Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: wb5XC3eNmg/LUkIf5KCGLuvoEsyZDbMHEserbe5k4og=
Subject key identifier: A6:24:83:38:7C:3D:EB:BA:1E:E2:FC:50:BC:9D:C3:C5:EB:A5:13:EB
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 019A73382F29C926AE0A33A27D8289B6EDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 14:00:53 +0000
Manifest this update: Tue 11 Nov 2025 14:00:53 +0000
Manifest next update: Wed 12 Nov 2025 14:00:53 +0000
Files and hashes: 1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: bSW/Lf3WISNokzcxslWEx+3wA6k9g9wmP4KuYry2tI8=)
2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=)
3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:2f:29:c9:26:ae:0a:33:a2:7d:82:89:b6:ed:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Nov 11 14:00:53 2025 GMT
Not After : Nov 12 14:00:53 2025 GMT
Subject: CN=a62483387c3debba1ee2fc50bc9dc3c5eba513eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:df:2d:1d:55:71:a5:d9:1f:58:62:80:86:
2c:df:6b:b6:ec:15:40:33:2f:ff:e1:2d:4f:6e:65:
50:be:7e:d7:de:74:13:a3:5f:16:da:f9:90:ab:fd:
0c:bd:3d:a9:d8:f6:8d:da:17:c4:6b:34:9e:c9:a5:
ad:06:c9:da:cc:99:29:b1:75:20:cb:01:57:c9:2e:
19:17:bb:68:4a:d8:19:f8:8c:9b:04:15:d4:ec:66:
bc:42:49:d1:f0:50:96:40:58:17:52:4d:b8:02:5a:
0c:78:ea:cf:de:77:06:c8:bd:19:b3:5c:b7:ab:d1:
d3:67:40:e9:7f:29:5c:27:59:d9:00:4f:9e:ae:e5:
49:96:34:38:7f:16:bd:c8:d3:cc:7f:fb:8a:25:3f:
39:ca:89:34:13:c8:ea:bf:e5:41:4f:e3:70:c9:ee:
6e:3e:42:6a:54:02:84:7a:ba:10:ca:f9:1b:47:1b:
05:09:17:77:a4:38:bb:8e:a4:55:d7:f0:49:7c:73:
da:a7:47:fd:85:99:36:4a:37:49:73:08:0b:e1:ce:
a2:f2:a2:f6:cb:e6:84:1d:22:50:c1:49:9e:28:34:
d3:f4:79:c0:e2:e6:3e:99:1a:9b:e5:d5:a7:aa:b4:
d1:73:19:eb:cf:6f:b4:8b:45:d5:3c:27:7d:5a:9d:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:24:83:38:7C:3D:EB:BA:1E:E2:FC:50:BC:9D:C3:C5:EB:A5:13:EB
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:d6:aa:11:c6:69:08:f0:87:db:91:8d:97:1d:a1:14:ef:
f3:4c:0c:fa:2c:2a:e7:17:f4:1f:65:d6:a0:b4:6f:12:0c:12:
ce:bd:cb:93:39:b6:e3:e0:1d:6e:dc:2c:5f:76:17:5f:1b:9d:
57:e7:9c:37:f8:1d:3c:ac:8d:23:cb:e5:e7:99:17:8b:72:41:
90:f6:0b:bf:f7:5d:c7:0b:b1:cb:c6:cc:19:59:96:83:1e:b7:
04:36:92:f6:0e:26:d1:b2:0a:a8:d6:6c:34:de:47:25:56:5c:
85:eb:dd:b4:d1:8f:ab:82:06:30:01:93:7d:1d:32:96:53:ed:
c3:7d:4e:3a:8c:36:41:5b:80:7d:01:fa:c7:47:52:bb:18:d2:
14:9c:84:89:0b:80:a5:29:cf:32:a2:bc:6c:3b:d4:ce:bb:c3:
90:dd:0b:e9:90:9f:13:3a:1d:f4:68:70:67:3d:1a:05:dc:9f:
fc:3c:8f:c3:b3:e7:85:99:fb:6a:85:e7:d0:f0:97:16:20:71:
6f:87:b1:38:63:b8:9f:fb:c7:d8:9e:9c:7e:f7:e4:28:e5:8d:
64:43:d2:cb:42:06:37:5a:9e:87:3f:0a:d4:fc:96:6a:24:09:
19:dd:89:c2:b9:b7:c2:fb:57:79:78:ac:21:02:f6:da:11:f0:
32:bd:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:50 2025 by rpki-client