Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
File: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json)
Hash identifier: OIPh5Bj0oyFXA9jg8GwG7+b9rCUnAHKwyAyacgVCczU=
Subject key identifier: 30:85:C7:F4:29:12:21:D3:8D:0B:FC:15:45:A4:61:A6:27:58:82:E0
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial: 019A239C19452AD94F7710D2F70902F13A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
Manifest number: 05A3
Signing time: Mon 27 Oct 2025 03:00:23 +0000
Manifest this update: Mon 27 Oct 2025 03:00:23 +0000
Manifest next update: Tue 28 Oct 2025 03:00:23 +0000
Files and hashes: 1: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (hash: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=)
2: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: F/IbM8W483iIK0fqANkcjXKfW8c34yAgg8FQ9O1754Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:19:45:2a:d9:4f:77:10:d2:f7:09:02:f1:3a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Validity
Not Before: Oct 27 03:00:23 2025 GMT
Not After : Oct 28 03:00:23 2025 GMT
Subject: CN=3085c7f4291221d38d0bfc1545a461a6275882e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:57:87:cb:44:33:85:2e:78:9e:16:17:e9:
43:af:ba:17:a2:bd:56:32:56:4e:54:be:06:d7:1d:
68:b5:86:bb:87:55:0b:e8:8c:d4:a4:fa:bc:57:2a:
2c:e8:01:bf:88:40:a7:ad:0d:05:67:3f:e3:29:94:
01:c9:8d:ac:34:59:02:6e:ce:37:df:d8:f7:74:a9:
f3:e3:01:77:c8:0a:1a:c6:70:64:f0:0c:19:29:8f:
47:b6:a1:29:7d:08:30:0c:a3:75:4a:b0:20:ae:5a:
1f:9f:8c:46:7c:93:50:5c:dc:5f:63:81:89:b2:1d:
51:f8:6a:58:05:5d:31:5e:f7:d8:73:ff:8d:5e:1f:
8d:fc:c0:0e:d7:b8:fc:9b:41:8c:05:f3:3f:9d:cc:
c2:3b:c0:e1:6a:02:34:f2:9b:23:72:95:ef:2f:e2:
6c:3e:ac:27:86:f8:94:b2:05:d0:3b:42:74:c9:34:
ec:10:1c:f4:36:92:da:e6:41:4f:98:42:4c:e4:4c:
78:06:1d:97:c0:aa:10:f4:3a:ac:8f:86:6b:75:4f:
0e:2a:05:a1:69:84:d2:7a:b6:44:a3:9f:4f:f1:f4:
5f:7b:33:16:be:91:48:78:11:fa:e9:5d:3a:d9:fe:
25:70:22:93:1e:f4:07:d3:d0:58:b0:d6:42:2e:39:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:C7:F4:29:12:21:D3:8D:0B:FC:15:45:A4:61:A6:27:58:82:E0
X509v3 Authority Key Identifier:
keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:69:c4:e2:05:06:9b:ac:fc:46:87:de:13:5a:1c:c0:3b:fe:
72:69:ad:a6:09:4b:3c:ae:28:09:a5:0a:c9:69:df:0b:77:0b:
41:68:d3:be:d7:a4:df:4a:ca:b2:d1:a9:68:38:d0:c4:76:f2:
33:32:c8:42:48:c5:ea:7e:12:37:b7:8a:20:7d:1d:70:a6:2d:
63:8f:d2:47:62:fa:43:32:7a:58:3c:de:ae:ac:f5:47:da:6c:
a8:13:ce:a1:ae:38:2b:7e:55:44:4a:c2:7c:89:a4:43:0c:3e:
78:7f:0a:d9:48:29:ab:40:48:97:31:0f:65:bf:dd:4c:66:85:
83:01:a4:ea:44:a8:96:54:2d:61:ad:40:49:5c:cd:93:e1:89:
04:37:ef:61:01:53:7e:c9:de:cb:85:5c:44:16:0e:22:9e:d1:
5a:34:17:3a:79:27:98:da:b5:75:61:19:28:83:39:90:78:22:
14:1c:02:0f:c0:88:0a:f6:d7:2f:36:c8:fa:91:b1:38:64:96:
4d:29:13:c9:ca:e2:a5:26:66:ad:c9:57:49:50:4e:d9:90:45:
64:69:15:c9:2f:93:53:27:68:78:37:8e:79:37:57:42:bd:3d:
aa:0d:4b:ab:e1:e7:45:e3:41:29:d9:23:ce:89:43:7f:83:f8:
de:99:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:01:18 2025 by rpki-client