Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier: tWGH32qJJeW/g1HQ8n0VgH8pW1/RfJzSsljGy1DjMu4=
Subject key identifier: 66:F6:67:77:F9:E2:EA:7E:05:DB:78:1D:3B:BE:31:64:31:25:32:5F
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 019A73019BDF68BFE5842EC254830D55B7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:01:16 +0000
Manifest this update: Tue 11 Nov 2025 13:01:16 +0000
Manifest next update: Wed 12 Nov 2025 13:01:16 +0000
Files and hashes: 1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=)
2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: y6Roh6qCqIQIQ0MnDiRh8wMeF/GS5iN5bZTwE9ZOtZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:9b:df:68:bf:e5:84:2e:c2:54:83:0d:55:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Nov 11 13:01:16 2025 GMT
Not After : Nov 12 13:01:16 2025 GMT
Subject: CN=66f66777f9e2ea7e05db781d3bbe31643125325f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:31:cd:38:af:65:74:f5:80:99:e0:30:76:
f9:2d:8a:32:0c:25:b5:6b:dd:e9:76:89:95:fd:cb:
76:54:92:50:e9:02:e0:d2:84:fe:db:ee:c5:68:06:
6f:19:84:e4:2a:ff:ed:a9:7b:65:9e:75:97:45:b5:
25:b1:4f:1f:f7:d3:55:96:15:22:fe:07:c0:e4:03:
cb:c1:40:85:b2:ea:85:cd:92:b6:78:03:28:6a:7d:
fb:5e:dd:ee:50:ee:54:67:59:21:50:4a:f9:18:92:
ef:85:3a:b4:a8:8b:63:d9:c6:6d:ec:5a:3a:3b:1a:
6e:69:32:d0:28:ed:a0:60:fa:43:0b:b5:db:4d:06:
81:63:d4:65:12:a9:75:18:7f:78:54:86:90:55:1a:
9a:3b:ac:20:b4:20:5c:28:a7:9d:88:11:1b:3b:9b:
1d:9f:a4:bd:b1:2c:3f:ce:59:0b:bf:48:c0:5a:53:
cd:0d:23:63:30:c0:5e:f9:03:dd:da:9d:44:55:4a:
09:f0:c0:ab:2a:24:af:ff:98:95:a0:90:c6:e0:e0:
65:74:d5:65:68:bd:c3:a3:6c:2c:13:50:be:92:10:
18:34:40:19:da:e0:15:1a:bf:fc:25:f4:8d:7f:2c:
fc:61:ca:98:a5:b7:a3:68:93:fb:41:34:e7:1b:44:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:67:77:F9:E2:EA:7E:05:DB:78:1D:3B:BE:31:64:31:25:32:5F
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:64:61:fc:c4:09:bb:4e:58:e8:d3:4f:bd:a9:b9:ad:3a:7a:
ce:30:3a:25:52:96:f2:6d:8e:aa:c5:2f:b7:b1:66:0a:01:97:
5c:41:31:87:18:46:de:f9:67:bc:23:a9:3d:09:60:b3:64:89:
b3:dc:95:e8:92:6d:cb:14:e2:5f:3a:a1:ce:17:14:1a:90:65:
82:95:c5:fe:b9:30:2d:a8:a9:53:cd:e8:ad:1e:1b:b1:06:be:
d7:e7:a8:61:a4:a6:92:7f:16:7c:88:83:28:2e:c3:76:42:9b:
c2:44:df:84:3e:c0:10:e6:8d:d5:98:3a:49:3c:30:85:a7:40:
6d:c8:1b:f8:b5:26:4d:1b:8f:3f:7d:13:a1:9a:9d:18:81:21:
d1:04:bc:ca:e2:de:00:eb:15:60:b2:c8:17:99:97:ee:f5:10:
25:c2:b8:ce:f6:7f:e1:87:b7:a4:cb:f2:8b:e7:96:be:e6:48:
12:ea:cc:38:64:82:66:e5:9d:ac:02:1d:17:09:b9:d8:02:ca:
9a:f9:a2:d7:75:09:23:30:61:04:4b:17:41:43:a6:c3:94:3e:
90:8e:d8:94:bb:ad:74:fd:9f:f0:ba:71:9c:c2:ca:c7:e0:b9:
3f:4b:42:5b:85:d6:9b:1b:6e:8e:0c:c0:5b:b4:a8:08:78:37:
c2:dc:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:25 2025 by rpki-client