Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: ajbLsNsx02vLAp8MyWW+FtpyJUqEnQ6spglMGZsLWJI=
Subject key identifier: CB:CA:2A:67:12:3E:11:B7:85:F6:3A:B0:9B:BC:7F:AD:8B:F2:3A:1C
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 019A7301068C961A32771C10A2F35D4B23F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 09A7
Signing time: Tue 11 Nov 2025 13:00:38 +0000
Manifest this update: Tue 11 Nov 2025 13:00:38 +0000
Manifest next update: Wed 12 Nov 2025 13:00:38 +0000
Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: aPBF6UtVnLgKTsUQv/Z4JyvgZTVgoBvfOfj+3jy6NRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:06:8c:96:1a:32:77:1c:10:a2:f3:5d:4b:23:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Nov 11 13:00:38 2025 GMT
Not After : Nov 12 13:00:38 2025 GMT
Subject: CN=cbca2a67123e11b785f63ab09bbc7fad8bf23a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:4c:57:8d:25:8f:2e:e5:6e:13:b5:12:48:
15:15:0d:13:b1:8c:25:6d:b6:8a:23:86:94:7e:31:
27:05:46:30:22:4f:75:50:3e:fd:f4:53:32:2c:c2:
b9:71:95:cc:63:db:3d:02:cb:e6:75:3e:99:9f:1c:
6f:e2:08:ca:9c:4a:d4:a1:63:99:2d:b0:7f:08:3a:
b5:b9:8b:ef:77:74:1d:7b:b0:9b:78:f7:95:d3:1f:
ef:a2:3a:f1:97:85:bb:32:c1:96:dc:a3:12:5e:ec:
be:02:97:80:39:8e:3b:11:a0:1b:c9:cd:f6:fe:1c:
65:8e:3a:b5:30:dc:85:af:f4:75:fd:b2:6d:42:40:
2e:84:9c:87:1b:24:32:d5:d3:47:84:96:16:6f:81:
5a:90:08:c8:0d:13:1a:15:2f:fa:27:b0:7e:09:54:
b2:60:5d:8a:8f:f7:6d:ba:a7:58:9e:e0:ab:62:43:
ba:9b:46:11:8f:b5:12:7a:08:a5:b1:9b:c1:0d:b7:
d8:b1:c9:fc:8e:ff:03:19:7f:c1:99:8a:f8:ad:ad:
ea:c6:b8:5e:c2:5e:27:c9:20:35:0e:cf:df:31:ee:
26:bf:b1:93:0d:ea:f2:d2:55:69:65:8c:0d:d4:e5:
b1:a7:a5:99:9f:74:a8:51:b4:ec:d8:30:39:c1:be:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:2A:67:12:3E:11:B7:85:F6:3A:B0:9B:BC:7F:AD:8B:F2:3A:1C
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:df:21:e0:25:c7:56:db:18:b3:89:31:68:52:25:8c:7f:e0:
f8:27:3f:f9:90:24:c3:db:92:7d:a3:78:a4:f5:80:b9:77:d7:
18:cf:3e:4b:68:ab:ab:90:29:55:a5:3f:fe:41:05:50:6d:68:
04:e3:08:fc:cb:06:04:84:d8:81:d8:04:e2:eb:d3:f0:4e:2d:
2c:4e:aa:8a:f3:92:99:41:18:92:48:f3:04:ad:29:6a:26:88:
69:11:b4:fc:a6:13:48:8c:06:3a:21:4e:de:7e:c8:c8:62:10:
7f:8f:7a:db:fe:cc:dd:2e:e0:ff:f7:d3:f1:ab:c7:95:ba:65:
b7:4d:4a:23:81:b5:0d:9b:8f:58:00:1f:5c:fc:d2:4a:62:45:
95:be:5e:c6:40:36:26:c1:9b:90:8c:86:4e:68:1e:a0:10:7c:
5a:53:12:81:8a:91:1e:a4:92:98:f1:69:a3:cd:a5:ae:57:17:
83:40:00:22:df:f4:b7:f9:24:7c:12:9b:71:34:a8:c4:c2:93:
f3:67:78:d2:af:a5:7e:c3:30:79:a8:37:b3:98:71:be:9d:c0:
76:82:58:02:7d:da:3e:7b:b5:f9:25:9a:f8:2f:55:e6:9b:db:
4d:bf:5d:78:a8:f8:32:0f:32:21:32:ed:ae:9e:93:6d:76:73:
dd:fa:75:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:56 2025 by rpki-client