Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: 7i9tCjWDIwNt58SmAQrPdlf5y2cEDHqQ+ZaONMwCDHM=
Subject key identifier: DD:83:11:2A:A6:13:46:8C:25:78:1E:E7:E9:EE:F0:30:56:44:8C:70
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 0199FF2262E1FB52A867AA9BCF0407268070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 1705
Signing time: Mon 20 Oct 2025 01:01:07 +0000
Manifest this update: Mon 20 Oct 2025 01:01:07 +0000
Manifest next update: Tue 21 Oct 2025 01:01:07 +0000
Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=)
2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: buZdQMddSCqhvIuy2O7UK+Xkpm47wPZD4Rul2vVKSig=)
4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:62:e1:fb:52:a8:67:aa:9b:cf:04:07:26:80:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Oct 20 01:01:07 2025 GMT
Not After : Oct 21 01:01:07 2025 GMT
Subject: CN=dd83112aa613468c25781ee7e9eef03056448c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:e5:5e:a9:e3:9c:d3:9c:d4:5d:d8:c8:04:
b6:98:bb:63:be:3a:84:4b:69:6f:8a:29:76:84:a2:
8c:db:bc:a8:56:81:d0:1b:0e:98:7d:18:ae:ae:40:
3c:9d:f7:2e:ec:31:cf:a8:cc:1f:a4:ab:b8:f4:7c:
8d:54:a9:c8:2d:b9:4b:72:84:e5:89:1d:ff:0f:bd:
e8:59:10:20:f3:ce:6a:70:b9:f6:f8:a8:6f:c7:8a:
09:ed:bf:df:67:4a:88:86:32:3a:d4:4e:09:4f:07:
3f:49:90:26:0e:31:3a:99:29:aa:53:22:fc:44:d4:
ae:db:69:48:84:f9:e2:81:66:39:cc:af:4f:67:99:
7b:bf:bc:32:e9:bc:49:ab:8b:31:13:df:21:87:8b:
f0:48:f2:c1:51:fe:7e:32:2b:a9:0d:51:a5:ec:5e:
4a:7d:44:5e:1f:73:72:13:03:a1:28:2b:dc:eb:9f:
dd:76:8e:77:40:67:dc:66:60:99:0e:22:24:d5:b0:
08:f9:0f:36:ea:cb:5c:cc:73:98:57:62:14:f0:28:
89:61:80:93:44:65:d2:58:fa:6b:ab:49:84:c0:c6:
92:fa:02:93:bc:3a:64:b7:bd:02:a4:dc:fe:57:60:
99:f3:f9:43:e0:f7:99:93:10:4d:07:b9:71:7d:23:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:11:2A:A6:13:46:8C:25:78:1E:E7:E9:EE:F0:30:56:44:8C:70
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:72:46:ea:28:44:74:c6:18:9a:26:13:cf:44:ff:de:24:b2:
83:0c:6a:ae:3d:ad:00:72:af:ee:5c:cb:b2:fb:f4:4a:78:ed:
8d:bb:b9:15:b0:91:34:4e:1d:e2:77:56:2b:92:30:71:dd:74:
29:66:65:7f:ef:37:38:84:39:d8:c4:84:d4:bf:96:36:9c:57:
be:66:12:04:06:d9:fe:6a:2f:5b:b9:8b:be:50:71:83:4b:80:
2f:e3:42:ef:4e:c4:d9:a2:7a:eb:6d:13:04:c1:06:b8:1d:ed:
94:1f:09:45:0b:67:60:77:df:44:57:b4:89:60:be:3d:6c:82:
6a:d5:46:d5:fa:ad:1b:c2:3c:7b:8e:a0:57:e4:29:b8:21:61:
ff:ab:be:13:a1:ce:f5:7b:17:4f:74:56:0c:69:49:fb:46:19:
16:d0:a2:e3:bd:15:83:76:47:43:f0:4a:19:88:4d:53:39:8d:
4b:b0:17:9b:f8:fc:d9:ba:87:fd:e5:be:7c:82:6d:21:38:ea:
6b:84:65:83:22:17:53:65:cf:f0:9c:05:2c:b3:e0:f2:26:f7:
40:15:f8:31:44:94:32:0e:5d:d1:59:6d:18:f9:0c:87:98:26:
db:f1:49:80:b5:d3:04:3a:5b:5f:39:3e:84:28:f2:c9:74:54:
07:53:d5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:40 2025 by rpki-client