Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: KbZTdPcgVaEyUanqhaiqiMQuzuXp3xbwgseILyOveHI=
Subject key identifier: C3:B2:CA:4C:DB:37:B3:3D:E9:B7:F4:B3:4E:01:A3:24:EC:87:C1:80
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 019A71EEE5810FD4E7E3FE62DF0EC98811F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 12B3
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: S4as3X3onin0HkjsVa+Dnmv4KTw2qg+ufNiSz8Qjmag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e5:81:0f:d4:e7:e3:fe:62:df:0e:c9:88:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=c3b2ca4cdb37b33de9b7f4b34e01a324ec87c180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d7:dd:53:4f:4e:2f:f4:ba:76:68:41:47:0f:
62:24:22:a2:34:a0:df:33:39:85:a0:87:4c:ac:c2:
0b:87:cf:50:e9:2f:33:7d:31:f2:34:5a:d8:ba:a0:
1f:db:15:26:94:d3:84:90:ce:51:37:56:3f:4c:a5:
5e:32:50:a9:ef:fa:e2:9c:9a:d4:5a:cb:9f:ce:da:
8c:7d:6c:cb:17:16:22:fd:31:76:a7:9a:7d:a2:fa:
42:45:04:4e:1d:a5:8f:38:3e:f3:b4:6e:e9:8b:14:
e8:4e:a6:44:57:be:66:5f:9f:40:04:38:a5:c6:ad:
b6:b9:19:0e:a5:a5:12:2e:61:33:0d:44:96:3f:d2:
ef:26:7e:8a:56:95:e8:f2:ab:09:82:06:af:e5:e7:
a3:8d:3d:7b:dc:4d:8a:6f:37:e5:68:7e:60:96:fe:
f4:53:a5:df:21:db:5e:2f:46:42:5e:01:3d:15:91:
5d:03:f9:dc:25:5d:61:79:07:3b:e3:33:d1:6c:ca:
fb:fd:da:8a:8c:fa:38:2e:2d:e5:9c:5c:cd:93:b4:
34:62:84:27:90:fa:2b:56:7b:93:16:df:7b:4f:18:
bd:c6:cc:6c:84:fa:96:7f:6d:92:35:ba:2a:21:f4:
6f:72:67:7f:89:17:94:85:5a:3b:7d:82:03:43:d5:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B2:CA:4C:DB:37:B3:3D:E9:B7:F4:B3:4E:01:A3:24:EC:87:C1:80
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:57:ea:35:2f:29:aa:fe:28:46:13:1b:8d:6d:4f:b4:6f:79:
4c:18:01:e7:5f:d3:bb:ff:7e:5b:7b:55:9c:8c:7a:f4:9e:c7:
87:63:41:a9:4f:54:ee:14:1f:6f:40:17:07:f5:57:6a:08:af:
23:5a:ca:f0:8e:59:24:41:7d:74:d8:dd:a3:c7:51:f1:4f:90:
f8:df:2a:d8:ce:3a:d3:ed:b9:b4:4e:16:8a:b2:11:ea:46:2c:
a0:99:b9:4e:93:99:9d:15:0c:bc:9d:df:71:08:a2:7e:da:a3:
76:1d:47:66:5f:12:8b:2d:c7:d8:55:28:b5:9f:d8:0e:ae:1f:
6f:35:e7:32:39:f9:af:1e:96:e2:26:a5:05:18:2a:4d:58:e0:
f9:1a:c9:83:74:a8:69:fc:1a:35:ee:3f:69:b9:4b:f6:02:1c:
35:76:dd:87:82:fe:5b:d9:38:90:a6:38:aa:51:12:2e:78:a5:
e2:45:9f:36:38:14:ec:16:d0:ce:16:54:b8:08:a3:d3:d7:96:
3b:29:dc:e3:15:ec:33:f6:20:af:6e:fc:c8:50:ce:02:c6:0f:
e3:17:ff:86:00:25:e3:ae:12:69:23:e4:0a:c5:25:5b:6d:c1:
a5:9d:d6:78:17:1d:5e:33:21:dd:11:dc:a9:7e:58:69:87:87:
1c:0b:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:49 2025 by rpki-client