Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: JRVCHrCEPlxfkHVgS6NU1hAWxt/fnHXawomQzm6mKFY=
Subject key identifier: 07:0A:DE:FE:7D:43:56:62:CB:CA:29:3E:71:70:44:71:46:97:FE:60
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 019A1AD09D8E2337479FB6814FD6F88F9336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1684
Signing time: Sat 25 Oct 2025 10:01:10 +0000
Manifest this update: Sat 25 Oct 2025 10:01:10 +0000
Manifest next update: Sun 26 Oct 2025 10:01:10 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: gtIAJRI1TPL3LcHlJsW3LOux1YKGlgZU4Al0Y+PtCGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:9d:8e:23:37:47:9f:b6:81:4f:d6:f8:8f:93:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Oct 25 10:01:10 2025 GMT
Not After : Oct 26 10:01:10 2025 GMT
Subject: CN=070adefe7d435662cbca293e717044714697fe60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:de:bc:86:85:53:98:bb:84:9e:9b:8b:c6:
d6:df:73:1e:9a:32:48:a7:f4:ed:58:6b:82:60:c4:
7b:37:4b:dd:ba:9e:1a:32:60:6e:1a:42:88:f6:21:
92:2c:7a:57:bf:e0:ff:41:15:e5:95:88:1d:f6:cf:
af:8b:69:67:ed:6f:a5:ad:c2:5f:9b:95:e2:42:58:
d8:ba:c9:28:7f:43:b8:45:fb:65:d8:60:9d:61:9c:
01:b9:6c:e4:34:c0:dc:ac:cf:c6:a0:e0:b2:b1:fd:
e0:21:7c:af:0b:bc:14:62:9a:ee:31:b2:b7:ee:0b:
4a:db:5a:cf:44:88:24:3b:63:2d:e2:a8:2c:93:b8:
cd:ce:b9:43:96:7d:da:83:26:96:c6:bf:cd:14:85:
c2:f8:77:33:a8:32:61:52:2e:0e:77:71:be:87:6d:
c0:13:ee:46:fd:4f:6d:99:a1:f2:1e:2c:62:41:bc:
f6:a7:7e:86:d3:5b:da:4c:ef:cd:0b:3d:2a:93:f0:
2c:e5:c3:55:9c:87:73:ab:c8:9a:7b:f7:72:3d:8f:
64:88:81:56:d7:93:a4:9f:af:2c:c0:79:82:e9:f4:
64:23:8f:10:db:c8:b5:bd:fd:a3:b1:2b:e3:20:3b:
86:6b:e7:94:67:3c:04:0a:f6:d7:6e:9b:0e:5f:f2:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0A:DE:FE:7D:43:56:62:CB:CA:29:3E:71:70:44:71:46:97:FE:60
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:73:39:18:59:9e:81:3a:39:25:ee:f0:c8:00:b1:43:78:ff:
39:80:19:f1:ef:d6:66:85:3b:f5:66:04:2c:fc:d1:70:e5:1e:
bb:80:f1:72:07:07:9f:d1:ba:80:fc:31:09:7c:7e:c5:0f:1d:
dd:bf:d2:fa:61:09:8a:9a:71:a2:13:01:cf:6a:89:83:68:ec:
8d:82:83:b7:72:d3:cb:5b:5e:8b:64:8f:c7:bf:f3:78:84:3f:
f5:03:de:bf:ab:be:23:84:fa:76:bb:eb:3a:05:91:e9:dd:86:
d5:ed:99:8b:b8:39:59:3a:f1:07:4f:e6:d5:b6:0c:8e:d0:49:
bd:e1:ef:5f:f1:2e:e4:95:1a:5c:b7:7e:01:a9:8a:34:b5:d8:
69:69:5f:3e:21:56:67:ca:ab:b3:67:d2:f7:2b:eb:3c:bc:61:
0c:b9:17:61:ca:c5:ab:8a:ab:b1:22:3d:32:e5:d9:a5:2d:d1:
51:4b:dc:ea:1b:17:4e:95:01:3c:3d:55:d9:eb:f1:91:89:18:
7d:3b:3e:9c:e2:b6:8c:08:15:71:f6:68:16:bc:f6:31:cd:53:
a0:ff:05:20:fa:96:11:29:1b:e6:3b:76:7a:c6:09:ca:ac:06:
0e:5d:6c:45:09:63:02:7a:96:73:7a:34:40:45:e7:00:2c:6d:
f7:74:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:23 2025 by rpki-client