Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: 0zM0GXI579R0sUndP7Mkx0+3Q1Xp8m3xCTWsVh6URjQ=
Subject key identifier: 1B:85:C6:7F:8F:13:6B:AB:E3:49:95:70:9C:F2:2D:9D:47:ED:81:02
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 019A70A56A4C11B0566A43FBF76899CF8259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 172E
Signing time: Tue 11 Nov 2025 02:01:20 +0000
Manifest this update: Tue 11 Nov 2025 02:01:20 +0000
Manifest next update: Wed 12 Nov 2025 02:01:20 +0000
Files and hashes: 1: BLPtpElZC_p2IWrsn0eYA39TSUA.roa (hash: q8YlKe7zrrj4ZoEyny/W1gxonK4RscrAFG9IOAtgKRE=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: ffGXiyma11QKHFtaD7tp4nIPk0NE7iSXr4Xc+6lbcuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6a:4c:11:b0:56:6a:43:fb:f7:68:99:cf:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Nov 11 02:01:20 2025 GMT
Not After : Nov 12 02:01:20 2025 GMT
Subject: CN=1b85c67f8f136babe34995709cf22d9d47ed8102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:b6:41:e9:5d:3f:1e:ac:f4:40:05:5f:06:
91:aa:9c:0e:9f:db:91:0a:05:b1:fd:97:60:b2:35:
10:52:0c:45:e0:15:b4:c4:13:32:ea:af:c3:0e:45:
a6:e7:88:97:54:7e:39:79:f4:9c:5e:fb:6c:65:59:
4b:8e:c9:18:01:29:3f:e8:af:f2:0d:a9:fc:bd:63:
48:b0:3e:4a:27:95:fc:da:f7:66:ae:3b:05:13:b1:
f4:30:10:62:bd:5e:ee:1a:05:29:e1:0c:f1:3d:8c:
a1:25:2f:71:27:02:fb:9b:a8:6c:bb:fe:3a:f2:89:
cd:1a:11:20:38:ab:fa:a9:be:cf:79:de:21:3a:81:
fe:fd:e2:01:43:7d:b4:49:1c:76:4c:ae:36:b8:65:
20:93:f4:97:13:8f:38:87:47:69:69:83:93:7a:fb:
b7:d6:47:b9:d3:47:97:d2:28:00:bf:a8:47:bc:5b:
29:bf:2d:df:a4:6d:59:8c:6e:31:1f:10:13:15:e4:
ed:56:57:e3:88:e2:96:41:af:47:0d:90:06:8e:81:
54:07:6b:79:27:51:7e:da:a6:87:1b:6e:86:a4:9d:
95:dc:3f:53:68:6c:8f:76:d8:23:b9:81:6f:eb:a2:
5f:4d:1f:51:8b:96:18:97:22:e3:5d:d6:c5:62:37:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:C6:7F:8F:13:6B:AB:E3:49:95:70:9C:F2:2D:9D:47:ED:81:02
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ff:9f:a9:ea:42:48:d0:37:c1:5f:64:e1:f6:a1:cf:b6:ff:
6d:12:90:b0:ae:fd:4a:97:0c:ce:32:ea:d0:1a:4a:7e:16:2b:
81:19:40:04:a0:ef:de:e8:c7:e3:b6:c3:4e:6f:88:66:fc:96:
28:19:a2:ca:db:d5:56:2e:50:89:5e:ed:37:dc:18:b1:f0:9d:
6b:b9:df:e9:22:45:9b:12:b4:4b:0a:10:8d:75:67:71:34:db:
36:73:de:8e:5d:ca:f3:4e:5d:f4:aa:bc:40:4a:84:49:dd:99:
2e:71:cc:b5:47:5d:b2:6f:83:0d:4b:c2:a0:55:4d:71:33:2d:
98:32:c8:af:7a:fc:40:9a:1e:a3:e2:42:7c:bd:9e:dc:6b:8c:
e2:fa:48:d3:45:1e:0f:e8:9f:66:88:5d:8d:22:0f:da:cc:ec:
a6:23:db:24:b4:d1:7a:71:7d:81:55:a1:fe:eb:da:f1:56:02:
9e:39:36:51:38:44:aa:e4:e0:a9:40:c5:14:0f:25:59:6c:23:
60:05:8d:f2:33:c0:8c:b1:06:32:1d:5a:47:4f:25:d0:ee:12:
14:ba:1f:03:5b:99:91:8c:1f:5d:77:a8:03:e9:56:c9:66:d8:
0e:b3:e0:61:32:d5:b0:d3:9f:ff:76:8f:07:53:b0:d0:a1:5a:
47:e9:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:48 2025 by rpki-client