Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: QycZSzDc+NBBtw9EbrRpHa48ypBNr9tEtuCDcawH4ss=
Subject key identifier: B9:29:C9:F3:C8:AB:74:99:25:29:9E:1B:85:8A:3E:12:B3:9F:84:F6
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 019A71B7E62666C53D84AE8AA1334A643BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0DAA
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: G+2lKLNdp9m4X9c1nnJzLHMU8mvLPMz8IMre/IYVNGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e6:26:66:c5:3d:84:ae:8a:a1:33:4a:64:3b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=b929c9f3c8ab749925299e1b858a3e12b39f84f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:f4:02:38:ff:c5:6a:20:78:0c:e9:b5:2d:
0c:9a:5e:27:01:8d:46:08:c0:92:d0:16:7c:e0:23:
51:19:cf:3d:cf:51:c0:eb:e2:32:73:a1:fd:f3:cb:
8e:eb:5a:5c:ce:04:2f:98:69:12:cd:20:10:e2:31:
a6:82:2c:63:37:a1:dc:42:40:09:ee:33:3d:1f:f6:
5d:ee:d8:4e:6b:c6:2f:14:08:d6:6a:1a:38:50:31:
96:21:1a:ee:b2:60:18:d8:91:9f:1b:ab:80:10:db:
f9:79:15:f1:63:2b:c9:e4:e0:d4:b7:6b:dd:42:35:
90:a7:e4:7d:14:30:9c:23:d9:e9:32:cf:1d:d5:90:
72:6b:b8:4e:23:85:14:fc:02:bd:00:f9:4d:47:20:
f5:b1:72:d2:89:0d:f5:67:90:6a:5c:b9:15:5e:12:
60:50:77:57:81:5f:78:19:3f:b5:c6:c4:39:fe:ac:
77:c8:58:a4:45:77:b2:0f:6d:3a:ad:e9:3f:55:e0:
69:41:24:b2:76:aa:92:3a:b1:80:b6:16:ff:4e:21:
e3:fa:6f:06:a7:ea:6f:81:3f:e4:91:97:e6:a3:2b:
48:ab:77:4c:c8:8c:07:7a:7f:8a:1e:8d:03:55:44:
80:fe:1f:00:24:98:22:a3:3e:b4:be:01:a8:ab:20:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:C9:F3:C8:AB:74:99:25:29:9E:1B:85:8A:3E:12:B3:9F:84:F6
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dc:05:26:45:bb:35:d6:63:11:21:e4:ff:db:c2:2b:24:49:
70:bc:ca:03:e3:fd:a2:73:0b:88:57:b3:7e:ee:05:4f:7c:21:
6d:35:13:ef:12:52:13:43:5e:de:f7:d2:97:c7:13:8c:c8:ef:
fc:43:ab:77:7f:4a:8a:20:fe:15:bd:e4:bf:ce:ca:c9:a3:ce:
6d:22:44:88:43:ed:25:ce:48:62:cf:ed:cc:2f:ec:9a:b7:75:
77:dd:a1:a6:5b:4b:8e:b0:88:83:26:9f:de:d4:5d:5b:94:14:
67:9a:0f:51:ad:6d:e3:2d:6a:d0:7b:cc:36:dd:21:a2:8b:fe:
f4:f0:a2:53:c4:be:4f:7c:09:04:e9:b2:75:94:d8:b2:50:c6:
07:df:5d:1f:8a:86:54:29:ac:91:ec:df:c3:17:4f:03:c4:96:
8f:a5:a0:47:a0:f8:45:d3:e9:7d:87:5d:ea:a7:92:be:d9:2a:
1f:d6:36:69:dc:75:6e:9b:8b:48:4f:22:40:b4:d1:d8:27:b9:
a1:2e:64:ec:3a:44:e6:e6:17:3b:2b:44:d2:95:57:04:f3:af:
33:09:67:05:61:6a:39:c1:98:6c:d9:1c:ed:2d:1e:de:1b:e6:
ea:67:c8:f4:33:9d:9d:24:0e:c0:80:f2:23:a7:23:a0:ae:23:
3f:cb:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:45 2025 by rpki-client