Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: T3CBy6S1CKkoVSNm12y165BSJ17G442NzdNTcTx/qEA=
Subject key identifier: A2:DD:D8:E4:25:87:6D:51:79:BD:7C:ED:5E:D3:6C:9C:70:31:EF:70
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 019A239BDD4D0713459049452698CE3F106E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 04E9
Signing time: Mon 27 Oct 2025 03:00:08 +0000
Manifest this update: Mon 27 Oct 2025 03:00:08 +0000
Manifest next update: Tue 28 Oct 2025 03:00:08 +0000
Files and hashes: 1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: a5rNYwryKVVqxgkDB1b06VbPmPbjU4mVD+IrfXHhZG8=)
2: bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa (hash: CuuNkCn7ATc07S7puEJg/6wk+lxa5wMurXD4UWOiLPU=)
3: ktlX3SLAF-YNCTgumZIXLbUnbdQ.roa (hash: zK0y4Hfa+Cd7i8O+iE+DO6cd+9VnESfA1kHZCk8+iwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9b:dd:4d:07:13:45:90:49:45:26:98:ce:3f:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Oct 27 03:00:08 2025 GMT
Not After : Oct 28 03:00:08 2025 GMT
Subject: CN=a2ddd8e425876d5179bd7ced5ed36c9c7031ef70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:38:ed:42:a4:a1:43:4b:16:22:d4:f4:99:4d:
4e:bc:2c:8d:1c:86:5a:b5:8d:e9:12:d4:a4:f9:9c:
ce:a7:cd:a0:58:05:95:98:06:c9:30:5e:e0:37:da:
4d:28:07:88:a0:85:e7:30:66:a1:3a:eb:00:9d:1b:
b6:f9:f2:ef:8f:7a:9f:03:ca:5a:77:f7:c2:b0:a3:
ba:33:b8:2c:80:1b:42:79:7a:c8:98:32:20:f9:f6:
b1:80:b4:e2:a5:0b:0d:8d:53:e3:6a:1f:00:df:d4:
fc:b5:91:f1:c9:42:d4:29:53:82:33:7c:1c:4f:c0:
a9:3f:cd:a5:dc:14:a5:ea:66:7c:00:4a:e8:b8:f9:
56:dd:4b:c5:92:81:37:09:f3:0d:98:6f:1e:61:23:
93:eb:08:47:43:32:0b:f1:6b:ec:a9:de:29:cd:f2:
e7:44:13:3a:16:b3:06:d5:5d:70:b9:ba:4d:e2:bd:
02:37:9b:8a:81:cf:91:3d:dd:0a:93:51:50:29:e2:
3a:7f:9c:b1:34:db:f2:57:ea:45:12:b7:57:44:22:
cc:78:a4:2f:00:55:aa:06:ac:11:4a:b4:da:90:49:
29:71:c0:0e:c0:02:4c:06:1e:fd:2b:81:8e:40:4b:
a0:e0:b9:93:73:e9:fd:cc:84:41:6d:6c:3d:75:b7:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DD:D8:E4:25:87:6D:51:79:BD:7C:ED:5E:D3:6C:9C:70:31:EF:70
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:47:92:6e:48:ce:5f:32:e8:17:53:29:78:df:48:f7:04:8a:
a6:6d:ae:dc:22:d0:3b:ff:b2:ed:39:74:4e:b4:b2:85:9f:72:
fa:b4:f8:57:af:37:eb:9c:8e:82:9e:5d:cb:80:b5:de:61:bc:
6c:59:e3:bb:5b:22:e6:78:1a:59:13:1c:ae:8e:47:3e:29:ac:
4f:ff:a9:ec:62:95:17:42:e9:54:be:2d:3a:e3:75:e1:0d:de:
ef:e9:20:da:73:8b:95:b0:f3:bb:63:c1:60:ac:30:3c:5c:ad:
c7:04:59:6f:4c:74:11:a0:0c:ce:1d:99:90:c0:b4:fc:f4:02:
8e:42:29:31:c3:f5:bb:02:66:76:ab:bb:0e:14:be:30:65:bd:
e8:2b:c4:01:25:a7:37:3b:59:a4:a7:77:4b:c5:42:96:3a:fc:
95:47:58:c2:51:8d:77:ae:cc:8e:51:09:a0:93:56:d3:5a:71:
03:ec:63:3d:64:64:d8:63:72:18:52:20:5e:98:34:c3:77:33:
ef:8c:48:7c:9f:ee:a2:0a:16:ba:76:bb:28:b3:91:e3:16:1b:
d0:75:3c:3e:48:3f:0e:23:eb:d9:ae:ed:c8:79:b4:16:8c:b1:
01:87:3a:8f:e7:5c:54:c7:80:93:f3:31:ba:36:f5:cd:b1:78:
e7:f8:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:25:41 2025 by rpki-client