Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: lc+Ld0MNyhQCGsS6JAURONzcI7orJyZI9mmu4ybMWaM=
Subject key identifier: 18:30:BC:BB:D0:07:CB:0A:6F:36:89:06:2A:B3:6D:09:9E:A0:41:6C
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 019A1C193B9AAF38980155F67D68C8C546F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 0EA4
Signing time: Sat 25 Oct 2025 16:00:06 +0000
Manifest this update: Sat 25 Oct 2025 16:00:06 +0000
Manifest next update: Sun 26 Oct 2025 16:00:06 +0000
Files and hashes: 1: BwnHgQdnSW_44Zer0BPcUVfjgDQ.roa (hash: b79Q7WZT/53by0ulZoD5j5IcmVLwQi3rmkQDc+HVWZI=)
2: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=)
3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: LqAMmBdHojt4x7B5qMhNThPq947laHZjd0gPIFKead4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:3b:9a:af:38:98:01:55:f6:7d:68:c8:c5:46:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Oct 25 16:00:06 2025 GMT
Not After : Oct 26 16:00:06 2025 GMT
Subject: CN=1830bcbbd007cb0a6f3689062ab36d099ea0416c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:35:99:b9:91:9b:3a:43:e3:34:72:18:2f:
98:cb:23:6d:5c:55:0c:5a:35:1d:a3:72:b0:4f:1d:
36:b6:32:ad:df:3b:bc:4b:9f:ae:29:8b:88:41:ba:
34:e2:51:c1:63:f2:4a:5b:12:d4:97:83:30:54:c5:
22:11:07:eb:06:72:5d:20:89:8c:71:3d:1d:f1:57:
82:61:76:e9:eb:11:15:4f:e8:95:e6:b7:ee:88:fc:
ef:d1:aa:8e:24:50:7c:7c:57:95:5a:68:07:d2:e1:
d3:16:50:5c:d8:0d:40:fc:2d:aa:7e:f6:f5:ce:05:
49:51:55:9e:26:52:22:fa:0b:ef:db:97:9a:57:e4:
cb:b3:4d:fa:45:9a:ea:65:c2:7c:aa:9d:cd:9d:1b:
2b:cc:bd:de:73:4e:63:07:d8:d1:38:62:ae:ad:31:
be:b0:a7:02:3f:1e:54:d3:69:87:55:49:7b:66:95:
10:52:66:89:4b:0c:2f:cb:a8:35:9c:7c:58:c7:cd:
fd:53:85:95:a7:c5:ce:1a:2d:68:7f:9c:9c:97:35:
13:5e:18:12:cb:cb:55:7f:fd:8c:c2:fb:01:65:09:
db:5d:68:01:7f:75:c9:de:ce:69:29:71:b3:03:02:
6a:b6:ca:71:7c:09:12:8a:df:10:bf:69:30:62:79:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:30:BC:BB:D0:07:CB:0A:6F:36:89:06:2A:B3:6D:09:9E:A0:41:6C
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7b:a1:d8:5c:8b:0b:56:d9:bb:9a:5c:c8:86:9c:58:7d:46:
76:7a:21:76:b5:04:69:f0:d1:ac:4f:84:c2:31:5c:ed:06:38:
84:1e:26:ac:bd:77:3e:36:73:c9:61:d5:83:5a:40:b2:6e:0f:
0f:14:c1:75:37:02:5f:20:7c:8f:66:ed:cd:fe:39:e4:6d:7e:
40:01:fc:4f:1e:6d:38:ed:72:4d:3c:77:49:dd:0b:ef:2e:0c:
aa:d9:b3:8a:b7:31:e5:8a:d8:fc:56:1f:ab:e3:4b:b5:1c:c9:
26:da:69:ca:50:e0:96:12:04:70:bc:ef:89:c2:1b:3e:03:e5:
e1:07:60:16:c0:3d:b4:66:e5:37:77:74:80:3d:e4:15:a0:4a:
ba:aa:9e:21:ff:f5:f2:09:91:b2:03:db:30:e1:e9:30:50:df:
bc:ca:ea:4b:6e:cf:14:7d:91:9c:1f:54:5b:1a:77:25:34:e9:
43:93:fa:b4:93:b3:c9:f2:22:53:30:f4:b1:ff:df:03:ad:32:
9f:54:60:40:50:41:d4:47:a8:76:dd:0b:08:9a:a2:66:38:87:
b5:40:b5:ec:80:f8:0a:d2:1c:ef:6e:f3:80:b7:67:d0:0a:16:
65:6b:1a:0b:16:06:68:03:77:18:1f:cd:3b:95:8c:a6:3f:2d:
90:71:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:06:37 2025 by rpki-client