Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File: zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier: XfNG/ac0Ir7RmH8V/vimMykWTTqSGC1g9MeVzehi430=
Subject key identifier: BD:88:92:CB:3A:DB:31:6F:62:C1:19:F2:F5:B3:EB:C8:AE:80:81:BC
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial: 019A725CEC215BBB42BED9771326EC3493B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number: 02CA
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa (hash: ARirtfJZlvrV6Gh7ZW/gDyQsG60JpK7a/eIqEIlcaSo=)
2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: eo9afThgDn3lkVtvwOkrmO3Q6kcjIilAkRhZ1YUbo88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ec:21:5b:bb:42:be:d9:77:13:26:ec:34:93:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=bd8892cb3adb316f62c119f2f5b3ebc8ae8081bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:a7:1f:53:9d:43:b4:de:ca:9d:86:ac:31:
a3:ef:d3:a5:02:bc:78:71:9b:78:65:31:ac:93:c1:
d5:3c:e1:ad:ca:60:b2:5a:44:f8:3c:29:96:c1:77:
5a:bd:fc:b1:78:b2:41:b5:9e:59:f4:84:48:44:51:
cc:71:15:cb:7e:94:09:1b:70:e9:26:9e:38:c2:9b:
c7:aa:31:18:9a:6c:38:f4:39:f4:d0:6c:a9:07:56:
a5:68:f2:c7:83:5e:55:2a:d1:9c:47:fc:2a:b0:4c:
b6:cc:c8:b7:75:a7:d7:8e:9e:02:4a:1f:69:d6:91:
02:4d:d6:71:71:d3:f9:3d:bd:98:52:ac:0e:9e:d3:
d6:3d:92:66:18:dc:ef:e4:8d:ab:39:3e:ba:8c:87:
37:ba:02:53:90:70:f6:7d:32:85:01:8d:ef:8d:f6:
9a:dc:41:4e:df:d2:bd:75:97:63:77:3d:ab:02:2f:
08:13:2f:8b:1e:df:5c:b2:5b:19:26:cd:0d:8a:76:
0b:15:34:29:e4:97:e8:12:8d:8d:2e:09:8b:5e:57:
a3:d5:e1:12:44:ad:5f:a3:f8:d5:92:cf:c9:d8:eb:
bb:eb:0d:28:b9:de:6a:a6:9a:47:57:4c:06:d0:45:
2d:74:fa:06:71:be:97:ca:f1:6b:c9:85:e6:e4:02:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:88:92:CB:3A:DB:31:6F:62:C1:19:F2:F5:B3:EB:C8:AE:80:81:BC
X509v3 Authority Key Identifier:
keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:de:ad:21:4b:da:7b:86:11:db:b3:3c:bd:51:d7:eb:37:90:
be:b0:bd:6c:93:d7:43:f7:b1:79:11:36:a1:cf:95:94:3b:0a:
b8:ec:89:c1:5b:17:c4:e4:62:a6:c6:52:ac:aa:0b:25:d8:a2:
d5:29:6e:ee:61:41:54:86:04:ce:61:63:3a:17:04:88:4b:e9:
da:31:d7:a5:4a:ed:18:8f:5e:a7:8f:3d:70:d2:67:1f:a6:20:
b1:b1:ef:7a:97:86:17:69:5e:b8:59:b3:4e:9a:33:0f:9d:3b:
44:cb:d3:cf:a8:99:32:95:16:63:ec:f4:29:98:1e:57:e1:3e:
4d:ee:49:04:56:ba:9a:f2:de:67:ae:f3:6f:85:a2:c7:e2:22:
58:63:13:f4:6c:39:e1:7f:38:6f:f0:c6:9e:db:8d:80:89:24:
6f:35:09:95:ae:1b:6e:c6:7d:4e:df:b0:1b:96:ff:3b:dd:9a:
c9:de:f8:ed:31:68:65:76:fc:a8:2e:3b:64:20:ad:f4:b5:e0:
c3:7a:f2:d3:f2:26:aa:fb:f2:98:e8:89:12:e8:b0:c8:56:06:
ed:f6:26:86:70:c0:88:e6:cc:4c:a9:c8:0b:10:1e:43:cf:84:
09:f5:21:2f:c4:1b:61:df:8b:95:b5:f1:d8:1d:3f:f2:da:70:
88:34:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:45 2025 by rpki-client