Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: SLxZHgIDJpTfM6qL5I7o3cxJeMMEWysXeboFvoEXRhg=
Subject key identifier: 5C:00:50:AE:07:09:81:07:33:83:B6:26:A6:C4:97:65:0A:2C:28:36
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 0199E0E0D69764745AF22C0A4D5DE8468571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 13F0
Signing time: Tue 14 Oct 2025 04:00:54 +0000
Manifest this update: Tue 14 Oct 2025 04:00:54 +0000
Manifest next update: Wed 15 Oct 2025 04:00:54 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: f8brl8I2si2QXmTfJYmOA1uUEhTk6gbfFeJFclNWkOo=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e0:e0:d6:97:64:74:5a:f2:2c:0a:4d:5d:e8:46:85:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Oct 14 04:00:54 2025 GMT
Not After : Oct 15 04:00:54 2025 GMT
Subject: CN=5c0050ae070981073383b626a6c497650a2c2836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:c2:1d:2f:58:22:70:69:6a:1c:cb:ce:e6:
e6:43:cb:c7:4e:ae:d5:0c:e2:83:32:b5:17:ed:ed:
db:ee:ca:30:62:63:0b:e2:9b:93:74:e6:5e:7f:47:
48:08:95:87:d8:5e:80:3c:2b:e9:82:11:1b:0c:2c:
52:5b:bd:4a:27:2d:ea:b4:1c:e7:f2:2d:54:00:60:
2c:5c:cc:51:9c:fd:86:af:bb:70:a8:93:d0:bc:28:
5a:c7:01:3f:31:7a:2e:af:ee:4b:bd:14:d7:c3:2c:
54:e8:0e:fb:42:03:a8:92:e5:1b:17:76:6e:6a:bf:
90:8d:ad:3a:98:38:0d:77:c6:d7:ce:b8:c4:89:e0:
c8:ab:0a:e9:10:f6:0c:1b:1a:1d:08:b1:02:3d:db:
a0:89:48:8e:83:e4:dc:4c:ad:b7:a1:be:4d:94:d5:
a7:29:06:5b:db:b9:39:94:f1:f0:5b:01:81:5c:7f:
c3:17:ac:53:21:ea:e9:e0:69:ca:58:16:d9:2a:c2:
79:a9:3d:0c:fa:6e:e9:c2:3e:50:39:c5:ec:06:6d:
30:88:ed:64:8d:bb:52:8c:ed:09:56:ec:a2:42:00:
a2:e7:18:e1:7a:69:f6:a3:3f:ac:ad:e8:7b:35:34:
a8:ac:41:c1:dc:10:47:e1:8b:7e:b0:27:8b:a2:89:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:50:AE:07:09:81:07:33:83:B6:26:A6:C4:97:65:0A:2C:28:36
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:71:86:fe:87:54:64:a5:c8:b7:1a:db:bc:a5:20:19:68:e9:
99:db:82:35:33:92:71:5e:d1:09:19:41:54:a9:25:46:e1:d9:
cb:7e:55:e0:d4:4e:95:c4:1e:a6:00:a3:4b:f3:80:0e:d8:dd:
f4:42:66:34:61:ff:ed:44:50:5e:fe:fd:68:bb:08:b3:a3:3c:
e8:03:c9:19:b9:10:c3:d8:e0:59:b5:b3:c7:6c:24:b8:f3:9e:
e8:ac:e6:29:48:6d:ca:e2:66:e9:b8:0b:64:e5:32:26:ee:65:
05:16:0e:73:12:13:32:a7:78:14:0a:aa:07:b2:d9:e8:8c:67:
a9:6a:8d:8c:b6:6f:c0:7a:2b:b3:9a:b9:61:0c:ef:2f:11:46:
ba:fc:7a:36:e8:1a:7c:fa:ce:a1:e5:15:85:c8:61:73:30:6b:
b6:97:5b:cc:05:57:28:02:8c:a1:1b:3e:68:44:35:5d:24:b0:
44:98:c8:b7:d3:4c:b7:39:ae:60:b2:a0:25:ea:27:7d:3d:0a:
ed:1d:b9:2d:6c:f0:60:19:54:70:e8:b9:d6:d3:a7:51:73:7e:
e9:10:30:5e:72:4d:21:bc:55:07:d2:0c:da:54:47:8c:8e:a4:
06:cb:c7:46:71:2a:3f:b4:1f:64:46:28:df:bd:4e:1f:5d:9e:
a5:c9:79:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:28:12 2025 by rpki-client