Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier: xhzq8DUcWY8xjXpBgJb3vJ8y32Nud77jo6vXYPh5KiY=
Subject key identifier: C5:D4:6C:4C:0A:51:55:67:EA:B1:8F:D5:AC:2B:84:A7:1A:E0:5C:96
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial: 019A71135D9E0FA1FBFC6BDC662C9758EFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number: 0E
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: R7+drE/Yw2YGrZV9Z+p1mWnktzLERpRKxVC0LziF2ww=)
2: nQfDN2BNm4A4MzSJamUhdNR1U_E.roa (hash: MPBz910o9n0fsR7PzMBiEwHloN5/mz2/C67YkQPH0Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5d:9e:0f:a1:fb:fc:6b:dc:66:2c:97:58:ef:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=c5d46c4c0a515567eab18fd5ac2b84a71ae05c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:ba:e9:bb:a2:ac:8b:f6:93:ac:bb:0d:24:
68:39:39:8c:7a:c5:50:f4:6c:c6:72:b5:19:5c:75:
47:35:26:42:78:02:40:c6:04:0a:97:44:02:63:49:
c6:e1:ea:fb:da:b8:85:4c:86:d1:ec:94:d9:e0:41:
f0:01:a1:69:83:a5:d1:df:82:6e:05:a9:dc:30:be:
85:6a:89:22:3b:a7:5a:d9:9b:af:ab:e2:13:14:27:
90:01:90:56:13:91:7d:2c:db:62:47:d7:55:c8:c0:
80:ea:c8:d9:37:dd:a6:4f:19:27:7a:06:53:b2:51:
a5:e5:d4:18:a9:94:a7:ac:ad:e0:d3:b7:2b:eb:b4:
91:21:8d:17:be:91:ab:83:31:17:35:16:d4:82:ab:
e0:a1:4f:3c:05:ce:82:a0:d6:8e:83:d6:c5:80:64:
82:43:06:b3:46:eb:2c:4b:1f:ff:8d:27:10:3b:df:
af:6d:20:c0:18:fe:a0:f2:2b:36:a3:0e:06:99:04:
32:d8:36:3b:a0:30:f7:6e:fb:2f:6f:c6:79:f4:ba:
c9:52:eb:cb:40:fc:f5:5b:96:e9:4b:d4:ef:7e:4c:
35:f6:22:bb:ed:24:4f:ac:37:8e:64:b1:18:37:68:
f8:98:07:df:51:bb:55:e5:bb:e5:b9:33:24:dc:0d:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D4:6C:4C:0A:51:55:67:EA:B1:8F:D5:AC:2B:84:A7:1A:E0:5C:96
X509v3 Authority Key Identifier:
keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5c:a2:c0:8f:0b:16:bd:e7:30:a9:3b:a7:84:89:e9:89:e5:
44:3b:a9:8e:9a:c4:04:62:60:c0:2c:6a:22:bc:b1:82:6d:60:
eb:b5:aa:c0:a1:5e:06:52:bd:8f:5e:05:83:1b:48:50:da:b8:
9d:b6:4d:37:2a:12:86:4c:c2:79:19:30:be:19:2c:7f:18:7a:
ae:5d:b2:b9:6d:e7:a4:d0:2c:94:c0:b7:74:9f:2d:eb:bf:08:
34:9e:b3:fb:b5:25:62:c6:22:d8:68:b9:a8:5b:39:ac:c7:28:
56:e9:7d:c6:6b:2b:bb:7e:a3:65:cd:4e:1b:94:d5:f9:20:9d:
cf:5a:c9:61:f0:e3:a7:3a:e3:c0:0c:1d:6e:bb:fe:dd:0f:13:
dc:05:66:20:76:da:a0:3b:d2:2c:d9:58:c9:f3:9e:fb:61:f9:
c1:d2:b1:cc:74:81:bc:bf:49:f0:ce:00:88:d7:76:9c:ff:5f:
84:36:1a:43:27:a3:fd:a9:d0:6b:52:43:21:13:88:92:99:ea:
a8:46:68:21:07:f3:5e:3b:9c:2a:e3:be:78:6b:c6:03:7e:2a:
8b:06:47:e9:2d:d5:7e:9d:eb:25:52:db:55:61:e6:63:3e:19:
eb:f3:e1:e3:de:bc:f4:31:8c:d5:44:84:a3:06:65:a4:81:2a:
c1:97:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:35 2025 by rpki-client