Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: LSaDydaPrrxpGbCleqlE3uM4Mj32U1cjDOHHNQnpZSU=
Subject key identifier: 53:F0:A0:9F:A7:26:AD:8A:ED:4F:41:6A:58:6B:30:10:CD:81:E5:4F
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 019A70A501EECBD0D3CCC3E53D76BEF614DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 0ED3
Signing time: Tue 11 Nov 2025 02:00:53 +0000
Manifest this update: Tue 11 Nov 2025 02:00:53 +0000
Manifest next update: Wed 12 Nov 2025 02:00:53 +0000
Files and hashes: 1: TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa (hash: nQWhe0fyffCN2quQfKSQ56T2rfLrYZUxC64fwkrxixE=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: DYH/GH4uabIDQvCUU0THj+XR1cVZ9wiCuXBLNM52jsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:01:ee:cb:d0:d3:cc:c3:e5:3d:76:be:f6:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Nov 11 02:00:53 2025 GMT
Not After : Nov 12 02:00:53 2025 GMT
Subject: CN=53f0a09fa726ad8aed4f416a586b3010cd81e54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:05:44:ae:ce:9d:a7:15:b6:0c:4c:04:b8:
f9:3d:f1:2f:f8:27:b8:41:7a:da:87:25:86:fa:b8:
87:7e:de:fd:b7:72:0e:ca:ec:4a:bf:b2:65:4c:dd:
25:04:dc:fd:98:b6:60:cb:29:4c:59:ae:8d:f6:ec:
bd:76:77:cb:33:29:c5:a6:e0:8c:27:74:12:70:70:
b3:78:d1:88:4e:77:66:77:80:fc:cd:35:e1:51:3d:
10:cf:34:f3:22:d7:f4:71:61:84:d0:62:95:dd:28:
c9:e7:f7:77:e4:b6:5a:38:e8:c3:e4:12:8f:6f:77:
97:0e:89:5c:2e:15:75:54:d3:5e:76:aa:fd:da:7a:
8b:5b:5c:c5:92:ba:da:0d:03:30:bf:8b:6c:89:74:
18:54:58:8a:fb:bb:63:8b:b2:e4:c3:c3:38:f4:94:
d7:68:f3:0c:38:1c:6f:9c:87:a3:8d:b3:60:fe:f0:
0d:26:04:7d:04:85:48:6d:fb:dc:4b:dd:93:5c:46:
64:06:2b:ce:fd:87:73:d8:0e:ad:7c:b9:5b:ef:98:
61:47:54:9b:1b:01:f6:30:a3:25:44:b0:4c:99:be:
c5:17:a4:8f:30:fd:18:93:60:68:2f:e6:ff:3c:e2:
4d:5a:f1:08:50:66:c9:c8:56:dc:dd:08:f5:42:ce:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:A0:9F:A7:26:AD:8A:ED:4F:41:6A:58:6B:30:10:CD:81:E5:4F
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:90:58:51:1e:dd:40:43:a7:f0:87:b4:aa:29:5a:28:ee:c3:
8c:e7:8e:9d:d2:7f:de:88:be:a4:d6:18:4a:a5:d5:74:67:b1:
78:27:b5:40:6a:87:59:d1:d2:31:fa:6d:07:73:23:3c:94:83:
50:96:d5:c1:1a:ee:8d:3c:97:15:76:41:2c:04:20:27:81:23:
2d:0f:0d:0b:b2:75:cc:ab:33:5f:0d:ea:13:99:6d:83:80:72:
40:48:97:ae:d4:b3:a9:df:9d:6b:57:fa:f4:06:dd:2a:41:d3:
d8:fb:e9:ef:21:6c:5b:40:86:dd:0e:1e:83:3f:2a:cf:f3:ac:
d6:bf:43:cc:d7:9f:1d:2f:8f:1d:16:d8:6d:1b:b2:aa:20:4c:
51:97:a7:73:03:87:27:73:86:32:1f:e9:a7:b9:a3:d0:b4:3d:
c4:79:f1:1b:3a:ed:80:2d:cd:9d:be:79:25:f8:68:c8:ca:bf:
bb:07:4e:ed:f2:df:5a:ae:c2:93:fc:cd:6d:cb:f2:a9:71:7e:
50:65:b1:c4:c4:2b:72:6d:e9:97:ad:fc:bd:07:74:3d:38:5e:
48:dc:7d:64:d4:2e:a7:f4:97:f3:c1:b8:1f:5c:79:1c:fe:12:
c1:27:2c:ea:ea:01:1a:cd:61:9b:7b:8d:47:36:ee:b2:77:7b:
15:62:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:19 2025 by rpki-client