Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: tFxFDd6m5pwiFChHHJLRJ8LpzNXy/7EIvLbaZGThilc=
Subject key identifier: 55:F3:49:B8:50:0F:D0:CF:61:FD:E8:A3:CA:37:BA:36:47:A0:60:42
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019A255340D12C3DEE0C8DD455196E14216B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 170B
Signing time: Mon 27 Oct 2025 11:00:04 +0000
Manifest this update: Mon 27 Oct 2025 11:00:04 +0000
Manifest next update: Tue 28 Oct 2025 11:00:04 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: Ry3A7x/3oYoRQmtgi8utp6vvSTtOQ/lAT7iOi4KGJec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:40:d1:2c:3d:ee:0c:8d:d4:55:19:6e:14:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Oct 27 11:00:04 2025 GMT
Not After : Oct 28 11:00:04 2025 GMT
Subject: CN=55f349b8500fd0cf61fde8a3ca37ba3647a06042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:13:b2:4f:34:e3:15:b8:d2:4f:23:f7:3c:
9c:26:74:6f:96:83:23:3f:61:ce:1f:16:81:ed:6e:
c2:c2:ab:77:ad:1c:43:05:04:54:ae:79:fe:1c:96:
56:cf:7c:a7:46:f8:e2:26:ab:f5:f8:00:71:a0:2f:
6c:d1:70:85:fc:ff:cd:c2:18:30:aa:f7:57:0a:1c:
28:1b:b4:97:b0:3a:e1:bd:1e:77:25:b4:59:ef:30:
18:61:a8:55:6a:36:58:cd:a7:69:7e:bc:b9:62:3f:
ac:bf:7b:12:6c:62:99:aa:65:90:50:b8:72:59:32:
52:f3:37:01:d9:ed:1e:2d:c9:05:64:31:4a:2f:12:
45:5c:45:a3:fb:d9:26:55:25:5d:89:7e:d6:6c:81:
ed:e4:64:dc:af:e0:0b:59:c2:7f:7d:12:c5:99:6c:
8b:d0:85:cb:ec:34:87:d3:10:ca:4e:14:86:8e:72:
e1:e0:92:61:bc:09:64:07:c4:2b:3d:d4:e6:a5:fa:
08:90:18:f8:61:20:f5:a3:80:d2:90:76:66:53:0e:
b7:a7:a5:80:c0:f1:55:25:b6:c4:8f:69:38:8c:3d:
da:15:63:2e:3a:03:42:2d:ed:ac:16:9b:06:e3:69:
01:8a:3b:b3:87:db:51:06:04:8f:55:b7:d0:73:28:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F3:49:B8:50:0F:D0:CF:61:FD:E8:A3:CA:37:BA:36:47:A0:60:42
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bf:c3:17:82:d6:b3:a9:74:3c:c5:ab:59:38:10:08:9e:ac:
55:4e:22:28:2c:24:bb:29:22:9c:43:7a:94:a7:6c:4c:0b:02:
c5:71:53:52:06:c8:f9:c3:64:87:ea:ce:ce:cd:21:f5:cd:50:
44:29:bc:dc:e7:5f:bc:42:c4:da:4d:57:23:62:61:39:26:9e:
46:4d:44:c8:a6:d9:1d:fd:9e:6a:fe:83:94:ba:17:e6:e7:2e:
21:8d:ee:ac:10:51:f9:f7:4b:88:ee:3d:6c:e6:f0:b5:8c:01:
8e:de:02:b6:83:78:fd:ed:bf:54:6a:b9:f5:5a:e1:84:80:04:
5b:66:eb:1c:fd:8e:0f:4f:51:09:12:14:37:dd:ca:13:e4:7e:
7b:74:b1:98:c2:7c:91:35:9e:01:d6:9f:c6:b7:85:7a:eb:79:
8b:c9:b4:c2:21:f6:8c:3b:07:98:21:ea:9e:fe:59:ba:68:47:
a2:4b:b9:a6:43:40:42:03:00:8a:1e:43:f3:80:d8:34:8f:5b:
37:b6:5d:d2:f0:91:2e:5f:dc:61:86:bb:8a:18:13:21:55:cc:
72:13:02:62:76:ca:bd:3e:b1:f1:28:87:f1:b4:fd:10:77:5e:
b8:f7:1d:f1:d5:24:b7:e7:64:87:6f:f7:80:51:6f:85:1c:df:
7e:4d:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:08:58 2025 by rpki-client