Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: 5NOBozrZp38/0gi7PZ1I3S3hHvH4dhU+cgu8HvCR/P0=
Subject key identifier: 1B:EE:57:AC:E6:E1:9E:36:86:E9:C8:98:FA:24:25:F5:2B:F0:60:F4
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 019A006C3543FB2A45C585B5C916C203BC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 0783
Signing time: Mon 20 Oct 2025 07:01:22 +0000
Manifest this update: Mon 20 Oct 2025 07:01:22 +0000
Manifest next update: Tue 21 Oct 2025 07:01:22 +0000
Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: QzxBZ40LPtrO5RpSs16XbQdSY7+zNQ+eTN0amE2+IEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:35:43:fb:2a:45:c5:85:b5:c9:16:c2:03:bc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Oct 20 07:01:22 2025 GMT
Not After : Oct 21 07:01:22 2025 GMT
Subject: CN=1bee57ace6e19e3686e9c898fa2425f52bf060f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:43:5f:a8:3c:5b:9d:86:a8:b4:99:a7:bb:
fb:ee:39:d3:7a:aa:89:18:20:13:0c:15:24:54:d0:
38:db:e6:57:72:ce:14:8a:19:cd:19:d3:13:fd:91:
25:57:e0:93:67:d9:21:ed:01:52:06:59:74:f6:72:
10:4a:87:22:89:c4:5e:c6:9c:ff:c7:05:3b:65:1a:
59:16:f5:9f:25:a7:ac:de:a7:ea:5d:86:81:d2:9a:
1e:fc:eb:45:d1:34:03:f7:2a:cf:96:f5:e0:6f:7c:
33:e5:88:b3:04:02:01:ac:0a:96:37:25:e9:d6:86:
99:f2:c4:72:14:34:7f:ee:99:9c:ad:00:53:bd:09:
c0:8b:0a:74:2d:66:8e:7b:b6:47:ca:54:c8:4e:f2:
8c:e9:1f:7a:c7:de:d9:47:e8:3a:dd:6d:72:7d:67:
59:b9:14:c8:4e:91:61:95:81:9f:90:25:ef:76:94:
81:76:86:b3:1a:4e:96:cc:c5:c3:1f:c1:86:f4:52:
dd:98:84:2a:18:01:7e:c6:97:05:5a:2d:36:61:c7:
b6:84:77:38:13:76:76:26:f5:49:5f:62:f2:1b:56:
04:7a:01:9c:28:8d:ad:14:1e:34:cb:b7:b5:ca:23:
51:9a:7b:92:46:a1:05:38:e8:09:0f:dd:42:55:05:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:57:AC:E6:E1:9E:36:86:E9:C8:98:FA:24:25:F5:2B:F0:60:F4
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c7:87:dd:e4:ef:5c:53:41:fe:de:53:bd:1f:97:61:a3:c3:
23:04:12:0a:1e:ab:93:99:c6:55:86:67:c2:a9:6f:f5:8e:c2:
fa:06:34:e7:3f:92:0e:8b:46:c8:87:47:97:75:de:89:50:13:
cb:d6:ca:f6:b0:85:b3:49:d9:04:90:ec:87:d6:49:bf:66:0f:
64:26:75:99:f7:30:84:2c:97:a5:17:d1:f0:84:9e:47:3f:67:
ff:7a:0c:1e:01:b7:10:21:8a:99:6d:d3:83:10:f1:5b:df:fd:
19:2c:e3:70:6b:1b:d5:25:34:6b:49:75:49:ea:c9:2c:0a:08:
36:00:6a:30:65:62:1f:74:06:34:d1:6f:2c:f6:c2:2e:44:c8:
11:01:bc:3b:19:e5:16:65:33:17:d3:77:bc:d1:b9:9f:53:a9:
54:ea:a7:35:f0:0a:93:c9:50:62:6f:a2:96:61:b4:a4:2e:2f:
3a:be:05:6f:fb:0f:cb:2c:62:19:f0:5e:a8:e1:69:9e:3b:e1:
88:12:51:22:7b:f9:81:79:6e:56:8a:95:54:22:9f:9b:64:bf:
59:4c:64:0b:3c:b8:18:0f:d4:18:69:a7:44:a3:cc:02:80:26:
2b:dc:10:b7:bc:f9:8d:29:b6:8d:6f:9c:65:64:fa:3c:f7:48:
c4:53:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:26 2025 by rpki-client