Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier: KuXni0kUhYepoKeKoXEYskvNjGgN+dmSCG8DOQWefD0=
Subject key identifier: 4B:FA:AE:31:C5:28:F3:94:D9:4D:BB:07:48:AE:7A:4E:07:93:1B:9F
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 019A71B8249F37738046C4B1D403B6AE9809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number: 13DF
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: AuowotQYch60tB2k+A+y6etBm66Ge4zz/mkjvm0yoOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:24:9f:37:73:80:46:c4:b1:d4:03:b6:ae:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=4bfaae31c528f394d94dbb0748ae7a4e07931b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:80:fe:06:d8:ed:39:4d:16:b4:ab:a9:16:
93:b4:01:db:d8:1c:12:fd:3f:96:44:57:8e:b6:12:
15:91:ea:8b:7d:a5:f3:99:de:c9:72:c0:0f:a2:9d:
9e:5b:99:91:76:02:1b:b9:17:9e:87:3f:b5:e8:7d:
d4:d4:b9:d7:c2:72:ed:6d:59:3c:3b:07:a6:94:53:
2b:01:d5:f0:f9:17:09:88:ec:e9:8b:db:f1:15:9a:
23:62:0c:6d:ad:2e:ab:6b:92:60:e2:a0:3d:f7:8d:
e6:5e:65:f7:d3:96:f1:cb:88:77:e3:43:59:19:ac:
e4:b9:ec:71:46:e5:57:b6:f6:5f:ef:19:89:31:f9:
79:7d:40:f0:6d:28:19:6a:4e:74:de:4f:53:a2:19:
25:5a:8c:09:c8:31:a8:c2:c9:6e:fc:ee:9d:76:0c:
2d:aa:ea:88:7d:ea:7b:3c:4f:2c:b9:22:d3:45:24:
42:be:c7:b6:37:10:e2:da:ac:fc:e0:9f:ad:e2:ca:
18:5b:1f:56:9b:a3:25:0e:0d:d9:06:ce:f8:04:4b:
21:f6:33:8d:7f:74:29:59:a8:fd:44:d4:5b:82:e6:
c8:61:9b:8d:f9:03:67:71:a5:0c:4c:14:e2:35:87:
cf:3f:24:b3:21:f6:5b:ef:3a:77:8f:6e:f9:db:03:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FA:AE:31:C5:28:F3:94:D9:4D:BB:07:48:AE:7A:4E:07:93:1B:9F
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:44:d4:79:3c:48:79:ce:e1:72:a5:6d:04:d6:56:8c:24:f6:
f6:b9:fb:c5:ce:22:37:ee:19:5a:c8:25:a2:42:b2:90:73:30:
51:6b:95:19:d0:c2:b2:af:42:b4:d3:78:35:e3:b0:fe:ab:dc:
d6:10:fd:cd:3a:89:2c:f3:b4:c9:fa:bb:62:1a:93:8f:32:a6:
ac:54:6f:ec:cb:63:b0:2b:3a:56:53:ea:e9:80:9c:b6:a6:32:
a3:b3:01:09:dc:46:2b:53:cd:8a:15:f8:eb:6a:cd:b0:21:cb:
01:9b:35:fa:52:29:8d:d6:77:7c:67:8d:32:8c:40:75:3f:72:
42:fd:4d:1e:bb:b2:c0:20:2b:68:0d:34:c9:96:6b:84:78:c8:
c1:ae:c6:af:c6:34:ed:8b:c9:9c:69:b0:83:5b:40:2f:1e:14:
a1:22:e3:7b:2a:39:80:68:ef:5a:fa:e4:49:39:27:c0:35:53:
17:1c:98:8b:7f:09:11:6d:81:ef:0a:bf:31:c6:0c:dc:be:8e:
fa:be:20:77:bb:8a:f2:1d:ec:86:06:2f:0f:8d:72:c2:cf:82:
e5:3c:3a:28:6d:7e:84:a6:7b:9e:61:b9:b8:f6:06:2f:84:25:
1a:d9:32:16:b4:d4:3a:cd:d3:1d:96:9f:2e:24:11:b3:6f:b7:
23:6b:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:33 2025 by rpki-client