Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: 36n3+D/6R9Bufpma5zM8wZDMznRbZurkWqcbfekzH6w=
Subject key identifier: D1:BB:42:86:FA:4F:61:38:99:85:A5:D4:0A:C4:4B:81:6C:23:82:70
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 019A228A78A6B437B400A416FCC07EC609BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 1688
Signing time: Sun 26 Oct 2025 22:01:31 +0000
Manifest this update: Sun 26 Oct 2025 22:01:31 +0000
Manifest next update: Mon 27 Oct 2025 22:01:31 +0000
Files and hashes: 1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: wsP4CvP0EHoZQ+JAfoVpKewZWgIT11rvcC0gHGqjnRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:78:a6:b4:37:b4:00:a4:16:fc:c0:7e:c6:09:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Oct 26 22:01:31 2025 GMT
Not After : Oct 27 22:01:31 2025 GMT
Subject: CN=d1bb4286fa4f61389985a5d40ac44b816c238270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:b1:22:20:02:94:28:95:2d:02:ca:df:d6:
aa:ed:e9:07:32:36:18:07:1b:ca:4b:9e:67:b0:83:
c1:32:f1:f1:55:f7:eb:a5:93:cf:77:f4:38:dd:73:
6f:0c:17:d2:ed:78:d1:f1:12:1d:b9:87:af:cb:1c:
9c:ea:72:26:97:26:81:38:7b:96:56:16:65:dc:4c:
b8:52:1e:b9:2c:e6:d8:04:c7:9a:f1:71:f1:15:a0:
bd:d2:c5:a7:19:7e:3e:53:ba:bb:65:c2:fe:5e:65:
60:ac:09:79:c8:8c:13:fd:7e:1a:7a:0a:7f:0a:5c:
00:f2:14:3d:d0:0e:a1:7b:57:dd:64:b1:c7:cc:a6:
7d:32:2b:ca:b6:93:76:14:b8:f3:61:e1:42:f8:ee:
85:7b:c2:f4:0e:5d:c0:e3:70:fe:3a:10:77:31:eb:
20:32:d9:a5:b9:b8:8a:70:5e:ee:29:e6:52:34:6e:
e8:68:f8:3d:f8:15:99:55:19:a3:ee:e6:07:e7:49:
83:2f:c3:b2:0b:e5:c7:f2:af:89:58:c4:fe:c8:49:
15:dc:d6:8c:f0:6b:34:1e:ca:16:9b:c7:07:01:e3:
f1:84:3f:eb:66:4b:87:d7:92:1d:c3:60:63:ce:a2:
d7:25:7d:0b:a2:64:84:10:e7:82:92:06:46:e0:27:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:42:86:FA:4F:61:38:99:85:A5:D4:0A:C4:4B:81:6C:23:82:70
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6c:f4:88:ed:4e:58:c7:b7:98:a5:80:43:b1:12:d5:fb:77:
6e:5a:96:38:db:67:c8:cb:a9:88:2a:66:23:5c:74:64:cd:8b:
e6:09:f9:6a:12:04:fc:00:81:e9:85:2c:57:8b:9b:a0:54:84:
b6:39:24:b7:07:7d:b0:e9:b7:c9:97:8d:ba:bb:79:9f:3c:ba:
84:81:ef:db:e1:d9:e3:e4:f4:c1:da:ce:e5:4d:de:d1:8e:f6:
a0:38:f6:44:ee:d2:9b:fd:93:a9:05:40:7c:9f:af:31:0c:6f:
7d:90:94:6e:da:fc:cb:a1:ad:75:aa:55:f5:d8:96:41:27:e6:
47:e9:b6:db:56:cb:e8:42:8d:7f:5f:1e:c4:e4:01:5c:4c:b6:
f9:bd:64:04:0d:61:24:b4:a3:d2:e1:09:01:d4:71:75:2d:1d:
ff:2f:72:a5:a1:7f:28:c8:1a:eb:9f:98:79:e3:e3:b6:b4:39:
58:9e:8c:92:fc:8b:97:5b:95:6d:68:82:90:0a:01:9f:77:b1:
f2:c8:b8:a7:15:f0:a4:c0:6a:52:88:bf:33:2b:cc:6b:47:be:
3f:55:a3:44:36:e0:d7:dc:5d:95:42:c8:ed:79:d9:14:ca:3e:
3c:2b:c5:2e:75:5e:36:e8:f5:7d:cb:21:e9:31:ab:f7:5d:b8:
a5:f3:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:50 2025 by rpki-client