Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: SPgN6Cn1l6WwJM8c7YBb4ldDUC/pQRwwTP436rfAoTk=
Subject key identifier: 35:D6:3F:87:DF:45:4D:AE:6C:A2:54:D8:0E:6C:B4:F7:F3:7C:E6:D5
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 0199FE7DC79139F15D1CDE53620BAE932DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0542
Signing time: Sun 19 Oct 2025 22:01:19 +0000
Manifest this update: Sun 19 Oct 2025 22:01:19 +0000
Manifest next update: Mon 20 Oct 2025 22:01:19 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: LvIA9/sCOCy1UYAhtTCW1Sj+XePMix74Mn8XqMZd6Fs=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c7:91:39:f1:5d:1c:de:53:62:0b:ae:93:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Oct 19 22:01:19 2025 GMT
Not After : Oct 20 22:01:19 2025 GMT
Subject: CN=35d63f87df454dae6ca254d80e6cb4f7f37ce6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:04:26:e2:00:d3:14:e3:25:11:d7:62:45:86:
ec:ea:80:7f:01:83:a4:a6:19:6d:e5:dc:f2:b8:5c:
24:0c:62:63:e4:58:8c:25:27:04:8f:11:45:bd:b5:
46:ba:34:cd:f6:b0:c3:4f:54:f7:42:1b:d5:f7:27:
c9:46:e3:ef:02:b2:dd:32:c3:bd:f1:55:2d:d6:b9:
d1:15:7a:16:83:28:4e:86:88:b3:2e:7a:58:95:9b:
70:82:e5:db:db:9c:af:2e:fc:8d:df:16:8f:3b:56:
6c:3c:04:4f:f7:c0:f6:cd:84:69:c5:e6:f0:da:2e:
1c:4f:a8:17:e1:a2:ac:3f:2d:a4:64:4a:9b:03:ad:
46:29:dc:1a:44:16:40:f2:ca:7c:62:5f:02:08:f1:
eb:dc:62:d9:2b:0d:b1:2f:b6:4a:e9:0c:0d:89:34:
db:c9:ac:9c:3a:ea:d9:77:1a:2f:8d:83:2d:98:8d:
a8:a8:e6:b5:bb:2c:25:5f:69:70:27:20:f4:da:f6:
f2:c8:ee:fd:8c:69:0a:01:01:6f:01:1d:3a:6b:8f:
98:02:36:93:32:8e:a1:e7:8b:90:4f:29:f4:67:7f:
e3:de:db:2b:13:9d:37:6e:bd:f0:06:12:f9:db:ce:
f5:bb:1c:40:f4:df:75:5e:ef:55:74:30:ec:0d:4d:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D6:3F:87:DF:45:4D:AE:6C:A2:54:D8:0E:6C:B4:F7:F3:7C:E6:D5
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:79:f0:27:c8:49:77:4e:4d:72:90:a5:bb:be:e8:8b:77:b0:
84:0e:8b:d2:da:23:89:85:ea:ec:94:d9:c5:d7:34:a6:50:16:
c6:35:6d:e7:44:83:1e:40:ab:59:be:73:e4:6c:e8:58:57:e1:
d5:6e:82:49:eb:17:dd:29:d2:c9:94:cf:88:e8:ac:c1:04:8e:
50:3f:a5:c7:0c:b8:3b:76:bc:64:b7:55:22:69:ad:a6:4c:93:
9d:ec:92:f4:b3:4a:42:f5:5b:9f:ff:b1:61:3e:3e:0a:ef:cd:
9d:61:27:1f:f1:16:dd:e4:63:1a:8e:e7:56:cb:07:5d:79:f4:
b3:f9:97:da:a8:23:7e:91:b9:28:f9:5b:2b:76:d7:5e:2f:cc:
45:eb:4b:e5:a8:67:f5:7d:b5:2c:de:8e:e0:bf:3d:77:0e:46:
ef:b1:77:4b:49:16:90:c4:a7:53:59:05:6e:90:cc:2c:60:a4:
34:a2:6e:bc:51:52:c9:e0:03:78:81:da:77:85:60:1e:d7:fa:
55:d9:2f:2c:48:45:0d:ea:44:f9:65:0b:f6:fd:ab:1f:c9:8e:
6a:40:e2:20:78:a5:81:a6:c4:d2:3d:e3:f3:02:cd:97:b4:a0:
63:7f:11:e0:1c:17:e9:97:f9:bb:d8:93:61:4c:94:63:b3:9b:
83:2d:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:56 2025 by rpki-client