Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: y6OSnnu0MGOL1ys6XwHqZkRLCDmzJ2X5P5RmXZ2CctM=
Subject key identifier: F4:7A:46:5B:F5:23:A3:36:AF:23:A4:0C:9A:0E:85:14:CB:55:6A:6E
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019A71B9414935A08F574C3DC55ADAF677E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: FE
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: ADc0-Z75WPBsaBDTplhpevySpwU.roa (hash: PLV8H8uGdTSutML/LIXLIYXv/TzH5t9Y0T2S9cmwyI4=)
2: I-sX0mMjM8kXRo5NUo2O1J5bfdk.roa (hash: Go2R3bZJJoI7RVBZI1wnjguo8NeRa3WOvzexNUQ8j3I=)
3: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: mLe3PB9g+Wz23bCDZukJRjWOZ6RvxbT+gBgwjpO/57M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:41:49:35:a0:8f:57:4c:3d:c5:5a:da:f6:77:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=f47a465bf523a336af23a40c9a0e8514cb556a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:a5:20:67:4f:ca:29:d5:61:51:48:b4:75:
97:e5:b4:10:08:ae:aa:30:e7:6a:fd:56:47:49:b7:
55:ef:c0:a8:7e:01:79:9a:f7:3e:31:20:06:a0:49:
a5:e8:2c:b8:85:42:81:03:b9:d2:c1:f3:ff:35:1b:
68:c3:34:14:a2:de:ad:db:3b:36:a8:bb:12:d4:2b:
09:38:6f:e6:6d:51:0e:d4:01:38:6a:55:08:c4:4e:
69:a2:20:88:c1:a2:e6:0a:b1:7e:7f:a4:14:60:53:
04:d7:8a:6a:43:38:84:9c:ca:50:2e:ab:60:41:e1:
85:84:1b:33:73:ec:ad:8c:7a:c0:2c:65:54:6b:25:
c4:1f:ff:07:80:3e:ed:7c:94:d2:50:c8:ba:ec:a5:
ba:9b:0a:3f:7e:d9:9b:d8:55:97:3f:07:b4:75:26:
07:16:4c:45:28:10:15:4a:d3:aa:22:6f:f1:60:25:
8a:fd:89:4d:63:93:be:a9:07:58:a1:9e:55:37:78:
7e:fd:37:19:3c:4a:8f:9f:d8:c6:47:1e:dc:74:70:
f9:2c:5d:7f:52:53:aa:43:ea:0b:d3:e8:60:f3:01:
a4:9d:5c:5f:09:a3:04:ea:ab:82:a5:53:b5:2d:bb:
c5:19:4e:54:ce:15:66:25:a1:7d:86:59:25:a3:bf:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:46:5B:F5:23:A3:36:AF:23:A4:0C:9A:0E:85:14:CB:55:6A:6E
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:af:79:d7:5a:0d:c0:b2:fc:e4:7a:e5:d6:c0:61:31:a4:5a:
2e:71:9f:23:6e:92:31:6a:0a:f4:51:68:b9:a0:0c:60:52:1f:
3a:54:72:53:63:8e:2a:68:25:e3:9c:3a:81:87:10:f3:c6:6a:
65:7c:62:d8:34:78:3c:e7:dd:e4:c2:0e:c1:64:a4:17:78:1a:
83:4c:66:28:dc:83:6b:f3:4b:fb:25:fa:fa:27:c7:4c:92:4e:
79:52:53:23:d6:ff:ff:0a:95:75:2b:da:98:1c:ca:0e:5f:12:
5d:bb:22:42:9b:bc:0f:b7:d8:be:cf:2d:f6:db:dc:cb:55:8d:
d6:59:cc:4f:c8:d4:b6:42:e2:26:44:a5:df:52:62:ab:cf:12:
12:4e:29:c6:82:68:b3:64:e8:5a:5a:60:81:d4:70:95:e5:75:
29:89:23:28:05:74:3b:41:99:c7:e1:ae:98:c5:cd:95:bf:9f:
9e:dd:4f:ae:1e:69:84:e9:2b:60:32:e6:ee:8a:cb:86:bd:ac:
c8:ed:d4:07:e6:f6:68:e7:0d:2c:e7:b6:36:09:8c:ba:2d:f6:
5f:7a:97:a5:20:12:2f:93:46:d6:e2:3e:2f:97:12:da:d1:30:
6d:7e:f1:c8:67:8a:28:87:04:5b:6f:cf:aa:e7:1f:13:cb:a0:
f1:40:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:33 2025 by rpki-client