Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: vn2ruoqbzTb36qtrc/g++edq56m1fg7119yaZsTyVWg=
Subject key identifier: 68:E6:C5:80:52:35:F4:5F:BC:8F:E0:F0:C8:D6:E7:75:D8:F7:AD:17
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 019A706DF22987177866CC8443142D1E183C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 01:00:44 +0000
Manifest this update: Tue 11 Nov 2025 01:00:44 +0000
Manifest next update: Wed 12 Nov 2025 01:00:44 +0000
Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: Oruz0kv7HUjy1o1YJEQCm3rh4OEmkasBW/dyKVLCds0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f2:29:87:17:78:66:cc:84:43:14:2d:1e:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Nov 11 01:00:44 2025 GMT
Not After : Nov 12 01:00:44 2025 GMT
Subject: CN=68e6c5805235f45fbc8fe0f0c8d6e775d8f7ad17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:32:1a:a8:fa:15:f2:09:61:31:70:22:61:
8d:d7:02:77:d3:39:c5:10:89:f2:f6:b1:35:71:9a:
29:c2:7f:fc:f1:7f:e1:fb:9e:79:1c:3e:fc:b5:37:
65:29:b9:21:fb:c0:04:e1:21:93:2f:2d:30:5a:50:
0c:68:bd:88:c3:0f:31:1e:50:cf:2a:42:3b:ce:e0:
9b:ff:18:ba:cd:81:6c:fe:ad:0e:ba:2c:35:cf:32:
07:e7:4d:08:3b:4c:86:a3:05:89:8d:ec:f9:b5:5a:
ca:3f:c4:d7:27:4d:1a:d2:47:21:87:75:09:72:f2:
4a:39:ba:45:72:44:eb:66:a8:b2:0c:79:14:26:e5:
0d:2e:6f:7c:28:ec:0f:f9:df:a2:ae:7a:0f:e4:44:
dd:aa:d1:ed:ad:e2:42:d6:e2:2a:b0:83:4f:3e:58:
78:59:fc:7a:1e:c2:6d:ad:9a:a7:02:9f:a4:d9:9d:
61:68:3f:e5:a8:fe:39:54:78:b0:93:de:f6:30:0f:
f5:47:06:e9:2b:d5:06:25:00:62:26:7d:bf:b5:c0:
ae:55:9f:0b:23:35:dc:10:71:53:2f:ff:c5:4e:d9:
3b:31:fa:e3:a4:96:72:b1:74:66:b4:d9:7f:76:56:
bd:09:1c:5b:dc:d5:02:da:ba:72:8c:c4:50:f8:55:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:C5:80:52:35:F4:5F:BC:8F:E0:F0:C8:D6:E7:75:D8:F7:AD:17
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2a:3d:5b:0e:22:ca:59:11:4c:27:a8:12:09:63:f9:a6:c2:
7e:6e:0c:8c:30:4a:80:87:b8:36:51:8a:80:a2:4b:bd:dc:0c:
8c:6e:0a:05:35:d1:a8:78:92:be:95:ef:0f:54:ef:3d:78:c0:
95:4e:b8:66:d4:80:71:a7:4a:87:42:ee:9c:fb:55:47:c7:80:
7a:ab:d5:21:6e:ab:88:26:07:be:5a:e5:79:87:d1:3a:f0:1d:
a0:fa:a5:05:ba:03:2c:46:e3:b4:17:0a:ab:de:ae:21:9a:20:
a1:7e:2d:5e:fd:76:17:51:74:5a:1b:56:7c:af:29:5f:9b:d1:
11:b8:41:41:c7:b0:0c:89:68:eb:eb:a0:4b:27:14:9e:8b:eb:
6b:40:db:60:41:83:5e:70:ed:74:20:d4:5f:e8:1e:21:20:76:
d3:34:d1:59:d3:6e:7e:e5:01:e3:ee:46:02:6c:33:d0:dd:36:
9f:63:a1:1a:aa:c0:00:c1:12:98:0d:2c:71:5d:77:38:54:81:
24:5e:73:80:c1:b6:31:78:c5:e5:e2:97:e7:a1:9c:4b:c3:65:
02:7e:80:de:fb:63:fe:3f:78:d9:ac:d4:80:21:71:8f:cc:be:
1b:56:22:30:87:b9:73:ea:47:b2:f9:cf:f7:a1:64:03:34:4d:
87:00:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:53 2025 by rpki-client