Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier: jqJOYRpGsx84nfYoiIbR0c2Czb+JRrKgwZ2cyrxGktc=
Subject key identifier: A4:3D:8C:45:24:6D:0E:57:5D:63:9E:AE:A2:42:96:D8:71:EC:31:61
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 019A7225F186870A585F1CDA04CE2B475AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number: 16F3
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=)
2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: EbOmMxlOXkvR6Bq3sw/HYbLC0nETfA+ZCdipmekrvRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f1:86:87:0a:58:5f:1c:da:04:ce:2b:47:5a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=a43d8c45246d0e575d639eaea24296d871ec3161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:4c:f0:42:88:56:cd:c7:c2:10:df:bc:5f:
c9:18:78:70:31:d7:9c:e9:b8:e3:4f:a1:98:be:9c:
ab:d9:10:91:f6:34:9b:46:e7:1e:c2:75:f4:bf:92:
06:38:b6:75:b0:6d:cf:76:40:83:3e:bc:97:81:55:
97:ef:e1:55:b8:55:cd:d5:8a:58:f9:23:cd:78:eb:
44:d9:9b:60:49:e0:33:97:8d:8b:4d:eb:f5:9f:43:
b1:40:d1:76:d4:ff:31:54:0c:70:a7:05:b9:32:2e:
cf:38:2c:31:be:e3:e5:85:60:b7:1f:19:36:30:11:
46:79:af:a0:0b:7e:7d:c4:65:ff:8f:0b:f5:e7:36:
4c:23:04:53:a6:4b:35:3a:7a:7d:b2:bb:cd:0e:50:
42:7c:40:74:97:12:23:c1:d8:3b:94:20:0c:0c:74:
62:4e:d1:05:43:46:c9:dc:1b:3e:f3:cd:0b:21:cc:
8f:18:b1:50:59:74:f0:ef:18:a2:2a:e6:b2:e7:91:
4a:0f:cd:f9:1f:d8:ce:91:89:7d:48:27:40:ff:d5:
70:7e:f5:3a:c4:95:5c:77:2d:05:60:0c:71:c9:05:
0b:0d:4c:fe:2d:f9:44:b0:71:87:58:a1:22:21:31:
4d:87:61:a3:21:82:1a:bc:ed:0c:ad:bc:16:1c:38:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3D:8C:45:24:6D:0E:57:5D:63:9E:AE:A2:42:96:D8:71:EC:31:61
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e7:54:4a:89:7b:e7:fe:be:b6:a1:4d:b0:a9:53:aa:6d:b9:
5f:e6:c8:b7:05:f8:b5:95:9e:1f:91:0f:2d:6a:af:b7:bf:c6:
a7:be:9e:3b:13:09:76:65:e4:25:a4:ce:76:53:8c:fe:23:49:
2b:8e:3d:10:c1:f6:d7:f4:ab:24:d7:36:11:d6:fe:60:17:09:
cc:7e:68:fa:7c:e6:42:e6:5c:b6:22:ef:e7:38:e2:e2:a7:1d:
d5:77:dd:6e:fe:c1:bf:24:1f:a7:b1:a8:8d:88:4a:ce:c4:2e:
e5:d1:1d:a4:7d:a7:52:10:ab:9c:ca:3e:1e:ea:21:0d:41:f4:
18:d5:19:bf:94:d9:e4:84:cf:b1:e0:f1:26:d8:96:de:d3:c8:
44:cb:37:69:00:c7:c9:7e:06:0e:a7:8c:25:bf:15:59:5c:ce:
2d:7e:29:56:49:de:fa:42:d6:2f:b9:31:d7:6f:4c:2b:d3:75:
a5:af:71:cd:44:b4:68:6d:c9:27:68:8c:09:7d:71:40:48:48:
a6:e8:5f:7d:0d:89:1c:04:a5:36:c4:be:19:4a:40:c4:e2:70:
06:f8:a4:d0:c0:b1:5e:84:7b:d4:af:79:c0:90:91:78:81:49:
b4:df:f4:58:29:9c:a9:5b:48:1f:30:d7:fa:63:4e:34:40:f1:
81:3c:0a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:51 2025 by rpki-client