Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: TTvC3PGhHIJYScAxgodBjn7yA/dpAeFvhlFQig5dHZU=
Subject key identifier: C6:01:8A:BC:A2:BC:E0:01:90:8E:C3:5A:DF:B8:22:A7:A3:E3:BA:93
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 0199FCFD40C742C4E11D9AA619A041AD8FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0245
Signing time: Sun 19 Oct 2025 15:01:19 +0000
Manifest this update: Sun 19 Oct 2025 15:01:19 +0000
Manifest next update: Mon 20 Oct 2025 15:01:19 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: qKZcR9abUXpu7pgKP9IdtSLXr6FphRL8yevydn+Ja4k=)
2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:40:c7:42:c4:e1:1d:9a:a6:19:a0:41:ad:8f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Oct 19 15:01:19 2025 GMT
Not After : Oct 20 15:01:19 2025 GMT
Subject: CN=c6018abca2bce001908ec35adfb822a7a3e3ba93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:72:08:78:69:8d:81:23:72:af:bc:e6:34:
da:f9:85:fe:32:0b:d2:ea:2a:26:84:1a:c2:04:5e:
e2:94:e0:cd:ce:46:cb:97:18:c2:42:2c:00:05:b9:
2b:cd:e4:6e:b2:ec:fa:41:15:bc:e0:72:2f:fd:85:
7e:b3:3b:84:bf:9b:6b:4f:ec:ef:7c:5d:e6:79:ab:
7f:b8:c5:2d:bc:70:d8:9b:1d:ea:82:b5:e5:dd:a7:
65:a5:17:68:c9:df:1e:91:8a:1c:e7:11:1a:17:64:
1a:16:80:77:74:8b:50:b1:5f:ea:15:a6:ff:b3:db:
e3:ac:ee:63:a6:44:52:65:47:4f:68:d8:3d:4c:0a:
69:81:17:22:ee:4d:b2:90:c5:69:d3:1d:b1:cf:ae:
94:c0:44:d7:90:ea:cd:e8:3f:a7:8b:cc:f3:18:e6:
94:13:5c:54:55:b5:d4:f5:63:82:7b:fd:37:f4:c1:
24:8f:59:a3:d9:18:1d:0a:fe:e7:1a:b3:2c:78:bb:
4c:a4:3f:c5:5b:22:c3:33:8e:ab:de:09:81:7f:a8:
d1:ac:01:a4:be:94:ac:9c:17:32:80:f1:f3:3d:20:
da:8e:8f:aa:44:07:b5:23:13:8f:0a:a8:1a:e7:4b:
17:c6:d3:91:8b:6f:f1:ad:ee:4e:44:ad:26:ad:91:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:01:8A:BC:A2:BC:E0:01:90:8E:C3:5A:DF:B8:22:A7:A3:E3:BA:93
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:46:67:89:c7:67:a7:0b:ec:db:f6:99:b1:d4:7d:53:f4:41:
bb:f4:fd:9c:9e:ec:a4:f6:eb:32:3e:19:e3:99:ec:dc:29:6d:
6b:a7:ce:5b:32:8a:a6:63:cb:a4:c9:4e:ed:24:ee:0a:ac:66:
70:40:90:63:10:a1:18:fd:eb:80:58:e7:29:84:64:35:3c:85:
88:a6:92:ff:f8:73:4e:00:73:4d:a1:80:fd:07:51:2b:18:8f:
43:49:f4:58:b4:17:5a:34:04:b4:17:15:dc:27:77:ec:84:32:
c8:71:b9:0e:8f:1d:0c:80:d0:24:f4:7c:f7:c2:d2:2b:85:df:
b6:07:82:23:1f:d8:71:f1:b2:eb:3f:00:37:15:25:ec:ed:65:
e3:b8:ad:0e:b0:ba:62:6f:e7:92:67:1f:aa:b0:b7:91:38:e8:
7c:75:5d:b6:38:4f:b2:d0:1b:7b:01:02:86:c9:f8:c6:9e:3a:
f5:22:28:84:ca:ba:6c:47:9a:41:45:e0:68:5e:a9:6d:f3:5f:
ba:fa:68:9c:f4:9e:c4:65:3e:22:d6:68:47:a7:47:80:2a:1e:
85:fe:32:76:36:24:99:f1:96:2f:ff:e1:a4:25:1b:5d:f6:8e:
e2:e1:e8:ae:8b:58:71:ba:ec:9b:45:e9:3c:b2:3d:51:9a:1c:
b0:1d:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:29 2025 by rpki-client