Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: paApoC/6VTWrUvDFZRlBCPJKkhezL9B4eUkMerGCTVM=
Subject key identifier: 3B:65:5E:D6:CF:53:B5:1A:E7:73:F3:F5:62:39:14:6B:24:85:CC:3A
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019A01B4D2D6D518190B7436B57DD197FC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 1401
Signing time: Mon 20 Oct 2025 13:00:18 +0000
Manifest this update: Mon 20 Oct 2025 13:00:18 +0000
Manifest next update: Tue 21 Oct 2025 13:00:18 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: 7FCvHGCj4T598fDMOz0SrBsFtJ8ttoDJv5J32RD1ka8=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:d2:d6:d5:18:19:0b:74:36:b5:7d:d1:97:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Oct 20 13:00:18 2025 GMT
Not After : Oct 21 13:00:18 2025 GMT
Subject: CN=3b655ed6cf53b51ae773f3f56239146b2485cc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:94:04:ad:cb:0c:24:08:1c:09:08:a9:83:
4c:cb:1c:d5:1a:c6:da:4d:79:5c:6c:41:78:dc:29:
32:99:99:b3:8d:4c:04:02:46:bf:a7:15:b2:1d:d8:
d1:13:03:21:f5:da:7f:55:c1:02:2a:dc:7b:0e:96:
e0:37:03:d0:33:a3:86:37:fe:b9:e1:18:c4:32:6d:
52:c8:b4:5b:14:db:8b:42:76:05:11:69:ce:b9:9e:
32:e8:11:5b:a7:e2:62:03:e4:97:80:a1:3b:5b:c3:
04:18:99:1e:32:8a:d9:6b:4b:ce:ab:47:d0:41:03:
55:e7:10:2d:50:b6:31:b5:e5:b8:aa:53:6f:55:71:
39:a9:f2:dd:b5:45:10:aa:7a:84:2d:08:55:93:ce:
26:8b:18:a0:2d:bf:ad:e7:96:57:28:00:da:b8:41:
f4:4d:2d:d7:d4:43:91:aa:f2:4c:c0:08:62:de:06:
26:e3:e5:0d:bb:7b:25:8d:ec:a1:80:b3:e8:f5:9a:
f7:64:d6:03:9e:8d:ea:d5:58:c4:f3:61:f7:8f:ce:
55:b0:b2:1a:84:02:bb:ad:d6:55:2c:8f:b5:a0:47:
05:06:ea:0b:23:97:1a:3e:27:e4:31:7f:83:8b:f0:
84:22:b2:62:94:7b:33:c7:0e:31:a9:54:04:eb:ca:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:5E:D6:CF:53:B5:1A:E7:73:F3:F5:62:39:14:6B:24:85:CC:3A
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bf:82:c7:13:ad:1b:e5:c4:f5:58:b1:27:8f:bc:85:a9:fe:
90:9c:31:42:b6:38:7f:17:d1:7e:9a:33:48:5b:18:bb:03:ee:
7f:b4:8a:39:9c:d9:f8:04:fe:83:36:d0:28:8f:e1:d0:98:c8:
5c:c9:6f:fd:71:9a:0b:79:8c:30:d3:48:fd:7a:bb:53:f3:e7:
cc:52:21:ae:b0:11:94:dd:f2:01:aa:33:a5:c3:c0:e1:b4:8a:
ef:fd:c7:e9:ca:29:58:97:9c:d4:90:88:93:29:84:0c:69:0a:
25:d1:a5:d9:4b:b4:2a:64:f7:d4:18:22:16:b7:88:87:85:1b:
1a:cb:0f:b8:e4:d1:a8:81:ce:a4:04:d5:49:db:de:a4:3c:3b:
d3:8a:35:31:4a:04:47:b4:bb:d3:31:03:96:d3:f0:69:97:f9:
8a:d2:18:f2:b3:50:c0:73:2d:98:f9:76:a3:d2:5c:ba:77:82:
b5:7a:b1:4b:c2:4c:54:d3:ad:da:1f:49:df:8d:f3:b9:f3:37:
a3:2a:b3:d4:61:3e:c4:9d:4a:b4:4e:3c:7a:fb:0f:93:ac:d1:
e5:33:50:65:e8:2c:4d:e2:9d:56:22:a5:c9:cd:cc:a5:59:f7:
2c:0d:5a:0f:70:ef:7f:87:85:0f:a6:7f:d5:3d:0b:d8:6c:08:
f7:ea:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:14 2025 by rpki-client