Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: NAwqdIHlpZiIax/LCL/HhjP4iBe5995XgDdYGKTTgKU=
Subject key identifier: 22:FD:3A:C7:73:E3:6D:12:D7:00:90:15:20:9B:94:EC:71:39:C0:4B
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019A730132209DD9872E5E394615EA2DCD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:00:49 +0000
Manifest this update: Tue 11 Nov 2025 13:00:49 +0000
Manifest next update: Wed 12 Nov 2025 13:00:49 +0000
Files and hashes: 1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=)
2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: SSodWhYOcCW+xlnTX6qzFchON1QVAkvYELOKSpJGB9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:32:20:9d:d9:87:2e:5e:39:46:15:ea:2d:cd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Nov 11 13:00:49 2025 GMT
Not After : Nov 12 13:00:49 2025 GMT
Subject: CN=22fd3ac773e36d12d7009015209b94ec7139c04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:28:57:ad:bc:a4:1d:7c:ab:71:3c:b5:b4:
6b:b3:a4:e4:45:7a:39:f8:55:31:8d:e2:73:f8:ae:
61:60:eb:fb:9c:ef:8d:b1:dc:aa:1e:ab:49:35:41:
13:31:e1:d3:15:e1:36:47:b4:c5:07:6e:ce:3d:6c:
4b:7a:42:0a:08:f3:e9:32:0c:72:e6:dd:5b:ec:8a:
97:e1:63:8b:80:26:1d:a5:e1:85:ea:57:f9:7f:ce:
90:2a:7f:2d:b7:2d:a9:e1:97:8e:4d:00:13:40:96:
b5:f8:53:33:6f:1f:e7:af:bd:9d:7c:28:2d:60:d8:
6b:3f:ed:77:f1:4e:14:04:bf:44:0c:71:e8:54:5d:
fd:c7:34:83:22:d7:fb:c6:ee:b0:27:9c:45:b6:0c:
89:22:a5:02:f7:07:47:a9:66:e9:51:b4:64:9e:6d:
c2:5b:e7:d3:81:cd:56:84:76:07:2a:d4:d8:6d:61:
10:78:ab:d3:20:a7:dd:e8:05:b3:db:12:42:1d:02:
b6:98:09:1f:48:2c:87:7d:d3:1e:69:4a:4f:cd:d1:
68:fc:55:20:d9:06:66:10:01:3c:df:d7:dc:52:41:
1d:20:fb:6c:e5:94:72:a2:50:90:d0:dd:9a:27:87:
f2:6c:cb:e8:ba:8f:41:a7:ed:ac:e5:2d:e9:1c:d1:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:3A:C7:73:E3:6D:12:D7:00:90:15:20:9B:94:EC:71:39:C0:4B
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4a:0c:81:e3:56:e9:ee:93:69:cf:b1:41:32:2a:9b:3b:6c:
ed:ec:3f:b6:61:f7:7e:c7:25:77:f9:14:11:40:23:1f:3f:2a:
51:84:84:8c:25:64:c4:a0:2d:de:30:b4:5c:24:5b:f7:80:27:
c7:72:ae:75:22:b2:42:ac:dc:0b:20:c0:e8:c6:5d:8b:6a:34:
47:c4:bd:1b:9d:49:98:99:09:bd:a0:42:20:96:2d:fb:bf:53:
37:a5:0c:cc:f8:42:4b:b6:ec:62:d8:3a:b7:40:ca:d5:b3:3b:
eb:be:5a:db:af:c4:d9:36:c2:70:6b:2f:dd:75:c2:42:24:3c:
73:93:91:bf:2f:c0:7b:04:a5:ab:7b:b7:f8:f7:4e:2e:91:c8:
4c:a7:49:2a:a4:04:a6:3c:40:b1:45:df:18:29:c6:8e:b7:93:
40:fd:ac:a3:6d:f4:c4:2c:d9:df:28:b2:bb:eb:f2:6d:a5:36:
28:81:39:2b:30:8f:81:b0:e3:b8:78:89:16:28:af:71:88:79:
17:01:42:15:4e:78:e9:69:dd:89:e9:9c:33:be:2a:df:03:54:
fb:fc:1e:81:f0:f1:55:44:80:35:cd:b3:d7:5c:53:7a:a7:8e:
66:ae:b3:d8:5f:54:0d:01:64:f9:5c:bd:09:e2:47:b2:be:f3:
c5:16:73:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:32 2025 by rpki-client