Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: 83liZtvit5O/0kuq7p2g7SvexTbe61FE7gllzyAH0JQ=
Subject key identifier: B2:28:96:BD:8B:34:C5:22:49:FA:9D:0C:A9:45:16:0E:8B:31:BC:10
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 019A71B84BBDC152AD8232BF17B520BE667E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 09E1
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=)
2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: y2pjD4AZUWb6g9AXwfVUftRX/dEC1PalXVJ06GiRGjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4b:bd:c1:52:ad:82:32:bf:17:b5:20:be:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=b22896bd8b34c52249fa9d0ca945160e8b31bc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:a1:2b:50:f4:c7:2e:32:69:17:f1:37:bf:
8a:cd:62:de:57:9b:95:05:64:d7:85:09:57:b4:80:
07:2b:64:d9:f3:4b:01:bf:97:06:0f:b6:fa:eb:b8:
7c:5c:d3:16:31:ce:13:05:c7:46:2d:57:80:bf:f2:
eb:cb:9e:95:07:cb:c9:6b:db:d2:1a:aa:7d:49:6c:
6c:8e:e3:de:58:f9:a7:4b:15:67:a9:9a:ac:d2:06:
58:0a:c3:77:13:54:3b:d2:b7:2b:d9:f3:db:af:80:
65:c0:65:a4:ad:0a:c9:cf:e4:9e:41:76:11:dd:ff:
33:79:73:26:77:cc:f8:cf:91:60:e7:85:d7:5f:db:
39:2b:53:fe:f0:ef:6a:b2:37:2c:12:bf:45:09:73:
00:79:28:ae:87:25:c9:ec:af:b4:7d:9f:8b:96:c8:
13:aa:54:1c:16:45:77:e9:df:45:d6:31:03:c9:68:
b0:5f:ad:f8:88:1e:4a:e1:fa:9c:8d:d6:c7:51:f7:
55:d3:b4:5b:b9:4b:51:d6:33:71:f9:04:5c:54:1a:
b6:1f:1a:5e:97:00:6a:7a:38:6d:af:04:26:83:76:
a5:d1:24:dc:4b:0e:7c:03:2c:17:b8:25:7c:26:2a:
e8:6d:0a:aa:d1:5d:2c:e0:71:38:64:4f:b2:a5:4a:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:28:96:BD:8B:34:C5:22:49:FA:9D:0C:A9:45:16:0E:8B:31:BC:10
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2f:77:99:96:b3:82:42:bd:6c:11:db:11:57:80:8a:72:be:
77:b4:54:d4:15:c8:ab:f8:80:d6:ae:09:9b:48:31:e2:db:e1:
8f:27:82:dd:3e:ef:40:a5:f1:db:ea:00:a0:e0:61:b4:2d:1c:
9e:50:87:dd:b4:06:ef:51:2a:8a:f7:8a:96:16:42:18:9d:e7:
26:e3:72:58:4b:0b:8a:ef:ac:ca:ba:b0:0c:08:5b:ea:ee:e4:
62:09:f7:07:c4:cf:ab:af:c6:37:e4:61:2a:ad:ef:77:a6:17:
40:dc:a2:44:6a:c5:31:7b:0a:5c:bb:6c:80:f2:40:65:9e:f5:
b0:a4:6b:66:f8:f0:d8:8b:88:af:01:b6:57:fa:7d:69:28:96:
b1:3f:4a:3d:64:99:ff:d6:94:e3:33:55:a3:7c:c1:08:80:9e:
fb:01:7a:13:4c:91:1a:12:79:28:27:b0:f0:1b:da:3d:4b:08:
62:f3:ef:5e:0a:43:7e:ce:a2:64:aa:f0:18:64:9b:0b:67:6e:
cc:68:de:ca:82:53:4a:8c:85:7f:b3:69:d1:c6:b9:97:e3:c5:
5c:01:7f:d3:38:b7:f8:a7:44:e3:c3:8e:23:dd:ee:57:25:b6:
28:93:f4:2e:83:68:9b:b3:fd:fe:b2:c3:b1:09:82:ec:45:75:
bc:12:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:53 2025 by rpki-client