Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: 8MyO//CGnXjDrDQ3+y4ZgLPSH2xjPj+MbPuuborPVQA=
Subject key identifier: 2F:91:C0:3E:82:96:58:3B:B8:70:DE:59:06:D2:86:E7:9D:22:4F:3F
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019A7225C5F31D027B6973175AC7B5EA65B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: rgb9JptFqUrh7/rpUfM8lQP3UkuXxyB5bdJtdFpA/wE=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c5:f3:1d:02:7b:69:73:17:5a:c7:b5:ea:65:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=2f91c03e8296583bb870de5906d286e79d224f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:53:55:da:c5:87:24:cb:67:f6:6a:a5:48:56:
95:37:80:dd:6b:42:71:c9:5c:c1:4e:f4:9c:19:84:
55:50:08:09:3d:42:f5:a4:82:66:00:de:d1:43:4d:
d8:4f:9e:55:5a:88:9e:b5:f6:35:e3:b7:a4:e3:88:
45:03:7d:50:5e:f6:06:4b:9f:d3:61:d0:87:e2:9e:
64:91:14:0a:08:bf:e7:93:45:d0:e6:68:a8:ad:6f:
76:fb:85:b9:6b:28:a5:4c:fd:85:4c:80:d6:3d:b4:
ba:e0:43:d0:93:6f:84:90:6b:a1:98:44:82:94:62:
6f:0d:48:36:8e:57:b5:f7:21:a1:ba:8c:ec:a0:33:
62:cc:30:52:d5:9c:d6:51:55:16:fa:1b:d6:c5:74:
45:b3:8e:cf:63:a0:d4:db:1e:f0:2b:22:cb:88:c4:
df:92:ba:57:6a:d3:5c:84:1a:ef:da:c6:c5:03:38:
35:c9:44:b7:47:d3:b7:e5:21:62:0b:4d:ee:73:17:
8c:c2:fa:99:ae:70:cd:ed:0b:a1:7d:ac:29:4a:d2:
ca:a9:11:37:1e:16:94:59:70:23:9c:94:0f:a6:99:
1c:5e:9a:f3:fe:5a:51:25:42:c4:18:97:9e:73:33:
42:72:0f:47:1c:8c:6b:8d:89:e9:6e:0c:2c:cc:79:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:C0:3E:82:96:58:3B:B8:70:DE:59:06:D2:86:E7:9D:22:4F:3F
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bc:8f:0e:e1:d7:0d:c8:25:95:5e:c4:d2:07:9f:84:9f:03:
1d:d9:32:66:b5:46:e6:71:c4:d2:8e:7a:48:f2:b0:d9:dd:44:
2b:c6:de:ea:a8:1d:b5:09:5c:d1:5d:55:49:36:2c:28:6c:2d:
ac:bc:aa:86:a4:98:2c:30:b9:d9:98:4e:2e:fb:2d:73:fc:ec:
40:f3:eb:d3:d3:79:18:b8:13:c3:a5:bc:61:30:aa:23:a3:89:
14:d5:d7:db:9b:39:d5:aa:d0:4b:99:f9:3d:d5:e8:c4:ca:a8:
ba:03:e2:14:2d:4d:cc:c1:15:f2:ca:6b:04:67:22:07:62:2b:
46:00:35:a7:a5:25:64:5b:b7:7b:c6:8b:ac:68:8a:03:95:44:
d0:8e:2e:b1:42:16:6a:11:e8:2e:51:0c:6a:c0:35:29:b2:74:
60:88:15:5a:c1:b4:c5:bd:ea:b1:a6:56:44:5e:9c:00:86:a6:
c0:23:67:02:f1:e4:c4:c5:70:3d:db:ed:bf:db:77:c2:49:4f:
0a:e9:3f:42:1f:0d:4a:04:d0:db:75:fb:60:31:06:9a:41:e6:
73:f2:9c:e7:b6:ba:6c:3e:04:70:b8:b4:ac:9d:af:ed:44:0d:
c7:5c:0c:ee:2a:b7:f2:e4:89:f6:54:b5:1c:4c:02:0b:d4:83:
41:f1:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:16 2025 by rpki-client