Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File: Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier: WaKeK/+mVjGbhnNFq7tHp64Q346nGcaF2r9EH7LyLRE=
Subject key identifier: 89:E0:E1:FE:56:65:6E:F8:A6:DB:00:D6:FD:4C:C9:69:5F:BE:DD:27
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer: /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial: 019A70A55B7B9997DBB1E2051563809B9DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 02:01:16 +0000
Manifest this update: Tue 11 Nov 2025 02:01:16 +0000
Manifest next update: Wed 12 Nov 2025 02:01:16 +0000
Files and hashes: 1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: Ppm2T5BqW2qCzSGQbrZ/qriiPeU8veO3HOEp9DovhXg=)
2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:5b:7b:99:97:db:b1:e2:05:15:63:80:9b:9d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Validity
Not Before: Nov 11 02:01:16 2025 GMT
Not After : Nov 12 02:01:16 2025 GMT
Subject: CN=89e0e1fe56656ef8a6db00d6fd4cc9695fbedd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:ff:9d:ce:5c:ef:b9:46:2e:0d:a3:56:7d:
95:bf:26:6c:0a:02:c8:02:80:c8:03:36:70:42:fa:
e1:dc:dc:69:b0:f0:57:ce:9a:8e:a8:a6:eb:c9:0b:
b4:4e:c0:2d:bc:61:2f:6c:30:4e:7f:13:71:b1:dd:
59:d7:47:af:26:06:5f:2a:4b:71:a7:09:45:78:1e:
3a:3f:1e:65:cd:79:72:1f:8e:6d:2b:21:fc:4b:10:
c7:27:cf:91:36:b8:af:3f:ef:7c:ba:36:ed:dc:7b:
42:22:c6:e2:9c:bc:f9:68:7f:6d:a5:d2:7b:1b:6b:
ea:bf:3e:8a:04:e5:d2:2a:5a:b3:b7:5b:07:65:a8:
e5:3b:d7:d8:a7:75:8f:5d:02:d2:32:cc:67:9f:bf:
ff:b0:58:08:a9:28:9f:39:34:a4:e5:50:64:da:2e:
3a:d6:bc:78:3f:f0:8b:70:18:25:4e:3c:4c:e7:12:
d9:8e:7b:d4:97:3d:ee:65:be:8c:5c:ad:b8:1c:0c:
ed:87:7f:22:97:38:fc:19:4a:77:49:97:ff:63:9e:
f8:23:fe:29:1d:a4:63:b5:7c:a9:67:a3:f9:2d:f6:
56:73:d6:ca:19:32:ff:29:52:53:9f:9f:5e:02:1e:
03:be:b0:d1:b2:5c:62:8a:41:f8:77:98:27:11:be:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:E1:FE:56:65:6E:F8:A6:DB:00:D6:FD:4C:C9:69:5F:BE:DD:27
X509v3 Authority Key Identifier:
keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:29:72:5d:5a:10:d1:38:d4:fa:2d:bf:9d:23:be:89:a6:09:
47:ff:2c:f4:d4:b1:e0:9e:8a:5d:8b:60:4f:b0:f8:65:0b:0d:
92:3c:6f:a3:a3:ed:5c:ba:07:e3:55:00:21:35:1e:69:36:ae:
cd:aa:fc:f9:b6:c6:92:22:77:37:67:52:02:40:08:62:a7:b5:
35:1a:a3:94:01:cc:46:ee:2a:6d:e7:fe:38:d3:2b:d7:a2:f8:
ac:90:1f:74:ab:64:21:fe:73:19:1a:10:18:ae:be:70:f6:f4:
ce:06:f0:92:96:fa:63:d0:d4:96:f4:10:7d:47:a1:93:72:d9:
c3:c7:b3:2a:2f:7d:6a:69:12:05:74:93:fb:15:e0:33:ae:d3:
d9:9e:0c:2c:10:4f:df:87:a1:49:15:86:01:72:b0:8a:28:6c:
e0:75:52:33:9a:cb:70:3f:ad:2c:bd:d2:57:8b:1c:96:be:37:
79:03:09:8a:11:dc:60:79:ec:d3:89:5f:a3:5a:46:17:12:f7:
23:03:26:f5:3c:5d:73:15:51:be:c9:b1:fd:bb:4f:d7:0d:8a:
8c:d6:fb:ec:df:df:ee:32:dd:5c:65:de:01:e4:50:7f:65:cb:
fb:2f:3e:49:55:14:d4:13:56:dc:a1:48:cd:62:fb:e1:1b:c4:
56:d7:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:46 2025 by rpki-client