Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: 7+oK37I6c9cSUfUbkoEpQtXsvMyKFtQy1T6d2IZjiJo=
Subject key identifier: F1:C9:D5:C0:47:65:56:1C:C5:65:A2:2D:58:52:8C:11:5F:77:60:99
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 019A71EEC7814D0A677EC7205550DE4F4E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0984
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: mNeWff71JBlu_711hQE_pDJJqWY.roa (hash: sTWxhEvJ0wu3OQU/YQdLA13MJUmx0ec59XmwGow7zF8=)
4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: fjGvvJSzMYP9Z/b7znEJzasW0DaeOYc4N3EWIHbU1gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c7:81:4d:0a:67:7e:c7:20:55:50:de:4f:4e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=f1c9d5c04765561cc565a22d58528c115f776099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:fe:02:79:22:e2:fe:a4:d1:af:f0:78:6a:
34:c3:5e:fe:45:be:50:e1:6c:73:d9:39:f5:0f:6e:
79:fc:19:ae:db:c2:e1:43:ee:ba:b8:18:a5:80:76:
bf:83:6f:70:27:36:9c:35:1f:81:0e:ca:c8:7d:c7:
59:52:56:a2:83:f4:53:e4:62:8e:c4:a1:02:2b:6c:
84:2a:35:28:bc:66:29:5d:bd:38:33:83:25:d0:0d:
c6:8f:9f:75:4b:fb:7f:d9:52:4e:00:25:32:c5:f1:
f0:ae:85:5f:4d:23:22:b6:93:9e:31:fb:dc:94:26:
0f:e0:13:aa:47:7e:22:cc:8d:26:46:fe:1d:70:35:
4c:17:69:18:90:50:5a:11:4c:45:2b:30:25:2e:bf:
dd:8d:4c:6d:38:12:56:b1:a5:82:87:e3:f8:20:80:
57:47:7b:82:c6:bf:28:62:87:28:6e:ed:72:34:c4:
e0:46:c9:21:58:ce:a4:26:38:f2:3f:53:38:4a:3d:
79:e1:06:f1:2c:36:4f:77:e0:25:a5:2a:2f:bc:68:
fd:30:1a:1a:b0:a8:42:b1:2d:aa:f3:d7:7c:5e:bd:
df:ad:62:83:ad:ff:45:7d:ad:ab:18:69:e0:de:0e:
6a:9a:b1:5b:9e:a0:95:7a:22:8b:90:20:2a:df:e2:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C9:D5:C0:47:65:56:1C:C5:65:A2:2D:58:52:8C:11:5F:77:60:99
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ea:35:47:f9:d6:76:92:93:c4:bf:f0:c6:78:21:52:20:df:
66:b0:5b:6e:1e:8b:cb:99:4a:70:8d:d5:af:6b:40:f1:ea:f1:
9f:0e:cf:09:b2:ca:01:bc:7a:82:77:28:d5:8c:e9:da:54:87:
f4:9b:14:e7:1f:1c:6a:d8:08:ee:d5:a1:bc:da:b6:4f:2a:04:
48:fc:bd:66:aa:da:e3:94:bf:90:f6:f6:0d:40:50:5d:85:bf:
23:3c:06:0f:9a:23:0c:8e:4f:d9:2a:79:02:8f:63:d3:4e:94:
e6:c5:dd:e8:5e:74:1e:ec:1f:a3:c9:e7:9a:f5:a0:f6:3b:2e:
be:15:2e:83:6e:59:c4:c5:6b:11:f1:31:4c:e3:77:6b:8d:f6:
9f:e1:2e:f6:88:1b:90:6f:d9:b5:de:74:d6:ce:a1:41:73:69:
bb:87:d2:ab:3f:71:6c:13:38:a0:e8:7f:04:05:ae:66:0b:4d:
15:86:68:cf:dc:b1:84:c1:41:ea:e0:75:6b:e4:80:ff:2b:db:
c9:6e:12:dd:65:54:4a:9e:b4:5b:13:c5:34:7f:7d:02:dc:38:
c6:94:70:a4:a1:36:21:fc:8e:83:5c:7b:84:a5:c1:20:38:1f:
2f:e8:60:00:aa:03:95:7d:10:67:a8:81:45:a9:f1:bd:fa:00:
c1:dc:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:43 2025 by rpki-client