Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: tHdlP74uGcrLVkvQX9IXCqphCO/PwTLKu5y+jIC12Tk=
Subject key identifier: C5:CB:CA:68:BC:70:2B:6A:F6:08:F3:DA:33:E6:83:C6:29:AD:14:1E
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 0199FBEB2DA1D9938F531D2490F8D1964178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 1433
Signing time: Sun 19 Oct 2025 10:01:57 +0000
Manifest this update: Sun 19 Oct 2025 10:01:57 +0000
Manifest next update: Mon 20 Oct 2025 10:01:57 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: E1tcZ4+LaRcPsN1IWxe0mAFQ0b8Ah123YksOrzIFtEU=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2d:a1:d9:93:8f:53:1d:24:90:f8:d1:96:41:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Oct 19 10:01:57 2025 GMT
Not After : Oct 20 10:01:57 2025 GMT
Subject: CN=c5cbca68bc702b6af608f3da33e683c629ad141e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:06:02:94:b3:fa:15:78:cd:43:ca:b1:b7:
34:f2:3c:42:45:26:f2:53:8f:06:13:ab:85:de:5a:
b0:65:91:ad:c1:11:f0:c7:d9:04:38:e3:e9:8c:04:
2d:8f:61:5f:84:98:d4:c2:5d:34:96:91:f0:aa:0e:
d5:ee:f4:d3:08:86:9f:19:21:66:5f:b2:98:32:17:
c1:07:95:2c:63:d4:30:48:8b:e5:f6:d3:4a:5f:1c:
49:a4:52:ac:2b:13:f6:5c:80:f2:f4:0a:76:56:ba:
68:c8:81:60:49:08:9a:fd:1a:bf:08:fb:34:15:43:
f0:04:3c:15:f7:60:94:d6:d3:c1:27:79:2d:e5:70:
36:9f:98:4a:2b:ce:70:8f:92:48:e4:b8:90:a3:72:
3a:ab:30:9b:97:c2:b4:1e:06:7b:38:ab:44:7c:c8:
bb:9b:a4:2e:64:6d:9d:2b:fa:2f:a2:58:2a:21:ce:
af:b9:c3:a7:3b:dc:2f:e8:8b:74:97:d5:e0:10:a6:
4b:c3:a7:3f:fd:ca:14:d4:07:94:17:f8:0c:ec:73:
b5:e9:d6:99:fc:5a:83:8f:56:d4:e4:75:bd:48:b2:
8c:89:e9:3f:c8:e6:8a:52:33:cc:d5:d0:ee:48:56:
85:1a:3c:0d:44:b0:c4:d2:30:cd:65:0b:5e:16:61:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CB:CA:68:BC:70:2B:6A:F6:08:F3:DA:33:E6:83:C6:29:AD:14:1E
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:bd:3d:49:2c:7d:0b:84:7c:85:0c:7a:f8:23:4b:de:75:
8d:73:fb:c4:47:f8:57:3f:74:55:04:40:ec:62:3b:b5:aa:0d:
a3:07:94:6c:26:81:5a:ac:dc:8f:de:e5:c7:8b:40:44:7a:79:
96:0e:ec:93:6c:1b:23:38:78:af:f5:d0:4f:69:e9:0b:fd:ad:
a4:2f:1d:27:8c:a9:29:c5:0a:b3:d1:c1:90:a6:6e:6c:1f:46:
2c:cd:58:0b:c6:e8:09:47:6d:6f:be:93:b4:d0:1a:70:f4:c8:
b3:13:4b:31:ef:74:fd:ac:44:45:d0:e8:0b:b4:a8:be:1c:d4:
99:ff:ab:30:d8:77:1e:55:dd:dc:73:fc:5b:6c:39:c6:dc:36:
4f:83:11:de:16:69:72:cc:b4:fa:16:f2:40:66:8f:34:9f:24:
e0:f6:ab:d0:cc:ab:26:e3:04:6b:76:d3:f3:f4:c2:2a:72:af:
27:d8:ac:e5:1d:39:37:04:b4:6c:e7:8a:fa:ba:53:c9:8a:09:
1e:ad:9c:e6:c4:ec:5e:e1:a6:09:35:7f:ef:6e:4c:74:fe:51:
15:33:2d:05:5b:98:32:4e:bd:0a:dc:a9:03:5a:59:c1:41:b5:
d0:d1:ca:d5:86:bf:42:ee:7a:4b:a9:d7:5a:c0:f9:b2:ea:e3:
d8:14:06:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:17 2025 by rpki-client