Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: BXOsWIKh+IsgNY6dkAYl2Sc17nVdLZGodRcXDAfLhoY=
Subject key identifier: 2F:BC:CA:5B:C3:E7:45:13:D7:14:99:59:AC:A7:85:EC:81:32:79:BA
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 019A729334F1E5398B3C72F971C49F3F6E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0D34
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: 1kKiZmSzZixsz8nyH6MQlNVesWAyZlf1JEbY4cWgM44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:34:f1:e5:39:8b:3c:72:f9:71:c4:9f:3f:6e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=2fbcca5bc3e74513d7149959aca785ec813279ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:2a:e2:43:ab:44:60:ed:d0:ff:72:dd:aa:
5f:97:d3:92:47:4e:a7:65:60:28:17:f4:6b:67:15:
5c:d2:06:56:36:db:99:42:0d:72:27:5d:f4:de:72:
f5:01:5a:9e:a7:68:ac:71:35:3d:46:f4:e6:26:b1:
ac:1f:1d:cf:8b:9e:41:ed:6b:6a:83:65:68:b1:db:
f9:58:e3:b1:c5:31:32:ab:66:12:fc:8c:5c:9f:91:
77:dc:ae:91:14:38:98:88:74:12:ea:50:ae:81:a3:
86:d7:94:c7:3f:50:0a:ff:0c:e9:03:c8:a4:af:6c:
eb:3b:1f:46:73:33:fd:df:40:33:94:ad:57:1d:93:
cc:82:21:55:c0:ad:e1:20:86:ac:c9:df:8c:b1:4b:
a2:38:88:8a:2d:15:af:06:06:ab:45:e1:9c:9a:3a:
57:18:dc:cf:64:db:83:cc:08:27:4d:34:27:09:32:
16:68:aa:b9:bc:79:aa:5b:bf:78:b1:dd:3e:6f:a6:
c0:c4:60:55:5a:c5:6c:d9:94:ad:4f:c3:08:57:9e:
71:e1:2e:4d:92:c6:46:02:f1:14:b2:51:e9:f4:8f:
8a:37:e9:2b:1f:5d:04:70:af:3b:bb:9c:65:8c:62:
4b:77:7f:20:c8:1c:dd:97:63:3d:35:33:1d:f7:70:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:CA:5B:C3:E7:45:13:D7:14:99:59:AC:A7:85:EC:81:32:79:BA
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d7:ef:63:6f:07:b6:2e:fa:b1:dc:c9:b9:19:aa:b9:ce:ee:
c0:c0:b4:f7:f7:b8:14:c8:99:74:2c:c6:99:48:d4:d8:cc:3c:
30:5b:43:5e:47:b0:79:e6:fc:52:41:c6:f0:da:6c:d8:03:59:
93:b0:fa:41:08:85:11:04:b4:d7:75:b5:dc:69:fd:e1:d4:3f:
f8:86:ad:81:25:2a:08:a2:db:c4:e6:fc:f4:b6:e2:e2:11:6a:
ac:b3:fa:60:7c:45:94:8d:44:ff:2b:41:c3:e8:8d:cc:7c:41:
1b:57:1a:a7:a4:81:03:3d:c0:51:b1:cc:e0:4d:bf:4e:ac:1a:
0a:5b:ca:e9:0a:46:fd:87:a2:71:05:a9:3e:a2:84:03:95:77:
30:06:2a:d2:ee:1a:63:ac:6c:c3:e7:46:ea:41:b9:b1:bd:43:
72:9a:c7:01:5a:53:26:30:73:76:4d:ce:85:a4:b1:6c:3f:2f:
c2:27:47:d3:7f:23:dc:8c:c2:22:77:ce:92:47:01:60:ee:d2:
12:fb:d2:e9:39:03:9b:43:5a:01:aa:79:67:96:ad:23:8a:27:
3c:a5:49:28:42:46:2a:09:37:2a:e5:8c:e2:0f:5e:b2:6f:f4:
37:be:9a:5b:d8:60:a7:71:d0:8f:f5:8f:f8:8c:55:69:31:fc:
f5:5f:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:45 2025 by rpki-client