Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: XW/8SNN0V8pvgTgGwK+MPnGLsZ9gBh9LKPBCGBFF3/w=
Subject key identifier: 07:83:12:DD:36:06:0A:D9:E5:46:8F:1E:D0:BD:FC:88:52:4A:9B:20
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 019922FA2A102F5A05AB8E83BE1915E7F1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 1397
Signing time: Sun 07 Sep 2025 07:00:44 +0000
Manifest this update: Sun 07 Sep 2025 07:00:44 +0000
Manifest next update: Mon 08 Sep 2025 07:00:44 +0000
Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: VjNQAemXKtlkORRJoTj8SOKKdXOr7glznnanov4Tj88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2a:10:2f:5a:05:ab:8e:83:be:19:15:e7:f1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Sep 7 07:00:44 2025 GMT
Not After : Sep 8 07:00:44 2025 GMT
Subject: CN=078312dd36060ad9e5468f1ed0bdfc88524a9b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:1f:3b:28:15:89:9e:d5:1f:d4:6d:34:e6:
2b:94:f9:8a:99:47:3e:0e:76:39:fa:ce:af:f0:38:
09:3b:38:b0:9c:88:bc:d9:97:a6:d6:ec:cd:59:87:
57:1d:6f:51:de:49:b9:c5:3a:85:f2:82:3f:93:2b:
bf:36:0e:3a:c1:86:00:34:01:e4:5d:79:de:b0:b7:
53:22:33:30:c9:6a:fc:65:e4:7f:a7:72:8c:ee:ae:
33:d0:43:b5:75:a0:f9:42:6b:49:d6:17:1c:e5:7c:
8d:2c:ad:11:a0:52:19:06:9c:4f:6f:ab:bf:18:4b:
9f:b6:8f:4c:42:61:e1:bb:fe:f9:fa:34:90:f4:09:
eb:8a:58:4b:ad:5d:80:98:de:9f:62:5f:41:ff:3e:
ce:a8:ef:54:ca:7d:c4:da:c1:45:2d:c9:f9:d2:4d:
4c:6d:c2:07:97:50:10:cb:2b:a6:30:30:56:03:f3:
07:6d:a1:76:bf:b4:55:b3:2d:8f:d0:4e:0f:87:53:
fa:41:8a:af:ec:1b:27:da:9c:77:8b:32:fe:b8:3f:
32:f6:1b:07:71:d5:43:ce:96:8f:51:a3:8d:7f:a5:
5c:30:21:64:ce:4d:1b:3f:bc:e7:c3:2e:29:d6:8e:
80:2a:54:48:26:30:8a:8c:d3:c1:7e:9f:63:d5:43:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:83:12:DD:36:06:0A:D9:E5:46:8F:1E:D0:BD:FC:88:52:4A:9B:20
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a6:4c:c3:d1:58:28:8e:4f:2f:06:cb:1e:d3:0c:6a:30:e3:
e8:57:7c:27:00:29:01:77:db:4e:f7:fb:d8:7e:7f:06:57:aa:
48:b8:09:73:86:2a:b7:84:84:a8:4d:c9:1c:71:01:98:56:d4:
fc:6a:b7:22:85:92:0f:42:ba:b1:10:b8:26:e2:94:75:5a:75:
e5:e5:a6:f4:a2:64:97:86:cf:7f:92:7c:c0:de:e9:11:33:dc:
67:f4:08:ba:40:32:08:55:26:e6:f9:7f:99:ec:69:66:cd:da:
e3:62:87:36:f7:75:cb:4e:2a:ca:f4:b9:76:25:f8:ad:ec:01:
4c:20:8f:a5:94:1a:23:1c:a2:79:af:04:6f:48:75:74:89:9c:
2b:56:55:d5:77:97:f5:8b:de:2d:61:51:7e:1c:23:08:df:59:
b0:0d:5c:96:3a:f6:8f:e8:3a:55:65:e6:cf:0d:6d:41:52:30:
2a:f7:64:c0:06:67:35:ff:93:22:3f:ce:6c:51:85:f9:57:b6:
e4:87:ba:fc:6f:b6:2b:a3:03:f9:0e:93:c9:a0:b2:ab:2a:86:
50:bb:23:ec:64:64:ec:4e:cd:0c:4d:fd:c9:c3:af:6a:a9:6e:
9c:c4:3c:f4:d5:cf:8b:0a:25:30:7d:31:4e:f1:03:fb:b8:22:
90:da:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:08 2025 by rpki-client