Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: Kz2BeKkriW2iC34nmtmJSpd1QXefJEH5po5W9bhuPKM=
Subject key identifier: C4:B6:53:E6:E7:1E:CD:68:77:AC:2C:CA:08:5A:74:FD:27:46:4C:BB
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 019A006C2637CC201A43DD64EF5716C974CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 0F6A
Signing time: Mon 20 Oct 2025 07:01:18 +0000
Manifest this update: Mon 20 Oct 2025 07:01:18 +0000
Manifest next update: Tue 21 Oct 2025 07:01:18 +0000
Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=)
2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: rcIGGdpXxWxwu7F9DPoUcD9GCw2ZdbhDbl6KzBGS32Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:26:37:cc:20:1a:43:dd:64:ef:57:16:c9:74:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Oct 20 07:01:18 2025 GMT
Not After : Oct 21 07:01:18 2025 GMT
Subject: CN=c4b653e6e71ecd6877ac2cca085a74fd27464cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:51:6f:e2:f8:00:34:14:36:57:64:30:39:
49:6e:39:81:32:e4:49:62:9d:ae:17:2f:5a:c9:40:
7a:f1:44:38:45:60:94:23:a9:7b:04:35:9b:d2:80:
65:16:1e:84:8f:ec:49:41:da:d0:93:b2:1a:00:e7:
0f:94:c7:38:86:12:67:ee:da:3b:74:75:61:35:87:
e3:5c:5d:5a:0f:8e:20:ea:5e:02:ad:be:53:e4:07:
67:2a:50:19:db:d3:e3:19:85:58:18:3c:e7:d8:90:
13:c6:79:79:f7:a5:98:91:bd:a6:de:56:87:76:a3:
94:19:95:78:8e:a1:c0:a2:62:77:66:49:6b:ca:a5:
90:0c:1a:d3:94:ec:fd:3d:d6:2f:83:70:f0:d4:2b:
e5:aa:02:78:68:19:3e:4e:69:c3:5c:94:6e:00:0f:
ea:9c:b1:53:42:0f:20:cc:4f:70:8a:41:a3:bb:4c:
d6:0b:64:4c:e6:6b:ed:ef:b4:2d:4d:b6:d0:66:16:
80:40:9d:28:ed:de:61:d4:81:3c:5c:84:33:2e:15:
97:38:83:63:3f:1e:c3:cc:8c:83:bd:48:df:8f:5f:
8f:e7:1b:09:67:d8:cb:d8:18:8d:3f:21:30:1d:69:
fb:47:cf:8f:40:0f:bd:33:85:bf:21:9c:0b:fd:46:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B6:53:E6:E7:1E:CD:68:77:AC:2C:CA:08:5A:74:FD:27:46:4C:BB
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:38:d4:c6:7c:d4:e9:e8:6d:4c:fb:b2:81:28:ca:73:6b:b1:
45:dc:1e:8b:c0:6c:a7:fc:26:44:be:00:de:40:36:9e:c7:d1:
25:97:18:82:cc:f8:a1:95:bb:e7:6c:7d:a9:61:e3:5f:75:af:
28:95:9c:10:07:c5:06:07:a1:27:e4:4b:14:24:f8:62:92:6a:
54:a2:80:e3:27:bd:6f:e3:51:26:c7:4e:96:d3:f2:36:f1:23:
94:90:96:8c:44:2d:df:78:2e:66:63:e9:46:2d:02:d7:0f:8e:
00:62:f7:60:fa:36:01:89:bb:13:2c:e9:b6:c5:de:7c:42:4a:
b3:0a:88:7b:1c:56:ef:3d:7d:29:3c:ec:43:0a:d6:48:7a:7d:
dd:c2:be:61:dc:e6:6a:e9:34:6f:5a:f2:88:8a:04:58:df:13:
09:58:66:0e:bf:17:f5:14:9a:63:a3:e2:1d:bb:40:ca:1d:9b:
c5:7a:55:94:4f:5a:34:d2:63:3c:9e:e8:c1:74:91:93:f5:d2:
02:28:ea:54:e0:3a:d6:3e:43:7b:c3:74:fe:a3:ec:54:f3:36:
db:d4:95:ed:28:91:ed:f3:2b:f2:18:6e:eb:3c:4d:c0:47:37:
ab:27:d8:b9:e7:99:ad:7c:bf:ec:bb:9a:21:c4:46:8f:6d:3b:
90:07:bd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:49 2025 by rpki-client