Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
File: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft (raw, json)
Hash identifier: 4XVrPQu+vc7Cf/1sFpMCzh+lLV4vRy0unDC8ows10fY=
Subject key identifier: 4E:A7:E6:E4:0E:3E:FC:A7:0F:B2:F0:00:A2:21:AB:28:E6:EC:5F:A5
Authority key identifier: CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
Certificate issuer: /CN=cf40e25606651a075484c709fa766d80dad52d9c
Certificate serial: 019A73A75359A6DC865BB9FD45CD4C689E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
Manifest number: 052C
Signing time: Tue 11 Nov 2025 16:02:16 +0000
Manifest this update: Tue 11 Nov 2025 16:02:16 +0000
Manifest next update: Wed 12 Nov 2025 16:02:16 +0000
Files and hashes: 1: hGH_yKtqtaewmmke-m1I7cISSH0.roa (hash: T3QXU6gMQq0RcA3qUlvm1jUKiUtDYtXE4Lz78+TSbU8=)
2: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl (hash: 1WHt0P25k6tbccC3z4ZN/XNXtoAaqumV2G+nIvJQ2Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:53:59:a6:dc:86:5b:b9:fd:45:cd:4c:68:9e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40e25606651a075484c709fa766d80dad52d9c
Validity
Not Before: Nov 11 16:02:16 2025 GMT
Not After : Nov 12 16:02:16 2025 GMT
Subject: CN=4ea7e6e40e3efca70fb2f000a221ab28e6ec5fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:a6:ba:18:27:35:07:6f:08:d0:a1:9b:9f:
94:1b:43:ce:0e:cd:a7:d1:23:86:74:a4:81:87:5f:
ec:da:0b:a6:68:21:2f:a3:39:92:46:d2:1f:38:3c:
6f:f2:6b:24:36:a5:9a:fe:d7:1b:e9:9b:d6:15:85:
fc:bd:d2:00:e9:9a:fe:b9:6d:7c:ec:ca:f0:ee:c2:
35:f9:be:30:b1:a0:60:4e:11:39:b3:79:ef:30:db:
72:85:4d:8a:51:e3:84:7f:ed:b0:2f:dc:5f:a8:5a:
ed:16:63:69:e2:47:30:bb:e5:f7:1f:a1:4b:a7:d0:
86:6e:ce:96:fe:7e:81:ec:44:15:4f:f8:a5:b8:01:
a4:0e:f2:f5:ef:25:31:76:0d:de:30:f6:f3:f7:06:
bc:3f:23:3e:af:34:09:75:e1:e1:56:a6:38:6a:0d:
b8:87:57:4d:9f:3d:11:19:4b:81:f5:f1:e4:5d:a0:
f3:b7:74:b4:5d:36:fa:d2:e7:7c:0b:e5:6b:16:1c:
cc:7c:ba:39:45:45:41:77:06:fc:65:8e:cc:5a:68:
02:93:9a:63:c0:d6:7f:69:4c:6e:7c:ed:ca:bd:9d:
a1:11:a9:cb:c5:5b:57:9d:9d:f6:12:8f:8f:45:3c:
c7:87:f2:21:b9:fd:07:aa:3d:32:52:ef:fe:1c:a8:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A7:E6:E4:0E:3E:FC:A7:0F:B2:F0:00:A2:21:AB:28:E6:EC:5F:A5
X509v3 Authority Key Identifier:
keyid:CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a8:93:52:e0:e5:2b:96:7d:57:c1:12:01:b5:79:26:80:53:
4a:63:42:b0:b9:a1:f6:03:19:a2:74:5d:c5:c2:d6:43:38:c2:
f4:a7:0d:cb:3c:87:46:35:94:d2:fb:84:12:24:13:01:6e:c0:
14:f8:ba:69:04:e3:12:74:9e:4c:cd:b3:8c:ce:9a:87:4a:27:
76:78:53:22:9d:2b:08:0c:a1:f7:14:a4:83:8b:bd:1c:1f:47:
90:2a:1d:aa:5f:2d:dc:ea:74:3d:a1:a9:3d:59:f2:00:b5:b8:
2d:ba:a7:81:5b:2b:c9:fd:70:c8:68:15:c8:43:ff:32:b1:86:
3f:2f:3f:ce:89:47:94:1a:76:7c:69:71:57:90:15:90:5d:48:
63:65:30:b2:40:b2:bf:a4:10:4c:a1:04:ce:49:32:0f:76:41:
8e:a8:5d:e4:2c:93:a2:48:b3:77:33:21:4f:32:1f:c6:28:59:
13:49:8a:fd:d0:e6:c1:05:28:2c:22:92:2f:d3:a6:9b:d5:b2:
61:82:5c:4a:52:5d:d6:00:77:2f:d4:ee:cd:55:42:7f:0a:58:
36:25:cd:78:82:72:24:b0:dd:03:df:49:aa:75:8f:26:bc:13:
d4:3b:96:9f:78:13:b5:ee:16:97:1e:17:b2:a9:6c:1f:02:cf:
86:48:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:11 2025 by rpki-client