:a4:bf:07:57:d9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Oct 28 03:00:55 2025 GMT
Not After : Oct 29 03:00:55 2025 GMT
Subject: CN=37be75555102d42a25afc0a24596c68b1672c1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:15:f2:72:cd:2f:c1:89:24:02:09:4d:e5:
66:91:85:79:51:81:cc:06:26:e8:03:91:c8:d1:f4:
49:54:e5:3c:ca:f5:5f:89:74:95:9d:d0:17:72:6e:
e9:77:16:45:37:0c:1a:2b:fc:c1:eb:49:77:64:58:
63:7b:fc:7a:d3:9b:c2:08:8b:0f:51:d6:50:9f:15:
c9:be:f7:6e:f6:9a:e5:aa:6d:48:09:73:cb:d0:a1:
22:92:6e:cc:53:62:7b:a4:e9:96:d2:dc:7c:87:f5:
95:00:69:eb:e4:cd:bb:4c:82:18:e4:5f:43:33:2a:
04:e0:a5:06:a0:9a:e4:7a:72:c8:cb:1c:51:e3:f8:
63:9f:d4:31:86:d6:55:a8:71:6b:59:2d:96:a8:4b:
13:02:38:71:ee:7d:cd:72:b3:e2:41:bc:ae:20:1d:
83:86:61:31:05:fd:d2:c3:3b:55:f1:f0:42:f8:4a:
94:db:26:38:48:25:93:1d:87:3d:2e:96:50:69:c1:
3b:ea:02:95:fa:c9:dc:ff:4c:77:1e:01:fe:c0:4f:
dd:b6:9a:a5:36:9c:ce:13:7d:8e:66:26:f3:57:f7:
85:16:d4:a8:26:ea:97:3a:c5:8d:8a:a5:e3:34:0f:
b3:3d:b3:a0:21:8d:70:b4:f5:a3:67:50:42:49:73:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:75:55:51:02:D4:2A:25:AF:C0:A2:45:96:C6:8B:16:72:C1:DA
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:dd:6a:e6:ff:3f:b9:38:c0:13:3a:d7:a3:62:aa:6a:41:15:
38:27:52:18:a1:95:cb:81:93:c8:dd:dd:28:45:57:c5:6a:d5:
f7:9e:97:38:f7:0b:08:40:a8:e2:ba:67:40:c1:b3:14:1b:72:
d1:e2:f3:56:e9:6a:51:64:1d:82:61:03:9b:31:71:11:a0:03:
95:9d:a5:a8:53:ad:33:0c:da:ef:cb:7a:5b:03:8e:94:63:d6:
9b:3a:cf:1d:35:e0:04:f6:a3:34:9c:0d:a7:a9:78:1c:09:e0:
ea:54:45:d8:10:22:e6:f9:3e:1a:f5:78:72:a9:3e:53:19:4c:
85:a0:4d:0c:7c:fd:e3:3f:60:c6:c1:54:91:44:41:52:d8:85:
e7:50:7b:83:60:4e:aa:01:1e:35:4c:cf:ab:75:3e:9a:56:78:
55:17:74:4f:2a:57:8d:83:3d:ec:f1:27:ef:7c:0e:d5:60:8c:
2b:00:36:47:f8:06:c2:24:97:97:e4:85:6d:05:75:e3:52:0c:
ad:8b:d1:80:f0:18:18:3b:54:6b:76:d1:df:d2:51:bc:4a:de:
f7:d4:96:82:c7:dd:e1:5d:80:8c:7c:a2:9a:4f:72:c2:d9:a3:
e8:7d:8c:89:d5:ef:3e:2b:79:08:39:56:2f:52:af:d3:25:65:
33:be:87:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:49:52 2025 by rpki-client