Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier: qUvmx1n+BR8qQnDlReBmH38fVHd+k5H25Y6kNiqjJEY=
Subject key identifier: CC:D3:7B:8A:2E:57:FF:07:C7:8B:B3:68:4E:D2:3E:37:1E:CD:B0:37
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 019A28C2E3C3B4673CFBB6BC1504C18E11A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number: 1169
Signing time: Tue 28 Oct 2025 03:00:52 +0000
Manifest this update: Tue 28 Oct 2025 03:00:52 +0000
Manifest next update: Wed 29 Oct 2025 03:00:52 +0000
Files and hashes: 1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=)
2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: EhESpuDk9Ul8d98Ls6nHH65lz4hEEmkjZQgFvuFrj4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:e3:c3:b4:67:3c:fb:b6:bc:15:04:c1:8e:11:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Oct 28 03:00:52 2025 GMT
Not After : Oct 29 03:00:52 2025 GMT
Subject: CN=ccd37b8a2e57ff07c78bb3684ed23e371ecdb037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:5a:bf:39:76:dc:45:33:e1:66:fa:6e:f6:
49:92:90:02:a2:ba:3f:a1:7e:e1:bc:2f:45:31:b5:
5c:29:5b:e4:b4:e0:7b:6c:8e:13:c0:76:c7:aa:09:
90:94:7e:47:a4:48:b4:6f:7f:3e:bf:65:d3:29:ba:
77:eb:0d:de:15:68:ab:7b:88:ce:1e:0e:8d:9d:af:
0d:47:ac:a3:a9:25:38:f1:03:46:38:a3:54:33:dc:
71:d1:33:26:f5:07:4e:0a:1f:95:ae:8b:50:3a:35:
b7:d7:fd:eb:a5:38:d9:ff:52:e2:e7:ec:be:0f:b9:
b5:5e:c8:41:8d:85:e9:ac:76:58:de:82:3d:7a:0e:
b6:43:87:05:79:5a:4d:e9:02:ec:84:b6:3c:ef:ee:
fa:e1:75:3e:58:a6:c2:de:a6:75:bb:1c:67:46:3b:
5d:a9:b7:be:47:71:78:a6:12:6f:8c:89:04:ad:7f:
c1:ed:87:f0:d2:38:5b:17:5d:82:3d:ff:38:98:13:
cf:f9:32:9c:c5:96:90:e2:c3:dc:df:42:94:47:f7:
7a:13:57:94:65:7b:d1:fd:dd:f0:e7:77:dd:f3:be:
25:ac:cf:76:85:99:d6:af:0e:c9:5f:00:7f:08:04:
eb:9a:9a:09:f9:3c:a7:23:0e:b6:58:34:64:0e:e0:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D3:7B:8A:2E:57:FF:07:C7:8B:B3:68:4E:D2:3E:37:1E:CD:B0:37
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9f:07:b6:55:54:6a:eb:19:46:d2:d5:0e:fb:5e:1b:5f:17:
3e:b2:8f:a5:a9:c9:bc:72:21:d3:aa:06:7e:7f:7d:da:66:d5:
79:d6:b3:cf:4a:a9:c6:aa:ec:61:70:88:de:98:f4:e1:d9:d1:
4a:12:1f:1b:a8:e2:43:3b:9e:36:47:29:1f:f5:80:0f:f0:b9:
20:b3:d3:a6:f7:4f:36:e1:44:47:c1:6e:fc:ff:91:8c:35:09:
f5:ff:e5:ba:3e:b5:60:ba:1b:05:04:43:8b:a2:73:58:41:82:
d9:63:65:1b:ad:d8:80:1e:4b:27:cc:4a:72:db:d0:df:fc:ac:
8d:29:b9:73:8e:2a:1f:c9:5d:be:d2:8a:1d:aa:12:2a:59:b7:
90:ee:a7:6c:73:29:c4:84:38:f6:c7:65:75:8a:92:d7:9d:53:
77:a6:bf:e0:f0:af:fa:e2:fa:66:99:75:79:5c:ae:68:b9:e2:
d0:ee:8f:89:5b:11:78:31:d4:2a:3f:8a:84:96:1e:92:ac:41:
dd:72:7d:02:ea:03:b3:e2:1a:58:ef:a7:e2:4e:6c:a1:cb:3a:
84:0e:9b:91:11:7b:c6:72:e0:44:35:31:91:29:9d:32:d2:b8:
89:d7:b0:d3:42:88:20:60:0a:63:8f:7f:1b:28:de:a0:e8:23:
10:4b:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:21:36 2025 by rpki-client