Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: x1ao+3Cl4l1chO9wWdtE6z7UKYYN1qoVMESph15gL4U=
Subject key identifier: D7:17:60:8C:5F:16:10:4C:95:00:E4:F1:81:B2:95:5D:23:12:B0:A7
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 019A73387777265D2826CF9D8024BE845434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 14:01:11 +0000
Manifest this update: Tue 11 Nov 2025 14:01:11 +0000
Manifest next update: Wed 12 Nov 2025 14:01:11 +0000
Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: iwFGpdzwKMFB1aI5idJ1OH3oNW4V+PXstrh78AN+ZHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:77:77:26:5d:28:26:cf:9d:80:24:be:84:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Nov 11 14:01:11 2025 GMT
Not After : Nov 12 14:01:11 2025 GMT
Subject: CN=d717608c5f16104c9500e4f181b2955d2312b0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:3f:21:27:f0:62:5b:bb:4c:d0:c7:19:20:
9a:5d:7b:cf:dc:b3:1c:18:b3:21:f3:29:61:fb:00:
48:e2:f3:62:cc:74:5a:cb:26:21:da:ca:1f:67:d6:
40:f0:b9:a2:91:9b:d7:84:7b:d1:9f:b5:02:37:91:
cd:3f:c3:e7:1c:5a:37:e1:d9:25:f2:2e:a5:39:42:
8a:6b:38:e8:65:d5:dd:28:19:56:3b:b0:c0:b9:41:
be:fe:cd:46:59:10:70:22:e0:bd:64:1f:dd:57:7f:
1b:a6:a1:c5:95:80:77:c3:47:9e:a6:06:55:90:94:
f2:85:2c:84:f9:7f:31:6e:eb:e2:f5:52:d8:1e:85:
19:4e:95:e6:8c:98:48:fe:93:c3:39:83:c8:6c:e8:
64:f6:1e:10:1e:85:34:5d:db:8e:ab:4d:40:31:8c:
4b:94:49:10:dd:3c:f5:16:9e:e9:47:1b:c8:26:57:
84:bf:ad:2e:2a:44:52:b9:1b:64:df:40:04:8c:e2:
b3:15:3f:68:f2:19:c0:d7:3d:62:9e:d4:8c:f3:7c:
9a:2f:28:54:34:dc:e4:cd:e6:eb:61:af:1b:2e:ae:
d3:28:aa:ff:7e:af:2c:90:5a:57:12:b2:e8:6e:20:
84:db:be:e1:e9:28:05:31:5d:04:5b:23:e9:16:00:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:17:60:8C:5F:16:10:4C:95:00:E4:F1:81:B2:95:5D:23:12:B0:A7
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:11:e8:66:a1:31:b8:72:c4:d1:be:0d:7d:fa:2b:dc:ba:0c:
7f:42:e5:23:e9:84:84:2d:da:e5:6b:68:ed:b3:54:6c:c4:6f:
9a:6d:1f:98:1a:ea:ba:69:8b:06:69:8c:c4:10:f9:20:a2:3c:
af:0e:d3:47:52:7a:d8:8e:b8:bf:62:f7:7f:ea:6f:c2:33:f6:
40:42:07:51:b8:6a:39:1c:a4:26:fb:bd:db:09:36:6e:5f:ec:
54:0a:59:74:50:ba:c3:5d:18:14:3b:d2:08:94:cc:38:39:1f:
2c:9e:2a:87:04:67:95:07:b6:86:f8:57:58:b9:98:a4:92:8a:
f4:b6:ed:c1:cb:31:a7:bc:ab:ff:c6:64:f0:86:c7:26:e6:a9:
b9:d2:2f:dc:16:b2:55:cf:a1:2d:c8:7e:2a:b4:f5:49:64:0e:
52:2c:6d:fb:ac:04:30:6f:9b:ff:6d:4d:39:2d:9e:ea:72:e9:
00:ff:32:b0:e3:5c:7b:c3:01:15:0e:ce:52:3c:bb:ba:5f:d3:
2b:5a:d4:9a:3d:ae:a0:e1:f5:dd:c7:c0:12:48:ac:ad:9c:00:
5a:d9:29:81:05:db:01:eb:e5:b6:c1:b1:66:85:4a:1f:5a:1b:
f3:56:56:51:ce:9c:a2:36:a0:b3:16:7e:68:3f:66:aa:5b:82:
a3:43:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:56 2025 by rpki-client