Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: +vii6Y6TiqzV8VpbctK8gFeo+ONvbORR1LS1rynUAU0=
Subject key identifier: EC:0A:4E:E0:06:A1:2A:E6:B7:63:6A:E4:E7:E5:C4:2D:4E:B1:E2:27
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 019A70A4F7B2018CC80B95547F74A6649D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:50 +0000
Manifest this update: Tue 11 Nov 2025 02:00:50 +0000
Manifest next update: Wed 12 Nov 2025 02:00:50 +0000
Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=)
2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: qeZbL3jyzpUCnaYtzvIB45YlJJ+L6lWq9p0E0gvWhHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f7:b2:01:8c:c8:0b:95:54:7f:74:a6:64:9d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Nov 11 02:00:50 2025 GMT
Not After : Nov 12 02:00:50 2025 GMT
Subject: CN=ec0a4ee006a12ae6b7636ae4e7e5c42d4eb1e227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:08:0f:13:07:27:17:ec:81:7c:98:8d:03:
2b:6e:e4:20:02:be:fd:2d:80:94:3f:fe:a0:4f:a4:
95:c8:f0:94:3d:2f:81:05:5c:01:65:73:34:5b:07:
48:62:68:80:bd:54:75:bf:71:7c:df:76:42:c4:44:
4d:d1:4c:04:ad:e4:f9:83:a5:86:7d:14:76:c1:e8:
fd:e3:5a:9f:2a:b2:93:4c:6f:0d:6b:b9:a6:a8:0a:
cb:a7:40:26:f9:2f:24:a2:0a:9c:aa:6b:e6:8e:61:
d7:b1:14:d4:ff:61:b1:14:bc:c0:0a:35:e2:0a:40:
b5:a7:19:5f:92:3d:bc:b0:42:29:38:f1:34:83:65:
10:44:be:3f:38:3e:20:05:db:28:70:91:a0:b2:34:
be:3f:b7:ec:80:2b:62:22:29:73:4f:97:34:0a:73:
cf:1b:21:04:ae:99:34:63:ce:8a:52:bd:cd:1c:90:
2a:3d:6d:9a:1b:31:03:5d:d6:fc:6c:3d:5b:c6:5b:
87:09:3c:d9:f6:2e:1f:ec:2d:9f:36:51:61:38:19:
e6:45:d3:5d:f6:60:af:fb:24:2e:90:28:63:26:a9:
1a:de:60:7b:4f:86:25:bb:5d:d9:de:74:4b:5b:26:
5e:d7:f6:14:31:00:8a:e1:e5:ab:3d:ff:de:e1:cd:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0A:4E:E0:06:A1:2A:E6:B7:63:6A:E4:E7:E5:C4:2D:4E:B1:E2:27
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:89:fc:ca:a0:e5:da:76:af:e9:48:7a:e7:8b:71:49:7f:38:
5d:29:d0:82:3a:7c:72:4c:bc:48:b2:98:19:c9:cf:45:7d:e8:
c3:b8:59:24:39:a3:6d:4a:29:6e:c3:8d:12:be:df:9c:0b:2d:
69:93:80:7b:2b:7c:bf:f1:26:84:8f:fc:9c:40:02:c1:71:80:
e1:5c:7b:81:6a:86:ec:ef:1f:08:0d:26:7d:e8:5a:dd:90:2b:
33:85:4b:a1:9d:09:ff:03:0d:68:27:5f:cf:2b:4f:0c:8c:90:
09:52:0b:2a:02:ff:ea:66:db:9f:ef:a4:97:59:7e:fe:d2:01:
cb:c6:78:02:7f:66:2e:3c:1d:35:63:4d:75:76:9b:37:2c:63:
0f:eb:3a:2d:89:37:8a:fb:72:30:b0:5d:cd:e0:17:58:54:47:
c1:4b:96:c0:d6:5b:68:97:f3:39:55:4a:b2:d6:5b:bc:f1:df:
cd:69:48:4a:0b:d4:7a:e3:08:e0:07:f6:70:36:9f:48:0b:78:
a9:58:39:fd:78:8f:dd:81:1c:4d:14:c3:86:1e:68:cd:8b:b0:
78:61:56:ab:13:a4:d7:d8:de:4e:2d:97:3f:c9:e2:51:89:71:
b1:4c:ee:d7:e5:06:8b:65:c5:1f:18:36:c4:ea:89:1e:93:73:
3e:7d:4f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:45 2025 by rpki-client