Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier: l0jXfS6urnnR/27PcNXkg96RB3ZqXNC7nIaUnawjdMk=
Subject key identifier: 8A:D2:0E:7C:17:83:B7:34:00:36:D4:C7:1B:69:67:AD:EE:02:27:C1
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial: 019A72CAA506C1F3B0F4144283BE04704C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 12:01:14 +0000
Manifest this update: Tue 11 Nov 2025 12:01:14 +0000
Manifest next update: Wed 12 Nov 2025 12:01:14 +0000
Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: Yvs4oZeWrkpoEhE7Mke+bP+FnwG2NbGVVndvSPklvrU=)
2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a5:06:c1:f3:b0:f4:14:42:83:be:04:70:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Validity
Not Before: Nov 11 12:01:14 2025 GMT
Not After : Nov 12 12:01:14 2025 GMT
Subject: CN=8ad20e7c1783b7340036d4c71b6967adee0227c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:f6:b3:eb:2f:9f:86:18:5e:e7:52:4f:72:
71:0d:10:56:fd:ad:52:83:e5:ae:a3:ef:3a:7d:9b:
e0:8f:47:53:88:bd:5b:0d:d3:25:26:87:c3:35:a3:
93:41:ba:d1:94:d3:18:7d:c6:2c:6b:d3:ab:a4:b3:
6c:60:45:3e:99:ed:9b:41:04:a7:d2:2a:aa:02:38:
b4:56:eb:02:e1:8a:8c:47:6f:00:be:d3:e8:32:a2:
fb:55:75:16:88:8e:90:c3:02:37:f8:73:ef:fd:74:
7a:8f:6a:52:9a:cc:8d:ed:9a:7b:f7:b5:f8:4c:00:
4f:06:a7:23:c1:e2:45:a2:db:91:24:97:b0:24:b9:
59:32:d4:c3:b5:43:56:49:b4:8b:ab:87:4d:b5:63:
7f:2d:4b:83:13:a4:d9:83:bc:31:15:7e:ba:7b:13:
3b:4e:67:89:9e:1e:ed:3a:e9:08:89:6c:e1:f9:b1:
30:f5:d7:b0:d0:77:f8:43:2f:db:57:b4:ae:03:39:
04:af:09:be:22:f1:d8:ca:dd:3c:3c:a9:55:50:60:
18:d7:fe:40:c2:94:f8:4e:ba:9a:c8:ab:52:4f:e6:
fc:4f:cc:df:44:55:c2:52:2f:c4:b0:01:0c:9a:66:
04:03:19:cd:07:f3:2b:68:40:60:11:4e:6d:e7:29:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:0E:7C:17:83:B7:34:00:36:D4:C7:1B:69:67:AD:EE:02:27:C1
X509v3 Authority Key Identifier:
keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:87:08:0d:a3:29:6f:55:f0:9e:44:e9:56:1b:b9:01:39:2e:
99:67:76:3a:47:9a:40:0f:ef:d8:8b:91:10:ba:75:b6:62:46:
4d:5f:9e:76:2a:f0:0b:03:76:28:98:90:78:98:9b:1a:54:e9:
69:99:0d:20:9b:92:4f:41:95:b2:40:21:e5:b4:0d:3d:56:2d:
32:cd:01:ac:08:c3:ed:ba:62:80:51:e1:fb:1b:99:ea:f2:1a:
1b:f1:c8:28:ea:84:23:4f:26:eb:1f:7d:84:db:d2:85:25:61:
0c:fe:74:e1:87:98:dc:65:f4:dc:5b:64:be:8d:99:f1:35:b9:
5a:ab:f1:dd:48:93:2e:94:ba:db:44:89:4c:b0:9f:6d:5d:d8:
06:be:ad:78:b1:91:8e:a0:34:11:cf:79:9e:4f:fc:3c:29:db:
29:6a:99:db:a1:12:04:ba:2f:f2:4e:02:e1:8a:f5:7a:a2:99:
7b:35:ac:87:ed:50:f2:b6:b4:cd:53:d4:7a:eb:c7:13:a6:df:
bb:29:7e:d5:ba:ad:7b:b5:19:fc:ba:39:20:ee:7f:9d:4b:a5:
d1:2d:29:be:43:b3:b0:97:31:6e:cd:9f:d8:94:69:4c:96:fe:
13:d4:ca:4d:0d:5a:06:dd:2c:23:94:49:c5:23:74:cb:ed:6e:
96:ac:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:55 2025 by rpki-client