Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: rmNDRjLFRLuzcxtyQYhv0oXJIRE1/tjjF2E7kCQ9otA=
Subject key identifier: 17:FF:CE:95:7F:46:04:39:BF:45:BB:49:72:FB:94:A6:FC:08:0F:ED
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 019A722677649FBDB4F12577E8ED97311392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:54 +0000
Manifest this update: Tue 11 Nov 2025 09:01:54 +0000
Manifest next update: Wed 12 Nov 2025 09:01:54 +0000
Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=)
2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: j2fIFNjaVgw+Z58wkJy2S2FkCzD7wL26p0JYv/88kPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:77:64:9f:bd:b4:f1:25:77:e8:ed:97:31:13:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Nov 11 09:01:54 2025 GMT
Not After : Nov 12 09:01:54 2025 GMT
Subject: CN=17ffce957f460439bf45bb4972fb94a6fc080fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:11:4a:ae:41:ad:0e:1c:d7:73:24:e7:e2:
a2:a6:72:0a:6a:de:e5:13:05:c7:70:f8:ae:88:8f:
6c:3b:eb:01:5a:75:67:73:ea:70:da:2d:40:d4:4f:
9e:15:1a:b9:d7:d7:b9:61:e8:f4:41:5f:32:de:7f:
13:d8:3d:1d:c3:71:a2:10:c4:fe:a8:21:4b:27:2d:
a2:67:9b:c5:e6:17:27:d8:9d:d0:4c:6d:53:9a:95:
b6:f3:a3:88:16:5e:2c:79:0f:83:a6:62:7d:6d:65:
4a:23:80:06:9e:f9:e0:9e:57:7e:0c:19:05:8a:d4:
e9:5c:f9:d0:3d:26:92:e9:88:3b:9d:c2:03:61:9a:
54:08:b5:29:f6:1e:38:b9:59:f8:c1:55:2f:f9:6c:
d5:64:9d:70:93:50:a2:6f:49:e2:e8:92:cf:f4:1f:
5c:12:f2:68:a2:1a:55:56:49:26:72:c3:e3:85:61:
23:1e:66:c0:fc:c7:96:fb:86:2b:ec:0a:e1:e1:2f:
58:9d:5e:fe:de:db:b5:75:d4:68:bd:1c:b7:c4:45:
ae:9c:f9:eb:e2:94:ea:ce:db:8e:e5:c6:f7:85:03:
74:27:cd:d0:4f:19:f2:bb:3d:71:02:99:61:53:9d:
ba:af:81:2b:1f:30:4b:23:76:85:47:37:cf:a5:3f:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:CE:95:7F:46:04:39:BF:45:BB:49:72:FB:94:A6:FC:08:0F:ED
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a8:bb:23:3d:86:fc:a7:4c:db:94:ec:da:e5:86:7b:23:4c:
5c:af:64:fb:93:f1:e7:fd:24:72:a3:c1:22:5f:36:4f:6f:57:
6b:3c:b4:5a:37:12:de:41:26:bf:2c:2d:99:03:9f:12:1c:15:
9f:a8:cb:e0:56:ec:7b:34:65:c5:a6:ec:27:27:bf:f4:66:cd:
aa:cc:2d:cc:21:00:ae:d0:45:12:db:38:06:9e:e6:77:56:4c:
7b:e4:1e:fa:65:3f:b6:0d:fb:15:40:0b:af:54:1f:16:0e:73:
57:8c:e3:c6:91:9d:7a:81:69:ac:c5:b1:9b:5b:81:8f:a6:43:
31:51:72:d3:f6:ad:0b:80:51:06:73:9c:f2:e0:27:9b:8d:79:
2f:1a:1d:3e:2f:28:f7:d1:91:97:9a:b0:32:0e:20:9a:44:88:
b2:62:81:b5:18:14:9e:38:58:a6:3f:6c:84:37:6a:01:8d:69:
72:c2:b8:38:ea:7c:2c:1d:ef:a5:74:cc:55:15:af:75:b6:bc:
56:4f:4b:10:da:82:d6:55:2b:e4:bf:61:ee:fc:63:06:be:90:
a9:b9:8b:d7:45:1d:d3:a0:31:e7:40:5b:13:a4:f7:bd:f9:e1:
a6:f9:3a:50:e8:d9:0b:7e:97:bf:6b:aa:1e:79:f0:8f:ff:c8:
dd:b7:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:53 2025 by rpki-client