Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: Vy82/jHCBwtv5z4gsBh6f4xRVI0xFuAbd8F7P/gcQoM=
Subject key identifier: F5:36:BE:00:29:F4:B3:9B:DB:79:CD:42:71:0B:96:C8:D4:E9:3B:CF
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 019A221B6ACE6DBF3F9F7579E1C06FFFCD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: 01AB
Signing time: Sun 26 Oct 2025 20:00:13 +0000
Manifest this update: Sun 26 Oct 2025 20:00:13 +0000
Manifest next update: Mon 27 Oct 2025 20:00:13 +0000
Files and hashes: 1: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: Qv6DZOcBXrJJWAFHb930zc03Ov8Xksx9PRFaQrGSyFI=)
2: y_jzZWxrMh2AT3qjdH5sDFcbnso.roa (hash: UBOvdV+QBpMo/gPKyJWNtGffNnN28PAA/OvI521Vudc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:6a:ce:6d:bf:3f:9f:75:79:e1:c0:6f:ff:cd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Oct 26 20:00:13 2025 GMT
Not After : Oct 27 20:00:13 2025 GMT
Subject: CN=f536be0029f4b39bdb79cd42710b96c8d4e93bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:5e:22:4d:ae:e8:54:da:ea:59:96:2a:9c:
b9:59:5b:64:f2:77:37:84:77:ab:56:a7:6a:ba:f8:
37:62:9b:23:d5:c1:ea:4e:ca:10:83:07:94:ff:52:
8e:17:c3:00:9c:75:58:9d:ae:87:44:17:15:70:46:
52:37:5c:75:a8:db:15:b0:78:9f:b5:db:68:02:e2:
26:50:d4:6f:be:7e:43:33:6b:bb:44:73:f4:9a:41:
a2:57:68:08:0f:5c:5c:17:7e:ec:46:87:5f:d1:a4:
65:21:a2:d7:0c:44:b1:b9:4f:af:f2:cf:a3:b5:91:
06:eb:60:18:aa:b6:8f:c6:6e:b3:a5:e4:00:e1:a3:
9b:ac:5e:5d:bf:ef:4a:01:b0:28:21:b7:fe:00:81:
fd:5c:fc:29:34:17:04:7d:67:ed:df:e2:42:d6:46:
05:2e:01:2a:6d:de:8d:f2:1a:60:ab:b7:c1:dd:2f:
0b:b9:42:c4:8e:bb:ec:7e:ad:bb:66:aa:13:29:e3:
89:6a:bd:03:d8:7c:70:d7:0c:14:4b:d5:7e:0e:b4:
65:5c:f4:c4:f1:2a:4f:8f:69:59:0d:ef:86:09:64:
4f:1f:e6:46:0a:17:db:64:fa:b5:a5:66:f0:1d:e9:
1c:d2:d5:17:55:c5:e6:7d:9b:7d:91:7a:53:b2:cc:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:BE:00:29:F4:B3:9B:DB:79:CD:42:71:0B:96:C8:D4:E9:3B:CF
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7f:87:61:00:9b:d9:a9:43:4e:4c:a1:9d:32:62:bb:08:b6:
bc:f3:a1:42:57:31:3a:9d:76:51:ad:4f:db:c7:3b:f7:e2:77:
b6:3a:04:c6:4f:42:18:43:b9:9a:82:c3:de:3c:eb:78:7b:4c:
e6:ce:03:96:77:6c:e6:9e:cc:e1:57:6f:ac:da:22:0a:c7:26:
bb:19:7c:13:56:db:4a:18:96:ee:98:56:b4:43:85:b9:ed:79:
19:fd:b7:d2:ab:6c:34:65:98:b6:00:51:cf:8a:9d:c7:03:51:
d6:9f:3f:1f:28:b7:d7:e0:43:a0:c4:9a:39:10:2a:82:2b:be:
c6:0c:67:61:d8:66:30:67:31:f9:eb:f5:2b:43:7d:84:ea:3b:
87:77:15:15:78:6a:79:f1:0e:da:9f:1d:69:e9:7c:a2:06:d8:
c0:66:f3:80:88:cd:3d:8f:95:cf:d4:5e:a1:9d:2a:a6:24:2c:
79:99:41:b7:71:06:de:34:ff:75:3a:37:32:9b:9b:85:36:e2:
ba:fe:ef:3e:ec:4a:49:58:fd:55:3f:e5:2c:28:7d:bd:31:2a:
ea:b8:f5:ee:33:4d:43:b3:aa:b6:60:26:c4:6b:c9:6f:fb:88:
28:2f:dd:f8:5a:f5:a7:75:40:98:aa:db:94:fb:2f:be:28:18:
a6:2f:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:22 2025 by rpki-client