
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: 7ZwZyfL4SUZRMhdWkREVgobi6fTeu3wUyFtzyEoxRTg=
Subject key identifier: BD:9F:E7:39:12:4D:16:52:DD:9A:63:F1:48:A8:F2:37:84:C2:5B:40
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019A0222E959D928FB2D6CD8EF467141A220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0336
Signing time: Mon 20 Oct 2025 15:00:33 +0000
Manifest this update: Mon 20 Oct 2025 15:00:33 +0000
Manifest next update: Tue 21 Oct 2025 15:00:33 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: vYhXAy+GyFoq5nlaR+BSI83cUtUYdyCz1fti72kfECg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:e9:59:d9:28:fb:2d:6c:d8:ef:46:71:41:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Oct 20 15:00:33 2025 GMT
Not After : Oct 21 15:00:33 2025 GMT
Subject: CN=bd9fe739124d1652dd9a63f148a8f23784c25b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:b8:3a:06:fc:5a:0d:5d:c4:90:23:6c:62:
22:25:79:c8:7f:c8:b6:3f:42:44:bc:db:5b:c5:a7:
6b:d0:4b:cd:99:b6:19:48:c8:e8:f2:da:b9:f9:30:
6f:72:30:38:56:0a:75:09:41:9f:83:f1:08:86:b8:
72:45:2f:5a:d7:3e:a6:19:17:26:5e:90:47:7c:2e:
f4:94:56:04:96:5c:3c:dc:b7:3c:59:3b:e5:b4:0c:
6c:75:d7:28:c0:d0:eb:86:62:0e:90:37:50:74:1b:
d9:6e:01:99:7b:f1:41:e7:00:dd:06:6f:74:e4:bf:
8e:d0:59:5c:d4:ea:1a:34:e9:83:22:5b:dc:7c:98:
9d:23:24:b8:d5:53:15:99:af:dc:fa:fb:8b:85:d2:
8a:62:bd:f6:24:d0:d9:6e:95:46:e4:8c:3c:a4:68:
f1:88:9c:1e:73:b9:f5:e0:2d:78:13:7f:27:01:a0:
53:ae:56:dd:7e:72:44:e6:f5:4a:78:5c:e3:30:27:
04:d7:4b:80:c9:3b:32:e9:a5:d6:b1:ad:a4:20:d3:
72:7b:0f:81:6b:ee:85:fe:f2:4a:38:18:63:2d:48:
24:17:d1:89:26:e3:42:5e:df:2d:17:74:95:09:be:
37:51:0d:74:d3:d8:ef:b6:1b:aa:f9:d7:ce:c4:84:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:E7:39:12:4D:16:52:DD:9A:63:F1:48:A8:F2:37:84:C2:5B:40
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:73:55:6c:f5:2d:95:53:a3:70:56:f4:38:19:7e:3a:63:5c:
c2:93:0e:58:1d:58:3d:48:e5:80:34:2d:c5:dd:6a:89:f4:2b:
3a:78:60:21:dd:96:b1:38:5d:f4:e9:78:62:fa:40:2e:86:e3:
c8:80:ab:78:42:b1:4a:bf:54:11:e5:ac:a6:d0:7a:04:75:c4:
6f:62:94:0e:dc:d5:9d:50:95:e3:d6:c0:bc:c9:3e:d9:e6:2f:
36:82:af:e8:f2:cf:01:59:d6:9d:26:b7:20:01:49:68:72:85:
e0:42:73:67:61:3c:a4:fc:35:c7:b6:8c:fa:54:fd:92:b9:ce:
39:0a:d5:56:71:5d:18:1e:80:48:b5:3c:13:89:0c:17:b8:8d:
19:a4:a0:41:f6:df:a5:33:53:66:1e:49:da:3f:d6:14:d5:e9:
89:f3:bb:78:a0:bf:ff:c9:55:43:85:98:87:91:d4:b4:2a:bc:
a7:83:14:06:f7:c7:5b:0b:8c:67:63:ad:b9:a1:ff:e6:76:45:
2e:de:1b:93:f6:8f:e1:4b:9c:7b:67:d1:3a:30:d4:f6:a2:09:
17:4b:78:52:ea:98:51:0d:37:ba:23:cc:c5:a9:7d:04:84:a8:
c4:df:61:fd:36:80:d6:2d:5d:61:ee:4d:de:6f:2b:7d:9b:e0:
0c:68:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:30:29 2025 by rpki-client