Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: BMhJZva4/W7kC5D5Uq92Fof806PnWUDXmkfbZMyA+lk=
Subject key identifier: AC:F1:D4:70:E4:29:7A:B0:2A:81:28:5B:CB:1B:1D:47:E5:4A:9D:9A
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 019A2E210DE1A3A68327EB10CA7F99F259EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0A1E
Signing time: Wed 29 Oct 2025 04:01:49 +0000
Manifest this update: Wed 29 Oct 2025 04:01:49 +0000
Manifest next update: Thu 30 Oct 2025 04:01:49 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: XYU510xALNV76ckLkbRtwgKBn4poWHLh6qeYBuqWFSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:21:0d:e1:a3:a6:83:27:eb:10:ca:7f:99:f2:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Oct 29 04:01:49 2025 GMT
Not After : Oct 30 04:01:49 2025 GMT
Subject: CN=acf1d470e4297ab02a81285bcb1b1d47e54a9d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:9a:47:d5:3d:f9:99:b2:e4:1e:60:60:d0:
8a:dd:1b:4d:93:f7:34:d9:2c:a1:d0:e5:1d:b1:c0:
15:3e:f7:76:9c:20:4c:fd:71:4b:04:1e:69:cd:5e:
49:5c:04:2b:d2:60:12:ab:07:23:b7:90:10:d7:68:
9c:f1:29:49:a8:a3:4a:9b:2c:00:1d:98:7b:cd:f3:
28:33:b7:6c:4c:b2:25:1d:42:f8:ed:6c:ff:63:a8:
04:c2:da:1a:d3:cf:c9:55:05:35:ea:eb:64:77:5d:
b3:57:8e:cd:f1:65:9c:14:af:bc:64:ae:1b:87:54:
8a:25:de:08:c3:c3:f9:61:dd:6e:9b:f3:99:d9:97:
3b:4c:d1:ec:34:45:a2:72:94:81:b9:16:f3:06:f8:
79:ba:b0:d6:a6:a2:97:15:de:34:99:dd:48:8b:2d:
db:bd:0e:07:77:b8:4d:20:c1:1e:6e:ce:5f:ef:bb:
35:8c:b2:9e:d0:57:72:e8:4a:67:c5:99:39:7b:94:
00:58:65:e4:66:73:be:88:b8:0f:7a:17:46:7e:a0:
b4:67:1c:e2:07:86:6e:32:67:d5:6c:e2:84:88:42:
c5:41:ca:51:d8:1f:1d:67:f6:ce:d6:5a:2c:4d:70:
8d:6b:f4:5e:16:a9:cb:ef:01:9a:ec:e2:89:78:d3:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:D4:70:E4:29:7A:B0:2A:81:28:5B:CB:1B:1D:47:E5:4A:9D:9A
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c2:28:fc:ce:67:34:84:25:b6:13:c2:4a:0d:1c:39:cb:a0:
b2:1a:1b:16:4a:c2:e3:f2:8a:02:d5:c9:90:88:f4:8b:3e:19:
13:17:3a:9f:bc:18:69:71:9b:4b:b9:b5:ad:39:de:49:91:aa:
52:51:d5:b5:d4:b7:6e:25:2e:a5:cc:29:52:65:8e:c2:1b:db:
ec:38:7e:96:aa:5e:5e:67:07:3d:93:45:49:2a:a7:79:8b:26:
b5:fe:9f:d2:2b:9f:22:e9:8e:7a:05:82:1a:32:ce:f9:2c:a6:
ae:a4:46:c4:98:ea:da:d4:0c:b1:de:2c:b4:47:79:d5:86:e1:
8e:be:6f:da:89:ef:6a:2b:f6:eb:62:10:5a:b7:9d:e2:a1:12:
69:0c:be:da:95:c1:c6:2b:58:2e:aa:08:2a:42:37:18:25:61:
8b:42:24:af:b8:62:cd:c6:68:9d:d9:47:53:9e:2c:3a:fe:dc:
db:33:63:2a:72:44:83:1a:6c:a9:78:ae:79:e4:cf:b4:11:98:
0c:15:4f:2b:ec:c5:76:db:4f:07:e3:28:f3:e8:96:d0:43:64:
06:9c:3a:9a:fa:9c:43:c7:88:7a:c2:68:1a:2b:8e:5c:3c:11:
08:7e:56:09:88:6d:2b:27:8b:4c:35:d3:d2:fe:ec:47:ea:29:
ba:60:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:04:00 2025 by rpki-client