Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: COigCyntKKS4I7TqrCkKM8eeAb8/L+QaUwcJEwTWpak=
Subject key identifier: 4F:F5:83:55:8E:31:39:8F:1A:79:2F:CB:BD:DC:C2:3F:4F:FF:0F:4C
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019A228A510B09BF827EBDE0C1F42E0DD191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 044A
Signing time: Sun 26 Oct 2025 22:01:21 +0000
Manifest this update: Sun 26 Oct 2025 22:01:21 +0000
Manifest next update: Mon 27 Oct 2025 22:01:21 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: t9F1vFSSUlEZwr0UL2YsT15lF9e5OgGP7szfafHNoPw=)
2: 5KVSG33DPZC1TKz5q9NlgQSJY8U.roa (hash: GwSKpHIjNmK499qIKezXAfYrejsXUCWzE4VXptKGrTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:51:0b:09:bf:82:7e:bd:e0:c1:f4:2e:0d:d1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Oct 26 22:01:21 2025 GMT
Not After : Oct 27 22:01:21 2025 GMT
Subject: CN=4ff583558e31398f1a792fcbbddcc23f4fff0f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:79:24:22:97:94:6f:1f:c9:33:7b:98:74:
71:cf:75:ae:8d:cd:79:06:e6:a8:fc:aa:cb:15:d0:
e5:d8:fe:9a:f1:c8:da:fa:85:d4:9b:00:e1:04:2c:
23:45:3b:17:9c:11:23:c0:b8:d4:87:9f:1d:02:2d:
26:51:00:35:8d:67:26:2b:6b:bb:7b:2c:e3:7c:5d:
bc:b4:d9:79:fc:8e:93:8b:b8:46:05:74:af:7f:d4:
4e:78:2a:76:c1:28:f3:a5:49:71:1d:c4:30:14:a6:
0f:9f:fc:31:48:63:64:7e:c7:05:c0:03:a9:ff:cf:
94:11:6a:89:0a:1b:e3:b1:1f:01:33:3c:94:ec:dc:
28:49:b3:11:70:d1:24:f5:af:8d:00:a0:5e:34:eb:
96:48:c4:38:ad:b8:91:bd:fa:af:5d:63:84:81:a2:
0a:de:84:ef:d0:e5:8d:71:a6:e5:b7:a8:48:74:10:
af:75:b1:4c:e3:84:a9:4f:a1:d1:5e:27:d3:fa:5a:
8b:aa:d4:f1:01:cd:bb:0f:d4:e4:16:d0:da:0d:77:
6c:5d:a9:b7:4a:f7:a3:3a:d4:27:5c:04:95:70:18:
5f:75:8a:3d:d6:c0:a5:f0:fe:3c:5c:e1:5e:df:46:
b4:dd:11:64:56:13:d6:df:21:5c:12:b1:9b:45:fb:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:83:55:8E:31:39:8F:1A:79:2F:CB:BD:DC:C2:3F:4F:FF:0F:4C
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:19:7c:8b:ad:58:2b:00:b5:63:35:de:04:64:99:02:d1:46:
4d:6c:f4:4e:e9:8f:42:bc:5e:76:bd:58:29:94:1d:e4:09:68:
2b:40:82:4b:3d:5a:31:5a:b0:a4:81:28:a6:5d:83:f1:2e:96:
00:a8:0e:0a:bf:46:5e:dc:54:5c:64:e3:45:54:f6:51:10:a2:
31:83:98:4a:d4:dd:c1:ef:1b:21:d9:bb:73:76:10:23:01:6a:
38:bc:9a:e6:8c:5c:15:77:e2:2a:2a:c3:56:2a:38:8a:be:e0:
16:c4:1f:47:83:ea:2d:3c:90:ff:ab:f4:e3:f3:34:69:ca:70:
84:ee:37:b6:2f:54:f1:b7:64:51:87:d0:9b:09:3b:5f:84:6b:
3c:9b:ff:df:a2:4a:77:9b:c2:77:b7:2f:b1:d5:60:c5:f4:4e:
eb:fd:2c:31:c3:e0:a4:b7:12:a7:ce:b2:ef:c3:81:11:ed:d4:
87:65:a5:ab:14:16:17:3b:e1:c6:ef:bb:cb:eb:e9:2f:9e:e1:
27:2d:cd:dc:9d:d9:d9:b6:44:bb:84:1d:10:44:fa:5d:2c:ad:
25:44:82:38:ba:f2:66:72:ce:72:06:16:9a:13:79:de:6d:1f:
d7:ac:4a:48:66:ad:ea:fe:bc:34:a7:b0:34:6f:42:4b:85:01:
0a:8f:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:36:52 2025 by rpki-client