Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
File: Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft (raw, json)
Hash identifier: aBDOAWpJqSBeC8MaDc4kWVAiOGQRSF1xPtbmD98jZKU=
Subject key identifier: 44:EC:35:A3:8C:5D:A4:C8:0D:96:44:4E:80:8C:65:04:2E:09:1A:D2
Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627
Certificate serial: 019A7225A0BA9F4153D71D525F00FED75082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
Manifest number: 167A
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl (hash: GKBDifGcLMwbf0W4fCtM10RORsKD8Pd2sRaIJvmdIQY=)
2: ZBPuASXAJcjpb4z2Gk47z8Bokws.roa (hash: xXQRbhIxvcjZLo2Nk1OZPyhXjwNTzt2gl2oGbinvPSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a0:ba:9f:41:53:d7:1d:52:5f:00:fe:d7:50:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=44ec35a38c5da4c80d96444e808c65042e091ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:fd:96:a8:db:7e:c9:68:51:74:14:95:b3:
e1:1b:fa:73:f0:77:52:81:fe:fc:b8:d5:d0:56:d1:
25:e0:9f:78:8e:d1:62:f1:b7:9b:97:78:59:10:65:
09:84:d8:35:c0:de:96:55:af:01:49:c4:53:cb:a5:
49:a8:ec:49:12:c7:bc:52:94:7c:d6:07:f4:9b:da:
e8:c6:bd:87:b2:53:21:39:9c:51:89:a5:43:d2:fa:
18:6a:f7:70:87:c2:38:f2:62:55:1c:27:7b:1b:87:
f8:1b:f9:58:96:2f:79:6c:9e:9b:b8:db:ef:62:fb:
24:f9:8e:17:aa:bf:18:4b:2f:62:72:72:b2:2d:08:
b5:5e:0d:e4:12:31:58:77:57:1e:91:9e:b1:27:37:
b2:71:2c:af:71:50:bb:bc:36:72:b5:1e:2d:03:2f:
de:cb:9b:72:cd:d2:c1:fc:f9:0e:82:b5:15:9c:79:
20:56:b7:0a:72:b8:d7:4f:a6:16:72:04:c7:48:b1:
60:5b:2c:d7:26:f7:15:a4:e9:cd:37:45:da:94:af:
d4:c3:57:f9:26:f8:71:09:1d:d8:ec:a3:33:dd:b2:
13:fb:76:ba:c5:1e:50:e8:13:c8:82:da:67:b9:a0:
ad:fc:b9:80:c7:b6:c9:96:5f:93:7b:37:ec:69:59:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:35:A3:8C:5D:A4:C8:0D:96:44:4E:80:8C:65:04:2E:09:1A:D2
X509v3 Authority Key Identifier:
keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:24:e5:89:76:a7:75:eb:48:d0:c9:b3:d8:2a:7b:14:68:6a:
4f:8a:31:c8:ca:8e:fe:6a:94:67:c9:54:c3:0f:cc:fd:6c:d7:
d0:db:2a:40:95:cb:ac:ec:f7:3d:c2:6c:5c:ab:f8:d3:3a:2b:
61:e5:27:95:3a:a1:38:a6:e7:ee:2b:67:29:23:ca:86:f5:11:
da:92:85:f1:56:40:57:2d:12:e6:3d:9c:1b:07:10:fb:d1:4a:
1e:df:29:06:44:fc:ee:01:ff:cd:43:9c:28:53:c3:29:6c:2a:
71:c8:f2:a9:ac:80:17:6f:c3:b9:3f:d2:23:f9:93:04:65:17:
c4:6f:6d:f2:e7:bb:e1:1a:8f:79:74:54:a6:34:8e:30:ea:78:
31:bc:26:50:25:a7:0b:64:10:38:4f:dc:3b:12:d8:27:10:fa:
6d:f5:5a:3e:ac:49:cf:15:dc:1c:0e:81:59:da:10:18:2f:bb:
e0:9b:0e:5d:7f:44:10:23:f2:2c:0d:73:54:3f:16:99:f3:d2:
89:c3:0e:78:a5:75:5e:76:da:33:54:3a:50:3e:50:a5:ae:f5:
69:e2:81:8b:e2:c2:0a:96:7f:62:4c:ab:f9:87:8d:fd:13:39:
96:d1:7c:3c:f5:3f:31:85:14:af:b8:13:90:9b:a0:a6:56:30:
ed:de:b8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:19 2025 by rpki-client