Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: xrTFAPrLvLngLqtGtVm0YpS3cVQkCQ14fgAlerWRnEw=
Subject key identifier: 3D:88:B0:9F:9C:E4:0C:4A:C6:AC:1E:CA:1B:14:07:40:DC:F9:02:AB
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019A71EE6380585075CD5D37C6EBBF55992A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: RyZVH8OH0CkVbyc2H98Bt5qveAWd/C2MuBKvRq4iNRY=)
2: g2292tg5HkQKxN5v3A20HQE7HPE.roa (hash: 8kwF0PMfxaM4q7cGmN1tVvvHsfTo4uOxn6Qw92CswWg=)
3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:63:80:58:50:75:cd:5d:37:c6:eb:bf:55:99:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=3d88b09f9ce40c4ac6ac1eca1b140740dcf902ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:3d:b0:3b:dd:4b:b1:e5:26:e2:dc:6c:79:
af:78:43:57:67:16:a3:73:9c:47:01:64:11:51:82:
a2:4b:ad:fb:7d:c0:e2:3f:09:29:aa:93:21:be:9e:
59:64:ca:88:d8:ab:49:54:ac:1b:6c:72:58:d6:e0:
73:d2:d3:81:0a:62:eb:c7:f8:68:4b:e7:e3:de:73:
85:e1:17:f0:a7:b4:6a:f7:0a:a4:2d:db:6a:02:37:
43:be:46:f0:d8:6c:de:a7:9b:d3:15:29:27:23:b3:
b5:0d:59:6e:db:19:18:d5:54:85:55:bc:9d:36:71:
51:bc:6e:48:09:04:3f:57:7b:ac:89:d4:07:00:25:
fe:be:cf:83:81:e4:a9:43:50:05:4a:ba:0c:10:25:
b9:71:80:61:ba:54:59:ad:c1:d9:75:54:97:2f:42:
d6:2b:24:c1:61:ef:f6:55:47:2a:9a:cc:66:ad:7f:
f9:f1:1b:ac:5c:bd:96:7b:50:be:d7:68:54:39:21:
f2:c2:fa:4c:bb:5e:53:fd:9b:6b:c4:ea:85:01:fc:
25:7b:a8:df:a5:9b:ca:99:b3:5c:3c:e7:c3:ad:69:
ff:03:c1:cd:ef:f0:e4:bd:28:c4:6f:7d:a6:c1:73:
2b:97:40:77:62:3f:78:bc:e4:2a:d5:68:b8:b2:87:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:88:B0:9F:9C:E4:0C:4A:C6:AC:1E:CA:1B:14:07:40:DC:F9:02:AB
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:af:ae:be:87:2d:6f:c7:44:16:b5:fe:d3:ba:4d:fd:2d:f4:
6f:98:3e:3f:e5:b7:b2:a2:91:d7:e8:3c:81:4e:b7:76:57:b4:
83:40:a3:dd:03:94:9a:5a:3a:91:eb:0a:a5:3c:9d:3b:36:ff:
61:b1:e0:b9:d5:b9:87:41:c5:d6:0b:c3:cf:5e:40:ed:04:0c:
25:ba:9b:98:39:7e:ee:eb:5a:6a:53:a1:de:03:34:b1:4f:36:
24:d4:47:34:73:0f:1b:8a:aa:fe:81:cb:9b:31:87:5c:7c:8b:
e5:57:c2:ac:25:27:d4:ef:e7:a9:7b:b8:78:31:7e:2b:14:87:
7d:f6:a5:da:2f:4f:7f:8c:1f:ea:b1:e3:bd:12:12:96:0d:68:
5f:c9:f2:34:b4:69:39:e1:db:e0:1e:03:16:9d:cd:3a:94:f9:
f5:83:c8:13:b1:8a:f2:59:2e:52:e4:1c:82:5c:97:aa:7b:cd:
00:93:b8:d6:e8:39:7b:be:61:72:5c:b0:bb:e1:21:be:9e:1a:
e2:06:14:0c:8e:63:ce:a4:fe:16:47:7a:54:78:7d:5d:f2:c6:
cc:17:38:90:d7:e7:5f:96:95:3f:06:0d:6a:c9:07:e4:09:31:
e1:23:55:3b:4e:5b:76:7d:d9:01:0b:f3:1f:b5:c5:09:eb:e7:
84:a8:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:32 2025 by rpki-client