Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: RLGVklmmmkJEP0ltIwHWQm903IeQfvAsXS+TcSI144E=
Subject key identifier: 3D:F1:75:7B:F9:46:8F:27:BC:E9:57:42:05:A0:FC:DE:DF:F0:5B:95
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 019A7226485F320EA65541DFF1E45BCE24C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: YHJLpPYdmaSBbjnY+qUnjtiiAhiluTgUWIwpvE5FNOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:48:5f:32:0e:a6:55:41:df:f1:e4:5b:ce:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=3df1757bf9468f27bce9574205a0fcdedff05b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:fe:5a:40:30:b4:ae:74:e8:8e:15:02:ab:
bf:9c:68:28:32:48:59:7c:70:ed:81:4a:47:36:da:
a5:05:ed:3a:8b:2c:6b:9b:ce:47:a4:98:04:48:ef:
71:ac:cd:73:52:f9:6e:f4:6e:cd:ce:ed:f9:28:fa:
3a:77:aa:94:21:b3:ef:42:0f:9d:cb:c5:72:e5:bf:
7e:36:5e:65:7e:d1:18:4c:8d:50:ef:d2:11:8a:85:
46:cd:68:9a:49:71:4c:a7:48:28:71:a4:9c:3b:8e:
e6:70:4d:85:2a:37:71:dd:4c:27:d5:f1:59:e9:8a:
7e:62:d0:42:be:f4:33:f4:9c:41:f7:37:26:bb:0e:
3a:62:df:27:73:26:75:0c:3b:1d:6b:84:6e:e9:3d:
af:a8:2a:42:8a:26:59:3f:97:ce:47:77:5d:2d:5c:
14:27:26:ff:80:d8:f4:e2:04:49:34:46:e5:1f:3b:
27:c7:ee:19:88:d6:72:b6:a3:73:cd:e9:09:3c:7e:
8f:ca:6d:df:7a:a1:b6:f1:a8:fa:7b:4e:c7:41:d7:
24:75:a4:cf:14:5e:76:ff:b8:91:bb:7c:48:43:04:
2e:6b:bf:65:82:f3:b5:88:5a:ed:e0:3e:f3:a9:52:
65:44:9f:2b:d3:8f:e7:69:52:ab:da:c9:77:de:91:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F1:75:7B:F9:46:8F:27:BC:E9:57:42:05:A0:FC:DE:DF:F0:5B:95
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:c2:98:93:1d:75:e5:6c:bc:ef:a2:fc:f4:32:52:01:47:
5c:74:e0:26:78:15:b2:b6:82:2c:3b:61:23:b8:f7:74:34:99:
81:56:34:ef:75:f3:d1:1f:61:41:52:7b:b2:fd:08:ea:ee:49:
d2:b8:9d:ba:3b:0c:0b:b7:83:b9:a1:c5:b9:64:1a:b2:0e:1f:
c6:59:28:a9:94:8e:11:db:7e:eb:ca:14:b3:ef:46:23:b3:6b:
0f:ad:5c:14:c5:7c:63:54:cf:b5:f5:a0:cd:36:ab:c1:29:7f:
11:eb:df:21:45:99:ed:eb:0a:8f:6d:8d:75:83:2d:62:ea:df:
41:ac:10:fa:e0:e6:ca:d3:6b:37:de:e2:e4:9d:bf:84:5f:d8:
9b:bd:3d:31:91:54:ec:72:63:68:2e:46:1a:c4:c3:c7:b8:7b:
af:56:2c:9a:4e:e8:cf:54:ab:cc:9b:73:05:58:3e:cd:f0:6d:
66:7d:71:b0:76:b3:16:f3:e3:84:f3:dc:75:15:d5:eb:03:f3:
9d:02:1f:1b:62:a1:35:39:0a:87:29:d0:00:5a:05:7c:c7:dd:
d7:b6:29:1e:41:14:c8:01:bd:83:0a:bd:31:e8:bc:62:72:ae:
a5:c4:3d:34:05:cf:80:ea:53:2a:53:38:0a:f1:38:86:c0:f2:
94:bc:ad:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:03 2025 by rpki-client