Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json)
Hash identifier: 9bZOmcd+d1RySYRDNgJ+K8NPMV0s8OxYVWrgQqZIcpk=
Subject key identifier: B2:F8:42:A6:6A:12:D6:39:E3:7A:49:0C:C0:EE:01:1F:0C:A2:83:E3
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 019A71B7B579B1242CC633FC95637C3F312A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
Manifest number: 0707
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: EsGGI1P8V7qCIrWJmfPudsu7pMI.roa (hash: RgD/iTo2o3seqIZhRljS2dvXiiazUq7PXVkPQR+sYAc=)
2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: sxKm0lSyW7JQw7fL2p/5uVAEx+l5a0ACLt6cXOdACFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b5:79:b1:24:2c:c6:33:fc:95:63:7c:3f:31:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=b2f842a66a12d639e37a490cc0ee011f0ca283e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:0b:40:9f:0c:e0:ec:ed:85:6e:83:9d:3a:
54:92:62:62:e9:f9:20:56:fa:b4:9f:bd:3b:0e:ba:
ae:8a:b4:42:d2:20:7a:63:cd:99:00:7e:58:49:50:
aa:8c:e5:ac:52:09:dd:0c:5a:fe:c2:f0:ce:60:6c:
68:dc:4a:07:40:49:25:ec:e3:56:eb:c0:68:93:55:
b7:3e:fe:aa:ca:10:43:b5:47:4a:f7:96:18:c8:57:
d2:e9:0b:fe:2d:b5:80:8f:06:96:bc:16:12:cd:3e:
11:b9:3a:8a:bd:b2:0e:6c:81:31:c7:a2:e9:c9:10:
3e:c9:fd:75:28:88:fa:11:7c:f6:90:e2:cd:ce:f7:
24:4e:4a:58:3c:f4:94:43:54:69:f3:5b:d7:81:db:
c2:bd:1a:a8:48:d5:bb:13:b1:6b:9d:2a:e9:1b:8c:
9d:fd:98:f1:2e:54:15:bd:72:c6:08:91:e5:9d:54:
e7:b2:3b:b3:b7:6b:ee:e6:fd:5c:9d:e7:4f:18:eb:
ab:7a:07:e7:99:51:fe:82:b2:1f:dd:46:25:21:ee:
79:25:56:14:f8:d2:a4:8d:b2:91:78:4a:9c:ee:03:
4a:9b:c5:30:98:91:45:4a:7a:1d:2b:9a:41:85:0f:
04:28:75:f1:d3:c2:79:9c:57:6a:5f:64:e2:a4:d0:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F8:42:A6:6A:12:D6:39:E3:7A:49:0C:C0:EE:01:1F:0C:A2:83:E3
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8f:38:c8:31:68:31:57:20:a9:66:3e:b9:32:1d:75:ba:b7:
85:d3:43:12:33:ca:55:69:b2:09:6f:23:4c:e5:86:6a:29:43:
64:8e:a5:ce:ec:70:4e:99:d8:fa:06:6e:b1:d7:70:8a:e4:87:
a6:17:1c:11:53:d6:46:a8:aa:09:3a:f3:bf:20:c7:0f:c9:2c:
47:7e:2d:35:44:c3:b6:5e:43:95:08:18:ff:a0:34:d4:5d:e9:
dc:dc:5a:c3:bb:3c:c5:d3:e6:4d:f0:b3:03:e1:fa:59:5b:db:
f8:5c:4b:bf:1d:17:d1:d7:ae:d7:61:17:19:0a:44:9f:37:dc:
93:82:24:93:c3:c1:49:45:7a:f1:a8:e6:80:a5:04:cb:c5:f0:
5c:9e:35:5d:9f:2e:e5:d5:f0:a2:69:64:b7:b2:50:28:ff:b1:
ce:e9:9b:b0:21:75:8d:9c:75:df:f9:fe:00:ff:ac:51:9e:1e:
d2:36:c2:b1:d3:52:ad:74:6a:f7:92:b6:ef:9d:de:fd:59:fd:
80:42:da:96:11:70:7d:ad:a1:48:d6:32:2f:ee:e0:4b:f8:b7:
c5:07:04:ad:13:fc:22:0d:f4:d5:1f:c8:8f:a4:26:5d:6b:b7:
7e:eb:2b:52:17:b7:be:1a:c1:29:14:9f:8d:d5:5d:d3:d4:64:
d6:8f:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:17 2025 by rpki-client