Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: qe84aF4ZBm+OZ8pJ4AtAHth40DBSJvgEyW3k+9yR5DY=
Subject key identifier: 95:45:0D:21:33:6F:DD:F2:F4:75:6F:8B:AF:22:2B:EE:BA:B7:52:B6
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019A1B3DABE66A71628038CB78E1CA645749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1687
Signing time: Sat 25 Oct 2025 12:00:17 +0000
Manifest this update: Sat 25 Oct 2025 12:00:17 +0000
Manifest next update: Sun 26 Oct 2025 12:00:17 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: BgUBwvGM4C5ylHQ4AP9Zrf/Ku/PVkW2I9hl77Jlnguk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:ab:e6:6a:71:62:80:38:cb:78:e1:ca:64:57:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Oct 25 12:00:17 2025 GMT
Not After : Oct 26 12:00:17 2025 GMT
Subject: CN=95450d21336fddf2f4756f8baf222beebab752b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:0e:29:54:de:64:59:60:ab:0e:61:85:eb:
60:d5:45:1c:78:ec:34:07:f7:a2:ba:a8:b4:e2:f5:
a7:ae:75:77:62:1f:6c:40:5c:9a:1c:57:ef:3c:ef:
27:6d:dc:c8:e4:d7:f1:a6:45:33:25:20:4c:45:5d:
4a:db:82:c7:f9:a9:9f:07:74:70:2c:85:eb:82:72:
aa:d4:c1:21:7f:f4:15:db:b0:86:86:c8:5a:3e:3e:
3e:ef:ce:3c:d1:62:b7:64:19:64:4b:19:9b:59:88:
07:86:11:b8:4f:8c:b4:37:8f:83:c3:d6:0c:51:41:
2a:4a:4d:38:5f:12:30:4f:1e:51:c6:98:c7:c2:4f:
d7:0a:42:77:ee:f0:de:59:3b:1d:71:64:a8:fb:9e:
5d:a0:11:f5:a6:a2:b9:d6:d0:9f:84:a5:10:60:83:
c3:c1:f5:2b:11:4a:d4:c4:a9:3b:0e:a5:d7:67:69:
0c:f3:f5:08:2b:bc:92:54:27:f8:ad:48:dc:30:ec:
45:0b:df:51:a6:28:fd:cf:ea:e5:39:d3:16:f0:c3:
b4:8e:79:83:2b:b7:9d:10:4b:33:29:56:f5:ed:c8:
fe:b2:96:3f:2e:7f:31:6b:51:3b:2b:a1:b6:51:0f:
d5:cb:64:35:d7:41:3d:4d:a0:d6:2b:8a:c6:eb:1e:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:45:0D:21:33:6F:DD:F2:F4:75:6F:8B:AF:22:2B:EE:BA:B7:52:B6
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1e:dc:bf:2b:fc:e6:8c:b9:73:72:cf:5d:40:4b:6f:80:1d:
85:a2:6d:d5:2b:fa:84:09:1c:c8:bf:8b:35:bf:1d:9b:1f:bf:
89:59:1c:ea:4a:5e:19:1d:02:e9:31:e1:6d:f8:1e:4c:1e:89:
2f:75:c6:ae:72:df:27:70:49:53:86:55:88:f7:3a:2e:08:f2:
b1:a1:da:e6:16:d7:70:04:c4:e7:37:7b:06:37:57:2e:04:a4:
2d:f4:f9:8f:f3:d9:6d:20:57:17:66:3d:4f:16:de:34:0a:54:
5f:18:70:27:1e:3b:6f:ff:58:9b:fe:4c:e1:84:4e:69:b8:4a:
f8:47:3c:8f:a0:2b:04:90:e2:6d:e9:4b:bd:01:bf:61:3f:71:
6c:b7:ed:ae:d4:3c:d0:bf:88:8e:d8:4f:f0:f1:5a:d4:c5:b7:
da:30:fe:23:c2:00:1c:81:b1:f9:e0:b4:ca:a0:83:30:35:29:
39:81:79:07:40:ff:a6:5b:79:b3:f2:30:30:26:b5:95:56:0a:
07:44:65:76:d9:15:62:d8:c0:f2:25:60:4a:ed:1a:4b:ef:42:
a9:3d:2d:2d:42:d5:ed:8b:7d:8b:0c:61:a8:01:7c:46:57:78:
68:3b:b3:10:86:54:34:6a:36:af:32:e1:f5:8e:b8:8e:af:5f:
33:b3:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:20 2025 by rpki-client