Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json)
Hash identifier: S9RxeUrfunhRK326kJjcsPh14vY0NgwiYw37uBwpT6g=
Subject key identifier: CE:59:66:49:9D:B7:C6:92:23:92:73:AA:A3:A0:B7:55:18:FD:89:7A
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 019A730167C4992E58E6B35E21A2ACC4352B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:01:03 +0000
Manifest this update: Tue 11 Nov 2025 13:01:03 +0000
Manifest next update: Wed 12 Nov 2025 13:01:03 +0000
Files and hashes: 1: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (hash: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=)
2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: YM+2wOIGiMC5QFQnTubT8JuvBPwSQmQYWhpJit1Z3lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:67:c4:99:2e:58:e6:b3:5e:21:a2:ac:c4:35:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Nov 11 13:01:03 2025 GMT
Not After : Nov 12 13:01:03 2025 GMT
Subject: CN=ce5966499db7c692239273aaa3a0b75518fd897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:1c:f4:06:c8:a8:4b:07:1a:3c:31:e9:d2:
da:90:9f:12:2b:f6:cc:f0:89:71:26:8f:b9:69:23:
58:0f:26:39:eb:f9:21:8d:4c:3d:03:96:c7:e7:70:
74:0a:48:67:f9:08:c3:05:da:31:f7:49:7e:9e:69:
6b:87:ca:60:00:95:1b:66:9e:9b:66:f9:76:37:e8:
04:df:ef:54:04:af:f6:27:01:4c:34:87:3a:33:9c:
d1:f4:63:c3:e4:dc:29:a6:3d:8f:e0:7d:c9:c2:74:
81:5f:e2:e4:74:a8:b2:8a:bb:2f:24:78:7e:f0:1d:
99:23:03:73:09:74:e7:7c:b8:bd:45:13:e2:5f:95:
7b:1e:39:a1:db:c8:6e:36:fd:fa:cb:be:e9:ae:3b:
13:24:5e:9d:1f:d8:f5:2a:fe:bd:70:f3:97:a1:57:
7b:99:7f:dd:65:17:94:57:8c:81:6f:c4:6d:d9:d2:
ca:a5:b7:30:0c:65:d3:7c:b8:97:0f:b1:19:ec:6d:
c8:3a:5f:2a:60:4a:b8:91:56:d4:ce:a0:08:3a:66:
b2:11:b5:3e:d4:cd:1a:52:3a:14:4b:d6:68:f2:45:
44:06:ef:81:17:f5:cd:14:af:3e:f7:19:b3:f1:ae:
64:28:67:81:b3:74:fc:27:52:51:2a:e3:36:2d:cc:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:66:49:9D:B7:C6:92:23:92:73:AA:A3:A0:B7:55:18:FD:89:7A
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d2:97:68:25:63:4c:0a:2b:a3:f5:a5:d6:dc:46:0b:0a:81:
7d:af:f2:af:c1:ee:a2:20:9a:e5:7c:7b:fc:59:ea:b0:71:fb:
cc:f8:51:25:10:68:72:7f:41:06:ce:3f:87:22:36:fa:3b:fd:
dc:e5:22:99:40:b5:90:ec:ca:21:85:35:7c:49:c1:64:04:c5:
c1:41:48:fd:7e:13:b2:f4:75:32:38:4f:bc:ac:77:78:12:62:
7b:56:87:59:e9:80:36:4a:16:8a:07:ea:8e:76:a4:9b:1f:e7:
cd:0f:0c:8b:63:d7:c7:20:a9:b1:c1:c9:8f:37:01:e6:fb:08:
46:95:e9:fb:b4:07:ff:75:8f:52:a2:e1:d3:0a:af:ce:78:8b:
2f:3d:8c:2b:68:25:cb:71:8f:41:9f:d8:19:0a:d5:7c:89:94:
bc:98:ac:3f:a7:20:ef:72:4c:1b:2b:df:05:32:43:fe:e4:ba:
bd:5e:01:f4:26:a5:fd:6f:47:f0:df:aa:37:e7:3d:27:c0:00:
01:fb:18:2f:0a:5b:fa:82:a9:22:5a:22:f1:86:47:f5:35:d2:
b0:2b:52:14:73:c7:6b:a0:a6:af:7f:02:d9:a4:ac:d0:43:a6:
05:bc:65:96:90:45:ad:3a:76:b9:77:84:d4:9f:98:d1:1e:38:
27:b6:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:12 2025 by rpki-client