Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
File: z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft (raw, json)
Hash identifier: wmeWXSHcs9Utnn5m66nXfpIr9qbW8srN8Lpz6N8PIkk=
Subject key identifier: D0:74:37:94:84:F4:A2:5D:96:70:E9:50:41:A5:F9:AC:5B:D3:34:58
Authority key identifier: CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
Certificate issuer: /CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Certificate serial: 019A725CCF101921D9E3F23D4D7BFE9C3CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
Manifest number: E4
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: gIxZrWlHl0oRXmPccq0bAMsTD7c.roa (hash: icJylGKFEOgR2y+9aMtSkzbhz2/KK1SV2PGADtfOVCk=)
2: z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl (hash: 3FqIg7ZICXXvE0JMDN3VyrvAPx1qw2wa8BrmUOX2N50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cf:10:19:21:d9:e3:f2:3d:4d:7b:fe:9c:3c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=d074379484f4a25d9670e95041a5f9ac5bd33458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:7f:80:ef:c3:d0:53:aa:b2:ae:5a:7b:9f:
2e:4e:28:5e:89:a9:0b:d3:11:57:84:c0:07:f0:69:
23:04:a7:03:59:a2:6e:0a:bf:41:37:cd:8d:03:8d:
86:29:f0:6c:23:65:c9:42:44:57:0c:ad:fd:53:6e:
ce:86:21:ba:2b:d0:ec:69:fc:39:67:c1:e1:71:ba:
8a:4d:64:ab:22:a3:e9:84:57:a6:8f:e0:c7:c8:15:
98:64:b9:4f:c7:69:87:1d:9f:a2:93:0b:6c:44:c8:
0a:08:d7:89:3c:78:5b:a3:b6:a2:ef:44:2f:f6:72:
84:46:ce:96:9c:f4:bf:34:5e:8d:b7:ba:90:f4:75:
23:4c:eb:4e:2d:42:71:aa:bc:bc:34:18:a4:99:ae:
65:df:71:13:e2:0b:7d:5d:82:e4:85:9f:e1:7f:12:
9a:5c:5f:43:ba:f3:a3:73:4f:b7:d3:13:cd:96:69:
80:76:38:08:15:41:32:af:ad:31:d3:13:8c:41:1e:
60:18:7d:cc:4b:7b:75:78:5c:29:68:94:d4:f9:3e:
82:a3:1d:8c:48:00:57:0c:ae:eb:74:42:23:99:e6:
0c:cc:a7:68:97:31:f0:23:71:55:a1:6f:a7:6c:77:
b3:e9:f5:8b:48:db:fe:84:76:77:3b:88:96:0e:76:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:37:94:84:F4:A2:5D:96:70:E9:50:41:A5:F9:AC:5B:D3:34:58
X509v3 Authority Key Identifier:
keyid:CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:9b:2c:07:d7:4f:1c:b8:47:ef:a8:7e:90:64:ce:2e:49:
9a:0d:5e:79:c0:9f:72:1f:35:1a:9e:63:f9:f5:3f:42:60:89:
c2:90:89:d8:6f:05:7b:7e:aa:2b:31:32:bc:4d:a6:e4:cb:96:
ec:5d:f0:fe:cf:a2:c4:88:a4:cc:b0:b9:e8:9d:cd:b3:78:04:
1a:fd:ca:92:89:bc:07:b8:8f:1e:d1:08:44:f7:9c:06:a9:60:
44:94:81:1a:da:89:fc:01:22:27:74:9f:d4:97:43:5f:7b:f6:
c7:5f:3d:1b:8a:d4:cd:7b:98:7c:2f:e4:bf:44:3e:23:8e:c7:
1d:73:d5:1a:77:1a:6e:9c:43:e9:53:67:3d:ed:47:75:2a:97:
95:d6:d3:97:5d:d1:ad:15:17:e0:85:24:45:58:bd:21:35:63:
17:62:39:a3:be:36:d3:a2:35:ef:c6:a7:3f:5c:6a:54:8b:89:
5b:f8:1b:a1:1b:42:1b:db:32:27:7b:06:a0:cd:b7:47:b5:1a:
db:ef:e0:8b:73:55:61:3e:49:a9:19:88:ab:6e:56:2d:7c:79:
13:31:62:b9:41:f4:1f:90:c6:43:42:73:8c:7f:9b:fc:a9:94:
cb:b4:09:79:63:6f:f6:bf:36:45:b2:b0:ad:64:d6:86:68:bc:
18:4d:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:43 2025 by rpki-client