Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: 6z4tZNNPNz6jZrg4Rkk/hSWjZXDNpZ9+pLKfhp2Rwcs=
Subject key identifier: B9:BD:EE:07:8E:50:20:2B:2B:4A:39:91:6B:2C:DC:91:58:11:B5:16
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 0199FC583DE558B0504854B2C69E2A3C54B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1677
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: ALoadxqkmc1sHxCvLe2Gr7rpdvHfOG0Mo8QVFRVoAdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3d:e5:58:b0:50:48:54:b2:c6:9e:2a:3c:54:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=b9bdee078e50202b2b4a39916b2cdc915811b516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:b7:1c:da:24:01:20:3d:16:eb:14:e0:de:
80:95:57:a7:fa:09:bb:2b:c2:3d:3d:29:d5:63:78:
5f:65:15:71:8c:e3:76:bd:87:49:33:26:13:04:d1:
ba:f0:c5:19:ac:cf:dc:a5:12:3a:9b:c9:9b:39:84:
32:1b:6c:04:dd:94:fc:57:eb:61:84:7c:f3:7c:1a:
3b:82:87:dd:0a:7d:b0:ba:ad:06:83:1b:ae:6a:a9:
0a:8e:b1:81:3b:d2:e5:46:37:b7:2c:d8:63:2d:89:
8d:74:d3:83:0d:5f:f8:38:b6:82:0b:eb:f5:b1:bf:
84:65:9c:1b:3e:e6:4b:96:99:80:c7:ed:88:dc:e2:
cf:67:8e:ea:7f:53:3d:71:95:43:7d:c6:b1:50:b4:
5a:9d:c7:c0:a0:36:7b:8f:51:4e:00:7c:6f:7c:9a:
d6:31:fa:b5:cd:ed:a6:a9:89:74:d5:2b:ab:03:ed:
f5:c9:a7:e5:13:55:a7:ab:91:f9:5a:1f:ab:c8:9e:
18:b3:41:4a:df:db:a7:33:df:5c:9c:19:19:0c:2f:
6a:40:2d:d1:96:41:ba:0a:ec:04:17:ec:af:d8:e2:
41:a6:97:5a:c4:fa:c2:f3:52:a4:9e:55:cc:68:7a:
37:12:77:1c:fa:d3:b3:0c:7b:f9:a8:b8:b6:be:91:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:EE:07:8E:50:20:2B:2B:4A:39:91:6B:2C:DC:91:58:11:B5:16
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:01:4b:c1:19:da:21:b5:02:1c:82:b8:ce:96:b5:4b:d5:19:
73:4b:d3:c3:fa:ab:82:48:40:47:cf:11:95:69:20:af:d1:50:
5e:f2:e1:47:e5:2b:38:66:82:f2:a5:ba:e1:4b:5a:62:ff:55:
e1:10:10:87:60:bc:7b:6e:5d:89:d5:37:01:8e:30:5d:2f:ea:
c4:de:d2:57:6e:03:af:e0:80:dc:a8:a9:8d:c8:b1:cb:10:0e:
f8:9a:51:98:c4:36:09:cf:75:df:20:6c:0d:8c:76:fc:cb:d4:
9a:7d:26:85:3f:82:e3:00:74:85:df:02:c5:e9:10:4c:cc:0b:
86:61:f4:10:1e:12:3e:64:0d:a5:96:99:b4:bd:35:4a:ec:f1:
d1:55:0b:77:bb:47:ed:14:c8:26:0c:ac:81:08:d3:0f:8c:dc:
08:7d:72:b1:ec:2a:08:c7:63:10:95:9e:27:f9:c1:f1:fc:74:
47:bd:37:56:9f:68:33:56:bb:81:d6:27:b7:c2:b2:df:5a:f7:
d8:c8:9d:60:b9:d0:9d:82:22:35:3f:86:aa:08:cc:05:55:ec:
28:be:d9:63:dc:25:85:c9:1a:b2:1a:c0:19:07:73:da:95:66:
b6:ed:bd:e6:2b:8f:cf:f5:ff:e8:80:e4:81:41:25:8d:eb:32:
20:5e:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:16 2025 by rpki-client