Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json)
Hash identifier: PvmY+COv/d0WAn0yEPgaLiFQHhFoAmYsOn3e44kSgJM=
Subject key identifier: 87:9A:B4:8F:3A:8B:0A:54:6E:FA:BA:AC:8B:E6:8D:47:D3:3B:62:2E
Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
Certificate issuer: /CN=67864477fe948bf47b9179718c3698eeff58111d
Certificate serial: 019A71136E52301BFE1C8E40BA1CD3F1908F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: D2rHH0jo3OPP6jzWhJd+CntcC6pxrOi0VQfoa8Py0CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6e:52:30:1b:fe:1c:8e:40:ba:1c:d3:f1:90:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=879ab48f3a8b0a546efabaac8be68d47d33b622e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:f9:9b:3b:d8:c0:41:4e:f3:7b:f7:57:61:
26:5c:9d:21:d6:47:e3:50:06:ef:33:75:87:7e:16:
ab:84:4d:23:c2:00:d6:49:06:b2:43:11:ad:1f:bf:
9a:0d:be:15:8d:dd:0f:5c:c5:86:bc:98:e8:e7:10:
9a:d1:9d:a8:7d:52:c4:26:20:36:d8:95:3b:34:dc:
86:4e:b4:14:57:cc:7d:d6:ea:44:da:5b:b1:4d:bd:
39:89:59:fc:8c:e9:8a:ea:da:a0:e3:53:43:9f:9b:
a5:95:23:d8:7e:3f:6a:93:7a:e9:08:28:25:a1:d5:
70:be:86:fa:7a:ab:fd:24:97:ad:79:22:35:b3:c2:
09:1c:a0:b6:a3:c2:54:e4:03:e5:e3:50:8b:c9:e8:
88:7c:ef:ba:fa:93:c6:2d:8a:73:0d:55:18:f6:8e:
28:16:ac:be:60:a5:a2:72:a1:c0:08:c8:0f:5b:e0:
5a:5b:bf:f4:34:a0:cc:94:f7:f5:9a:a1:43:0e:e7:
b3:09:3f:4a:b5:87:de:53:1f:f6:46:4f:f1:b7:94:
b6:39:b6:41:48:05:8d:96:01:7f:a8:4d:df:07:9d:
39:7b:f7:e5:5b:c8:7a:d4:bf:6d:d1:f5:0b:c9:09:
0e:e4:b7:88:ae:2e:59:8e:83:b3:63:02:84:a7:81:
25:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:B4:8F:3A:8B:0A:54:6E:FA:BA:AC:8B:E6:8D:47:D3:3B:62:2E
X509v3 Authority Key Identifier:
keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:ce:32:96:d7:db:67:66:56:0c:ed:1a:09:bb:65:a6:ab:d9:
7f:c7:70:34:02:51:66:a5:27:6e:82:38:fe:8d:9b:41:15:c5:
37:cb:c2:3c:e8:16:4b:cd:3f:a3:6d:b7:06:53:f7:30:c2:bd:
77:d0:1b:c7:36:ff:11:3a:6c:bb:33:a2:1f:f9:52:7b:cd:0b:
34:48:9d:41:58:98:96:e8:ec:5c:06:76:52:64:6a:1f:11:d1:
98:fa:32:13:b4:aa:8b:29:a1:62:e3:7f:84:b2:99:fe:8c:1b:
c3:95:41:98:a3:45:ae:00:71:7a:d5:f6:ba:a8:52:ad:7c:ed:
81:e3:3e:94:35:e7:15:5c:43:02:d5:de:86:85:b1:38:41:1d:
a1:77:d7:4f:57:95:f7:fb:5a:59:c2:1a:ae:fb:66:5a:f6:45:
59:69:b7:71:6c:0a:46:05:3c:05:13:ea:52:fd:1c:85:66:29:
b1:e6:18:13:75:c0:dc:47:5c:bf:e0:cc:88:19:af:22:fe:3f:
5b:4d:e3:f4:90:34:8f:f5:7b:0d:4b:f1:16:fa:b9:83:25:a0:
7e:b3:33:b1:d5:02:4d:4c:44:7a:b2:44:16:31:39:b9:41:81:
00:31:ea:f1:c2:57:33:cc:41:ec:a2:55:32:6b:0d:e1:dd:c1:
f8:a6:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:54 2025 by rpki-client