Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: jxg7hE+pKnUSiAuka/FTBrq/WvmT4CiixATZnWv4yL4=
Subject key identifier: 31:BC:F3:67:9A:84:39:1E:33:5D:BF:36:96:3D:61:F2:46:71:E3:BA
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 019A0AB8400815CD71AE375B4BA4AABA55F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 13F7
Signing time: Wed 22 Oct 2025 07:00:38 +0000
Manifest this update: Wed 22 Oct 2025 07:00:38 +0000
Manifest next update: Thu 23 Oct 2025 07:00:38 +0000
Files and hashes: 1: Njt0C_REwUu3SbLYdsWOldKXTok.roa (hash: FKU9goGKUIXguBLGBxGdYgnZkFhCbVsBMNq8D5V01Qo=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: JVgYybeW2EX2QGl0utsQ+DZLfKT311M3VXDhDhAkFXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b8:40:08:15:cd:71:ae:37:5b:4b:a4:aa:ba:55:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Oct 22 07:00:38 2025 GMT
Not After : Oct 23 07:00:38 2025 GMT
Subject: CN=31bcf3679a84391e335dbf36963d61f24671e3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:14:2f:95:63:5e:6a:9b:c7:f3:51:83:9e:
9e:2c:2a:00:fd:e6:f7:53:51:eb:15:23:78:1b:b3:
b7:ec:e2:d3:bc:4a:ee:a5:9d:99:18:98:03:96:46:
b5:0d:0d:48:f2:ab:af:4c:27:a8:bf:03:80:27:a0:
64:61:a7:1e:cd:78:36:59:8a:9e:64:2b:4d:28:e4:
d3:66:5f:c2:bb:63:44:d3:12:d1:97:32:ed:c8:3e:
f0:32:95:81:70:69:aa:64:85:4f:22:bd:de:69:70:
44:81:7a:05:81:81:37:f8:ce:70:ab:36:63:aa:46:
c5:3a:3f:18:92:3b:56:78:99:a0:b4:a5:0c:dc:a0:
e1:0f:83:e5:47:34:5d:f4:cc:d4:30:59:bc:71:d3:
a3:03:ec:31:8c:e1:40:f0:4f:af:b6:a2:ba:65:ef:
cf:e2:2c:90:7e:ad:31:9e:49:52:e1:64:18:46:d9:
a3:ac:66:86:74:1a:21:7b:81:76:65:9b:64:0d:44:
d4:87:10:05:5e:ed:2f:7e:93:04:4b:30:da:77:57:
56:e2:d6:e2:41:64:e0:f3:bd:0e:9e:c3:4b:3c:be:
be:6a:ce:09:04:af:96:57:f4:71:f5:40:60:00:22:
ad:b9:34:7a:5e:f6:cc:e4:8d:c1:d1:a6:7f:10:83:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BC:F3:67:9A:84:39:1E:33:5D:BF:36:96:3D:61:F2:46:71:E3:BA
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d7:8e:06:64:54:0a:0f:1c:11:17:68:67:33:48:61:ed:ad:
78:fa:2e:8a:c4:06:77:bd:01:e6:3e:74:db:7b:c1:39:8f:d1:
7a:a1:0a:aa:67:28:3b:fb:69:ec:13:2a:12:db:65:be:cf:f6:
43:2a:6f:71:31:07:bb:54:ea:dd:7e:c3:d2:44:2b:04:2e:20:
9d:b4:dd:84:4c:c7:4a:fe:33:32:38:3b:3e:d1:70:e4:03:eb:
2c:18:16:43:e3:c9:a4:3a:0b:8f:54:6d:29:ef:80:70:99:29:
44:5d:de:c9:10:87:3c:9f:e5:a4:45:7d:86:03:f6:c8:de:c5:
f3:73:d9:a0:98:f3:b0:57:03:8a:54:1e:2b:39:c7:8a:e9:f0:
72:7e:30:19:9e:d0:f9:bb:16:dd:23:aa:68:c1:4b:a9:0c:d1:
eb:76:9e:1a:f9:4b:a3:99:80:bd:eb:66:b1:29:a4:4c:c2:7e:
9d:33:33:56:8a:ce:f4:04:d6:62:73:c1:1e:be:25:2e:fa:9b:
8e:3f:f4:92:5c:fc:24:cd:09:b0:90:9c:d4:71:54:25:d5:b9:
a0:27:21:89:ea:b1:1c:00:e0:56:46:7f:8c:12:b3:0b:2e:d6:
6c:6b:92:43:7c:b5:83:45:79:37:46:bc:83:2d:2a:86:88:f6:
9f:9f:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:00:35 2025 by rpki-client