Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: o8aSA4OY4oQKlIXv2iDzspFcS+w1Kzy5BSoXTTRX4oc=
Subject key identifier: B5:97:50:75:B8:2C:47:D3:5D:29:6B:E1:B4:49:31:49:B8:31:D7:AA
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019A30B2C3D92905CEF4F78C3E8AE9A711F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 168E
Signing time: Wed 29 Oct 2025 16:00:13 +0000
Manifest this update: Wed 29 Oct 2025 16:00:13 +0000
Manifest next update: Thu 30 Oct 2025 16:00:13 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: YCZ61MFEgC3C64BdgAp4lOgZawtONedOkbb+O/9/Ay4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:b2:c3:d9:29:05:ce:f4:f7:8c:3e:8a:e9:a7:11:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Oct 29 16:00:13 2025 GMT
Not After : Oct 30 16:00:13 2025 GMT
Subject: CN=b5975075b82c47d35d296be1b4493149b831d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:e2:c6:28:1e:33:7a:cc:aa:1f:ed:45:31:
dd:6f:1a:71:61:82:33:b9:d3:9c:62:6f:b5:04:d8:
e4:22:ea:44:14:b8:fb:59:98:fa:e5:48:7f:11:d6:
8d:6e:6d:91:f8:7c:95:9c:e7:77:40:91:1c:df:5d:
50:a4:f2:4a:3b:52:e9:b6:2c:5c:b7:fb:3c:7d:4a:
5a:e7:fd:a9:7f:a0:33:02:be:48:01:bf:3c:41:c9:
e2:29:06:5e:57:ee:b9:50:d1:5b:d6:3e:7c:7e:71:
05:8c:91:c0:04:59:ec:6f:60:aa:cd:aa:d6:35:4e:
a4:3d:6a:98:5b:6a:66:22:7e:5b:b2:e2:44:b4:f5:
70:15:ab:8e:b8:5d:2b:fc:db:f3:a1:a7:9f:7f:bf:
c2:92:e8:73:b6:c5:d8:15:a9:d0:c5:2b:8c:8c:8c:
7a:a1:12:80:10:3c:dc:dc:d9:c0:58:9c:40:43:08:
4c:33:ce:48:e0:0e:80:b6:f5:4a:39:e2:4a:74:5d:
8d:e8:59:46:6b:e1:ed:4d:55:cf:39:c9:cc:5a:aa:
9b:5e:16:e8:25:9c:0f:f5:ac:6b:33:2c:e7:e8:df:
12:b1:52:7f:53:94:ce:86:ef:ab:fc:ba:08:67:3c:
d2:d0:5d:6f:d3:77:9a:1c:5d:3a:71:a3:cc:36:9c:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:97:50:75:B8:2C:47:D3:5D:29:6B:E1:B4:49:31:49:B8:31:D7:AA
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d7:09:fb:3c:8a:d0:4e:0d:e8:97:14:b4:f1:79:96:fd:17:
9e:c5:4e:39:ee:14:eb:5b:fb:0d:be:32:c5:1f:5f:e7:f2:30:
41:26:e2:87:7e:5c:5a:21:83:e1:a0:2d:db:20:f8:df:44:3c:
f9:29:00:8d:52:cb:18:01:a6:20:1a:61:c6:5d:17:8d:6e:66:
2d:e4:3b:a3:ce:3d:41:f1:69:df:75:3b:b2:c9:6f:6f:59:29:
5e:c7:c5:43:22:0e:33:20:a8:2b:a1:39:4f:3e:2d:2e:c0:96:
fa:85:7b:e3:8c:28:f1:c4:c8:70:d5:b0:cd:dc:d5:fa:36:a9:
eb:96:fb:41:6f:87:d1:5c:55:16:0c:47:7c:0f:0a:17:7c:b3:
a0:79:33:1d:46:25:2a:ef:96:51:c7:13:1f:29:d9:21:bd:d4:
c0:b5:3d:fb:1a:2e:6c:59:bb:4c:b7:be:31:10:30:62:a6:fa:
7d:ce:64:34:50:39:3f:f5:23:aa:e6:35:03:e7:87:07:0a:51:
ec:53:33:45:33:a7:72:53:3d:e7:66:3b:54:2e:23:fd:63:57:
49:c9:f0:be:57:51:1e:9f:c0:f0:fe:1d:d5:0e:65:2f:b6:66:
90:b8:37:f6:b0:86:2a:6c:81:e0:c0:9f:8d:c5:4a:db:2a:34:
11:d1:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 00:38:05 2025 by rpki-client