Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: Nn5p0AiCE3kjg6EW1uNbd+gWLLEJB/mUhFq9BjhOuU8=
Subject key identifier: 57:97:EE:2A:E4:28:A5:7F:0B:9A:27:91:08:70:92:D6:AE:01:18:D7
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 019A22893494391A9477B35D621DBE4E4FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 143C
Signing time: Sun 26 Oct 2025 22:00:08 +0000
Manifest this update: Sun 26 Oct 2025 22:00:08 +0000
Manifest next update: Mon 27 Oct 2025 22:00:08 +0000
Files and hashes: 1: JLmy4TR8RrUtQURM0_SunkucXNg.roa (hash: tyjdJ+wzrKeWzDFxJ16QXw9ZyxjFDWvObDxvX6J8AjA=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: lWqJDPmUBECfIYEey5zs7ZgQhJYNKj3DkTmDmti6zpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:34:94:39:1a:94:77:b3:5d:62:1d:be:4e:4f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Oct 26 22:00:08 2025 GMT
Not After : Oct 27 22:00:08 2025 GMT
Subject: CN=5797ee2ae428a57f0b9a2791087092d6ae0118d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:48:1d:b1:fc:40:6c:c7:7f:7d:f3:e8:12:
c6:20:68:24:75:37:a1:99:ec:a7:28:76:6c:62:cc:
ee:04:2e:d3:8e:fc:af:69:fb:58:6d:b0:ce:60:8d:
e0:51:82:36:94:3c:97:b5:fd:14:74:0d:6a:20:52:
df:24:03:d1:39:2a:10:70:15:02:d9:d3:5e:06:d7:
0a:3b:ed:e3:4c:c6:de:70:83:90:f5:c5:3f:c3:67:
0c:74:1e:4e:5d:f5:86:56:80:e7:9c:24:8c:2d:9d:
5c:13:a9:12:c8:a8:a3:24:99:ef:01:af:ad:c2:32:
d2:6a:ee:06:3f:f7:fd:16:0b:be:1b:e0:1f:ea:09:
4a:c5:27:e5:d5:9d:5d:7c:0b:18:9f:22:05:89:39:
f9:ec:7f:28:ec:d7:40:8d:02:05:14:f1:44:11:15:
1b:55:d1:b3:b7:2f:ab:62:62:1a:83:31:f3:0c:f1:
a8:1f:98:bc:8c:7d:ff:04:f3:ae:81:7d:df:6c:40:
23:67:e2:4f:33:db:5c:ba:dd:aa:f2:d8:84:3a:69:
91:95:9c:fa:b1:96:51:29:d5:22:45:49:f2:13:bd:
c2:04:29:a7:66:1e:a2:99:e4:c6:39:48:55:95:f0:
d2:60:36:33:9a:9a:12:26:b2:f2:34:f9:74:d6:46:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:97:EE:2A:E4:28:A5:7F:0B:9A:27:91:08:70:92:D6:AE:01:18:D7
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:26:e3:28:dd:dd:d5:71:92:b2:ea:44:2d:78:24:56:66:96:
f2:e6:de:53:c3:f1:3a:a7:2e:90:4b:bb:e1:15:81:43:d2:66:
1f:74:60:87:54:50:99:f0:53:da:54:a5:a9:75:c8:3d:73:43:
82:a1:bc:b6:21:75:06:f5:c5:69:33:3d:e0:17:d3:6d:43:f3:
a5:37:b7:38:16:ce:d1:ef:4f:2e:f6:2d:89:a2:b3:10:72:82:
f9:33:34:2b:f7:6b:67:20:cd:9f:f8:40:b4:2b:f7:6d:83:7d:
48:56:36:c7:08:d8:2b:3b:76:ed:8b:c2:cc:b8:a9:f9:31:cf:
6b:18:f9:2b:81:7e:f3:e2:f5:f5:65:5b:56:3f:42:79:93:a3:
ea:81:76:63:fc:95:99:66:02:72:2f:01:34:99:21:fe:1a:7b:
4d:42:a5:c4:3a:f1:86:07:b8:40:fc:48:18:5c:bb:75:36:09:
88:f2:85:96:31:cf:37:03:55:92:5c:b7:41:a9:ba:fe:e4:19:
46:db:89:6d:8e:5b:dc:2d:5f:8d:f5:40:4b:c7:a9:cd:02:6f:
a9:c7:c2:d5:42:75:65:6f:0a:21:e4:8f:36:b5:8f:e8:55:a8:
58:1b:8e:26:d9:ee:49:19:74:d0:4e:c6:96:eb:65:ba:0b:ab:
cd:7b:56:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:53:08 2025 by rpki-client