Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File: zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier: Tr5divyiGZje7Q2JC8Zt09dUZLbmocJCWXbzGlDPrAQ=
Subject key identifier: F9:85:8B:3A:E6:B4:F2:1B:51:EB:EB:E6:E5:C6:FF:D9:99:B0:46:E9
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial: 019A73382962ACE1B9CF7C255E248891D394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number: 0F38
Signing time: Tue 11 Nov 2025 14:00:51 +0000
Manifest this update: Tue 11 Nov 2025 14:00:51 +0000
Manifest next update: Wed 12 Nov 2025 14:00:51 +0000
Files and hashes: 1: ahWZL5H1qGkfpR9r5MK6JSJk1Dc.roa (hash: WUef3WgjpaprU4IuIXYy1q31GG6Dfwy/D5/f2fp0uKs=)
2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: b8E8cOT5F4lVYfdVkOvzRj0euHa0gUmF/A/uDQKDF2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:29:62:ac:e1:b9:cf:7c:25:5e:24:88:91:d3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Validity
Not Before: Nov 11 14:00:51 2025 GMT
Not After : Nov 12 14:00:51 2025 GMT
Subject: CN=f9858b3ae6b4f21b51ebebe6e5c6ffd999b046e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:ed:a9:0f:29:fd:bb:20:ad:e2:48:c2:00:
e2:05:e6:bd:f3:a6:b2:27:3c:18:0f:1f:a1:a4:ea:
e8:31:69:95:fc:27:19:bf:05:ef:24:0d:17:3e:ae:
db:31:7c:6c:d4:20:18:2f:64:5b:d5:21:e0:ab:28:
a5:8c:82:cf:81:4a:8a:fa:dd:3b:78:68:0e:a7:19:
5c:46:64:9a:36:89:c7:cc:4d:50:fe:c7:44:f2:79:
00:68:63:9b:0c:65:c1:49:c0:85:64:84:20:12:22:
01:76:9f:ec:a3:c4:9d:79:6b:65:5a:7c:a9:ad:0f:
99:f1:38:73:86:af:ad:13:b3:82:be:ac:26:29:38:
db:2c:7d:5a:d3:b8:60:1b:b5:b0:fa:c2:ea:e8:c2:
c3:4c:ae:cd:b9:68:e0:9f:e7:96:8b:99:80:75:9a:
fb:c7:d3:7a:77:57:35:b0:a8:b2:bf:51:a2:47:e6:
7a:bf:7e:ee:4b:8c:41:14:32:53:41:a9:86:3f:b6:
73:c5:6d:ed:cb:7f:e0:51:a3:77:77:73:d2:f0:6f:
05:d7:ef:c8:02:0a:92:81:1f:03:ea:d1:5f:a0:c9:
9d:85:de:84:9b:e4:7b:07:bf:17:44:a4:85:9e:23:
19:f2:77:10:ba:a2:29:5d:e5:a2:f6:f4:9f:fc:96:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:8B:3A:E6:B4:F2:1B:51:EB:EB:E6:E5:C6:FF:D9:99:B0:46:E9
X509v3 Authority Key Identifier:
keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:59:78:53:1b:10:7d:73:e4:a8:13:44:58:d0:06:9f:18:0b:
f7:83:95:8f:50:07:a0:21:47:1f:3e:36:bb:6d:a1:58:e7:a0:
6d:b9:b6:32:d5:fd:f4:d1:10:1e:b0:cb:3b:5a:02:21:3c:f8:
28:41:b2:8f:a5:41:35:4a:f7:26:90:25:9b:91:e0:6f:1e:16:
76:c5:25:d9:2a:32:fa:5e:d7:62:34:b2:b4:60:7c:a8:bf:1c:
dc:0c:59:1d:f5:a2:7e:e1:bc:40:da:7c:19:44:e9:a9:e2:15:
1d:21:01:82:71:6c:d6:b8:30:99:ab:23:44:03:ae:df:76:ef:
ba:ff:20:56:53:52:75:1c:0d:6c:40:08:a9:f4:e7:05:08:02:
fb:ec:14:4e:27:78:4b:9a:40:3b:2e:58:09:a7:f0:25:eb:1d:
32:ef:da:a8:db:7a:e8:2f:62:24:e1:3c:bd:fa:83:55:2f:e7:
e1:05:e6:8b:e3:df:43:5e:04:de:05:ac:0f:d6:9d:bf:f2:0f:
ff:8b:d3:3e:9e:5d:bb:42:c4:59:a3:05:59:2c:e3:b8:cf:21:
38:ae:99:af:4b:ed:b9:77:f7:18:e2:c5:27:1d:da:b6:cf:17:
ca:17:fe:5e:c7:99:9d:9f:08:6c:c8:6d:34:19:66:28:ef:ec:
e2:66:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:17 2025 by rpki-client