Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
File: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft (raw, json)
Hash identifier: DI35yt5I/eEMUQqs6h4QVTnlO2qtZN2cmk2hwMI/gDI=
Subject key identifier: BC:67:E6:88:F0:DB:61:78:27:4D:1C:E1:E4:BF:E4:9F:B3:2D:A4:44
Authority key identifier: B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
Certificate issuer: /CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Certificate serial: 019A0259F494CF2B4F2B6CD707FA5E34D830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
Manifest number: 0B37
Signing time: Mon 20 Oct 2025 16:00:41 +0000
Manifest this update: Mon 20 Oct 2025 16:00:41 +0000
Manifest next update: Tue 21 Oct 2025 16:00:41 +0000
Files and hashes: 1: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl (hash: Xi3uFqPB7TRyKGBx2L5KgBsds+ONyG7ixtnEgmy0YHg=)
2: tyPwFquST_QYpMOQ15p0kPwIfBE.roa (hash: pgj4wMLIuT+JDsLGd7CH6ihopHeyqUjAH/pXaSBmiXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:f4:94:cf:2b:4f:2b:6c:d7:07:fa:5e:34:d8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Validity
Not Before: Oct 20 16:00:41 2025 GMT
Not After : Oct 21 16:00:41 2025 GMT
Subject: CN=bc67e688f0db6178274d1ce1e4bfe49fb32da444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:b8:31:da:ac:db:cc:51:57:ed:91:45:bc:
22:ec:66:27:31:37:3b:6d:50:2c:99:f1:ae:75:76:
95:e8:0d:d0:ef:b4:bc:d9:f6:1d:bc:7d:1a:26:eb:
45:53:9e:73:8b:65:fd:2a:88:d0:15:1b:be:37:d0:
89:14:0e:ed:13:67:a1:a8:27:b9:e0:16:35:44:4f:
d8:f2:45:87:fe:1a:84:53:27:29:06:15:c6:e4:ce:
79:28:a7:6d:a5:35:12:cd:cc:47:57:e1:a6:25:f1:
e2:36:36:0e:97:aa:7f:0e:82:77:9b:cf:43:a2:14:
32:6d:ea:00:a7:3b:58:b0:80:d5:d2:85:c7:d9:fc:
22:ae:57:1b:5b:0f:8d:d2:57:c2:e3:fc:e6:c8:7a:
2d:a9:09:f7:07:14:d6:47:4f:5a:fc:fa:b2:55:d8:
29:4b:05:a3:b2:b7:ee:ac:88:d4:87:0e:16:12:f2:
6d:16:da:8d:c2:4e:39:c4:e7:dc:06:e3:5d:7c:b9:
80:79:c2:1c:6e:ea:6d:ec:b7:4e:fb:1e:a3:d2:a3:
77:a8:2e:ff:d5:0f:e0:b5:9d:51:c1:c8:63:1e:c4:
be:09:66:43:5e:73:62:a0:70:d5:e0:54:2b:2f:8f:
14:cf:ae:b8:76:a3:33:ea:9e:71:00:20:41:d9:ad:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:E6:88:F0:DB:61:78:27:4D:1C:E1:E4:BF:E4:9F:B3:2D:A4:44
X509v3 Authority Key Identifier:
keyid:B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ef:62:b2:13:80:d4:67:1b:64:c7:48:3d:c0:48:66:0f:46:
50:7a:22:5c:0f:9d:88:d6:74:f1:77:a4:6d:94:f3:44:a0:f9:
0e:38:70:ad:b8:eb:d4:0c:05:1a:26:01:23:1e:e9:1e:b7:28:
7c:d1:de:c0:73:92:66:08:93:df:a8:8c:98:1f:7e:88:e9:10:
ca:86:42:d1:32:0f:48:97:8a:1b:9d:cd:89:1b:57:5f:3b:d4:
ea:2c:e5:66:96:47:80:ba:68:8f:59:04:70:e2:fa:79:0d:dc:
50:74:88:cb:e1:0c:78:4d:0a:60:2c:82:63:9d:24:6b:3a:33:
e6:21:ae:0a:0c:91:77:3f:d9:60:d4:e7:56:c6:ff:48:62:06:
27:ab:98:bb:1a:b4:35:ef:f1:59:65:8b:dc:4f:d2:73:a1:dc:
8a:a6:cb:09:12:b7:14:55:93:2b:2d:d9:6a:38:d1:17:0e:f8:
4b:4d:54:64:6b:5e:81:f6:eb:84:ab:b4:e5:18:bb:45:ee:8a:
97:c7:d3:51:65:b7:a3:72:64:98:4a:12:cb:c4:6a:4b:2e:be:
2a:21:84:b9:e0:e5:ad:ef:61:d1:a3:ee:7a:35:ba:5c:23:f3:
e6:95:9f:f1:f8:94:d9:95:25:2d:bb:40:32:1d:25:9d:75:e0:
8b:d7:27:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:28:43 2025 by rpki-client