Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier: KNJBur1SZ3uvHbiKdLsItOgzTUNyOBpiHGAcPCPUkt4=
Subject key identifier: D7:3C:C9:C6:72:69:FD:AA:4D:0D:43:01:65:00:D0:2E:85:09:0F:C5
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 019A71EEAEF11C69C36E18F70C931BE2B7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: TTQlHokzMVD0W/2Ci4VANoHP7RGXbC7lYn9a2sWSVzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ae:f1:1c:69:c3:6e:18:f7:0c:93:1b:e2:b7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=d73cc9c67269fdaa4d0d43016500d02e85090fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:8d:cd:0c:a9:61:f2:93:9e:73:8b:d0:49:
ef:ea:93:4b:a7:f2:8f:f4:db:d8:c0:27:01:64:a2:
a3:c4:4e:09:d1:13:bb:1a:c8:97:4f:78:3d:b8:34:
89:d0:88:06:27:09:b2:c7:49:b5:69:2e:63:05:b9:
fb:6a:ac:4b:75:0a:32:3a:d1:07:33:da:ce:4d:91:
e0:98:3d:44:63:c1:5d:1d:ac:02:da:ac:f5:a7:8f:
4f:85:42:08:57:2e:93:53:11:df:3e:31:da:e3:9e:
d8:38:59:d0:00:1a:57:70:bd:f7:85:fa:3d:5b:4a:
9d:50:5b:c2:0c:18:7c:f7:00:68:d1:53:32:4a:16:
81:cf:87:05:8e:25:2d:38:38:e2:d3:4c:ca:40:f5:
61:a8:9b:7d:bb:f9:7a:66:06:6f:49:2c:fe:6d:30:
4b:b2:11:5e:d2:ed:ab:0a:c1:ff:30:cb:d8:5c:e8:
e3:fa:c1:e6:74:1f:d4:91:a2:0b:27:5b:85:b9:64:
c2:d8:aa:50:2c:94:36:84:e7:ec:44:a3:f4:b9:39:
49:00:43:f9:bf:e4:10:0f:a5:d5:ff:94:3a:30:f4:
77:ff:74:0e:95:77:55:49:69:58:ee:01:03:73:58:
02:1b:ed:d0:9e:da:6f:07:93:ca:b0:3a:9f:47:2a:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3C:C9:C6:72:69:FD:AA:4D:0D:43:01:65:00:D0:2E:85:09:0F:C5
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a7:d7:89:99:bd:ba:e7:49:56:53:ac:a7:5c:c8:44:28:8d:
f5:19:91:1a:58:37:12:1b:84:86:d0:d1:0c:a3:eb:c9:28:07:
15:55:68:95:6d:bc:1f:75:25:8b:75:80:2c:6a:c0:f5:ee:04:
93:77:b0:cf:bd:cb:d4:c6:85:d8:15:60:1d:eb:df:d3:5a:8f:
9f:f5:08:cc:dc:54:fc:a5:d6:69:4b:40:1b:89:82:1d:b2:65:
d8:55:7c:24:18:83:29:5f:10:71:16:ff:ce:2e:5c:0d:58:16:
66:f5:a9:cf:86:8f:48:bb:51:cf:10:83:05:a5:e2:02:19:86:
7e:28:56:8f:eb:ee:df:2b:45:d4:17:fe:41:65:18:14:62:48:
7a:5f:fe:c4:a4:df:03:fe:7d:52:9b:a4:35:25:3c:8f:b6:67:
93:1a:2f:97:44:48:58:85:dd:c5:0d:80:70:85:6d:ed:b3:14:
18:1a:1f:04:f6:b7:4d:c6:8e:de:63:ff:57:2c:a1:5f:25:6e:
be:51:73:d4:57:46:5d:c2:0e:dc:81:2c:1b:e4:9d:10:66:9d:
5a:b6:67:f1:0c:d9:c8:3b:66:09:d4:24:9c:2f:18:3c:76:ae:
16:33:68:62:c0:e7:3f:ee:85:e4:2c:15:59:9e:ed:49:d4:28:
5d:7c:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:01 2025 by rpki-client