Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: zi4ckW6oOkw8jHO6zKJ3P3Y7NX7bsw4W9sW1hyQQU+g=
Subject key identifier: 24:08:0F:2E:B2:FC:32:A5:9F:6E:53:8C:53:7F:C9:FA:60:96:DD:BE
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 019A23D2D8AF5E332ADF06A7A09C65427CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 1700
Signing time: Mon 27 Oct 2025 04:00:11 +0000
Manifest this update: Mon 27 Oct 2025 04:00:11 +0000
Manifest next update: Tue 28 Oct 2025 04:00:11 +0000
Files and hashes: 1: Nleevi_t1odK2SQMPlwz5kkpo1Y.roa (hash: DKM+JxDcrxSfZrM/04OPCw4rkiFmFEDYym5FUi8PCsQ=)
2: Vo2fmYOdwpsZlWnrLb9PR2qxUiU.roa (hash: ofRGxwyei53l51n5v+e08DV9i8dygPEuLXkTPl6qbNI=)
3: YCaEZB50rCphFHNs0SPFVykePLA.roa (hash: AXiMRnv2MY2eYU5zXOJ4Cp11rWQHmU+zWOZeXxL9Un4=)
4: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: j68XwGX7zAsVfPbPbZ2wRfKQI+/gWH9nTCY5zcsreDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:d8:af:5e:33:2a:df:06:a7:a0:9c:65:42:7c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Oct 27 04:00:11 2025 GMT
Not After : Oct 28 04:00:11 2025 GMT
Subject: CN=24080f2eb2fc32a59f6e538c537fc9fa6096ddbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:00:c1:9f:5b:bb:c4:4e:6c:47:b0:2d:d1:
76:33:6f:ad:c3:5f:33:b0:61:bf:27:d5:4d:d6:09:
23:53:81:99:f9:75:da:d0:3d:3e:ab:7a:b1:24:88:
37:bc:34:7a:d4:20:ac:35:6b:41:f5:93:16:7a:fd:
98:0c:c1:3e:8e:79:f1:2e:50:1a:d6:4c:15:03:a4:
fe:e1:4f:59:ba:50:1f:a8:8a:77:cc:b7:69:0a:ae:
02:64:a3:d6:77:c7:6a:11:e6:9c:6f:e3:2d:15:4a:
5f:9d:b7:1f:68:d5:09:f3:ae:40:e2:ec:fe:57:34:
df:a6:09:46:13:fd:cd:3c:1a:17:31:18:c4:f4:61:
5d:56:54:05:7d:ef:83:df:9e:84:12:a9:0f:6a:7f:
fb:df:74:6f:3e:4c:c0:c2:bf:3c:d9:3c:8a:40:de:
97:fb:8e:c9:76:33:9d:c9:bd:86:39:cd:9c:63:1c:
e4:28:3e:1c:5b:ee:fa:a0:d5:c4:d5:37:a6:58:f5:
38:c2:cc:1a:e6:21:19:19:d6:2b:a6:86:25:dc:93:
19:0c:a4:49:92:d4:74:55:4e:ce:dd:3c:b3:90:9a:
8b:27:89:b5:2c:19:c1:1c:4f:62:4a:ae:f0:75:62:
a5:ad:85:67:38:af:9e:13:80:2a:23:5f:a8:14:c2:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:0F:2E:B2:FC:32:A5:9F:6E:53:8C:53:7F:C9:FA:60:96:DD:BE
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c2:99:a1:15:30:23:ea:54:ea:ed:9a:12:8e:3c:df:98:5d:
33:84:dd:f0:9a:6b:52:4a:07:af:2a:41:ff:1d:fb:c6:8a:83:
b9:42:42:3f:9b:55:9b:d8:b8:37:1b:ff:20:84:49:4c:38:d7:
31:77:e0:4d:86:e6:51:d8:33:44:ed:64:46:d8:fe:04:95:d6:
4e:5d:17:29:8b:b1:c6:32:02:6c:c9:9d:26:0b:70:c6:bb:aa:
e0:15:5f:23:e3:ab:01:85:5b:a6:73:28:c4:9f:53:70:c1:7e:
70:5a:44:09:8c:80:b3:73:1f:46:5d:e5:9f:41:5b:5b:fa:f6:
47:16:04:21:51:ff:96:39:c8:33:a9:39:51:0c:1d:85:c4:23:
bf:8e:d5:6c:77:01:94:22:4a:5f:80:62:28:43:97:08:7f:e2:
23:e1:f3:86:e7:da:c7:b1:f2:1d:08:e7:a6:bd:19:9a:1e:bb:
c1:6d:91:88:fd:59:89:c9:91:9d:54:83:5f:23:fc:52:4f:09:
c0:85:9a:6d:a0:1f:c6:dd:8a:60:47:43:94:72:fb:d5:03:01:
24:92:e2:cc:2d:7a:05:32:4b:36:c2:d6:b7:5f:9b:d7:8d:43:
60:6a:7c:b3:08:d7:37:34:9c:63:7a:47:9d:c7:85:c3:fe:6a:
cb:79:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:41 2025 by rpki-client