Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: pdABm1A9p3InHZMwHlcbm7ZoFXXoFz2ZWhgtdfrg3wI=
Subject key identifier: 6C:39:3B:56:45:4F:5B:62:8F:29:0A:5D:EC:54:99:CD:2F:DF:66:AA
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019A25C1C4BC98AD5F5FEB0D68AF47A71795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0FF4
Signing time: Mon 27 Oct 2025 13:00:46 +0000
Manifest this update: Mon 27 Oct 2025 13:00:46 +0000
Manifest next update: Tue 28 Oct 2025 13:00:46 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: SprKy1MPesYDNw+6arwJCFTebc3NXNiS+4VG8UKluU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:c4:bc:98:ad:5f:5f:eb:0d:68:af:47:a7:17:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Oct 27 13:00:46 2025 GMT
Not After : Oct 28 13:00:46 2025 GMT
Subject: CN=6c393b56454f5b628f290a5dec5499cd2fdf66aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:3c:83:d5:50:d9:1a:75:97:a7:14:32:44:
d8:68:ed:b0:d5:48:c7:aa:70:bf:7a:a2:e7:05:4c:
39:67:34:18:3a:61:f7:ef:5b:5f:75:b6:3a:5f:8f:
25:0d:64:0e:ba:90:4f:5e:57:40:26:81:19:fb:f0:
de:23:3b:a9:34:0e:8b:ad:56:b2:79:cc:93:78:ed:
ce:0c:b5:c4:fd:e7:a9:49:c7:15:0b:43:86:28:f4:
7c:f5:cf:60:41:12:dd:e8:c7:b6:70:09:da:09:87:
91:78:5b:d7:ff:ac:bc:f8:69:b0:c6:0d:e2:d6:8d:
c6:c1:a9:44:9f:d7:0a:c0:8a:eb:c3:b4:82:6a:cb:
08:70:aa:bb:e1:16:99:8a:74:d4:3e:9b:3a:64:56:
34:5a:8c:0b:f9:d9:58:0a:fa:0c:62:a1:2e:a5:d0:
1f:5c:08:ec:79:ab:53:a1:c5:73:11:81:ac:9d:0d:
b6:36:d3:b8:33:23:59:fc:53:a0:67:47:bb:6a:b7:
44:e3:cf:b8:bd:83:7d:e2:b6:40:85:9a:29:53:9f:
43:48:78:08:f8:40:94:30:09:74:c9:db:08:57:c5:
68:b8:2f:c8:4e:5a:c0:8a:88:f7:c5:5d:cf:76:72:
08:23:24:a8:37:d3:eb:6f:3d:8e:08:ae:9b:64:6b:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:39:3B:56:45:4F:5B:62:8F:29:0A:5D:EC:54:99:CD:2F:DF:66:AA
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:61:ec:3e:ec:2e:28:b2:ea:fe:fc:aa:34:c5:ad:af:5e:dd:
4a:7c:f0:04:be:1e:28:ca:7b:0a:30:95:08:09:8b:b8:7a:6b:
8c:16:ea:43:86:85:0a:35:8f:cb:bf:ce:99:9e:55:e2:ee:3f:
38:f7:f8:33:18:02:2d:96:31:27:76:3e:75:62:e4:bf:f8:64:
52:35:cd:c4:aa:5f:cb:97:0c:4c:ef:27:51:39:62:f5:a9:99:
e4:69:a7:28:91:6e:1d:7a:bb:1c:02:e8:2d:f7:ba:f3:6c:61:
db:58:e3:7d:0d:0c:6e:b1:28:bb:da:92:dd:d3:9b:fe:dc:b1:
52:29:44:8f:40:65:78:a7:ff:99:94:cc:6e:70:bd:54:7a:7a:
43:0d:43:a9:ad:56:b0:12:8e:c4:96:3f:9b:1d:5b:ca:54:a0:
41:fc:36:8b:06:9d:e9:76:a5:c6:54:1f:ae:d6:57:0d:e1:83:
47:e5:25:f0:96:27:51:ab:49:a5:50:30:84:a9:b1:f3:1b:7a:
a1:79:7d:5e:ac:e4:cd:aa:62:79:3c:70:73:89:ab:2d:54:cc:
a3:70:58:63:a7:ec:c5:e5:b6:31:a4:b5:92:30:39:b1:c5:54:
6f:64:5e:04:06:8e:2e:8f:75:4a:71:e0:46:52:5a:c3:82:83:
01:14:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:56:27 2025 by rpki-client