Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
File: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json)
Hash identifier: 3bkynGImHJUK4J49t7s0YkChEbgxsgDWTW8UI9T8xq4=
Subject key identifier: 97:92:16:B2:EE:7A:11:DE:8E:CB:33:31:28:71:7B:B3:95:FE:18:1C
Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Certificate serial: 019A72934FCA1A615144D18F089DADBF9DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
Manifest number: 0342
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: 7h1Vbhmm5gf8J-_5IjJpoeOBap8.roa (hash: BzRVE6RrY3y0kWVGZkbu1XvrtIC4s5eG6qRWe7XRbfY=)
2: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: 7fEZt5Z3Yj1dafODlifaDAV54d0+62DPpzRQiII5xVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4f:ca:1a:61:51:44:d1:8f:08:9d:ad:bf:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=979216b2ee7a11de8ecb333128717bb395fe181c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:ee:27:5d:ac:ad:4d:4a:9d:a2:81:4b:88:
23:1c:39:33:4d:85:bd:85:ff:a2:b0:d5:cf:58:62:
51:71:62:4d:bf:09:75:bc:b2:c4:20:14:1b:b7:80:
0f:ab:a6:0b:f2:27:c1:65:92:1a:e0:dc:5c:c7:8d:
0b:1f:c1:82:96:4e:eb:dc:d5:be:83:cf:26:cc:e2:
7c:58:cd:a6:e5:6a:58:3d:cf:5e:d1:9b:18:99:69:
58:55:25:c6:8d:ff:5c:86:0b:ec:10:0b:84:47:86:
58:6c:9b:81:7e:92:4a:0a:a2:f0:82:d9:2f:22:79:
e9:f7:bd:e0:60:54:2b:b7:d9:f9:a5:98:1d:b3:89:
b0:02:df:10:4a:32:57:e2:3c:3b:c6:0f:ce:84:21:
80:9a:62:92:4c:80:00:f5:b6:4d:d5:40:6f:2c:7d:
14:52:e1:78:b7:3a:a4:02:a6:97:e3:58:82:20:07:
6f:2f:a0:e0:ab:e6:c4:a3:ff:68:64:9c:eb:9a:3e:
70:a8:9b:19:ba:db:f1:9b:de:f3:1d:f9:ed:10:06:
84:f0:55:ff:13:93:7d:f9:b7:2d:79:88:bd:9c:02:
15:cd:05:9e:62:ab:99:a4:53:02:5a:1d:dd:67:23:
93:7c:93:6b:4f:5f:e8:53:4a:5b:aa:b7:ae:e4:51:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:16:B2:EE:7A:11:DE:8E:CB:33:31:28:71:7B:B3:95:FE:18:1C
X509v3 Authority Key Identifier:
keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:89:8f:6d:f2:e1:fe:b9:df:b1:02:6a:3e:64:9a:94:17:26:
80:a7:ef:7e:90:01:ec:c9:da:83:83:75:3a:f5:0b:f2:2e:6f:
a8:b7:e8:b2:17:4b:c1:8f:fc:14:2f:f2:ab:ab:d5:d0:0b:0d:
2b:a9:af:5a:27:12:6b:1d:d2:90:74:13:db:08:24:fc:fb:98:
51:0c:33:6f:29:f2:a3:13:00:1b:3b:c2:b2:e8:06:01:1f:1e:
2f:49:d0:0b:db:91:68:27:1a:3e:3b:c0:bb:9d:5e:ce:6a:74:
c7:7f:a9:2b:ba:20:c5:fb:46:be:03:4a:9b:0d:ea:d7:db:b4:
30:60:94:e5:66:6b:d9:8f:b9:f1:32:66:32:af:29:ab:01:a4:
da:fc:5e:38:a1:51:49:cb:b8:dc:be:78:dc:98:e0:c1:67:51:
3e:0e:fa:d8:8f:eb:71:99:16:74:12:9d:a1:9f:2b:b1:78:77:
49:24:4d:92:bd:ce:df:a2:5d:00:8d:c9:3e:25:da:40:b8:07:
fd:d6:d1:a6:f8:c6:ae:07:c9:47:71:c2:c5:a0:f6:bc:5f:3a:
53:95:01:c8:b9:14:f4:06:c5:23:f3:14:85:77:9f:ad:35:c7:
02:eb:1c:d0:fe:2b:f9:12:f0:12:73:11:33:f4:6c:01:fc:56:
16:eb:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:21 2025 by rpki-client