Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier: GEgm95saOAYsD2vlNHNjgUKKVIo1JZG6ExoP1wPuRcQ=
Subject key identifier: DD:16:31:DC:9F:49:15:84:41:0B:F1:25:F6:00:90:15:FD:38:71:85
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial: 019A70A59219390570766AB3228DE61B77E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:01:30 +0000
Manifest this update: Tue 11 Nov 2025 02:01:30 +0000
Manifest next update: Wed 12 Nov 2025 02:01:30 +0000
Files and hashes: 1: LT0qB-gBAbq5frFGXTq1GqnXCfI.roa (hash: K2tXP/3iE8TclQjWefb7tiAmYpuF8VMrt60W/dO45lU=)
2: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: 47FwfPAP5B3E5KxwSyucoBnCPm6AsrhU6CZr2POtAVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:92:19:39:05:70:76:6a:b3:22:8d:e6:1b:77:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Validity
Not Before: Nov 11 02:01:30 2025 GMT
Not After : Nov 12 02:01:30 2025 GMT
Subject: CN=dd1631dc9f491584410bf125f6009015fd387185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:70:ed:2f:64:e2:23:70:62:71:82:55:7a:
d1:4d:d1:66:d5:57:5e:3e:39:7e:9f:d0:6e:2b:00:
9c:1b:c6:3a:a5:46:00:ea:a7:e4:87:bb:c0:80:1a:
6f:f0:d0:51:bb:25:f5:90:09:fe:0a:08:cb:7b:5d:
b4:3c:70:9f:7d:2c:65:6a:9a:83:0b:2f:f7:3e:24:
ad:22:dd:7f:a6:36:06:17:f3:00:c9:2c:e0:6b:cf:
06:77:19:ee:1a:9b:49:45:f4:50:cc:40:c2:49:c8:
e6:e0:6b:a4:ac:d3:e6:33:14:f6:f0:62:3b:60:99:
26:ea:85:4f:de:46:08:e4:c8:0f:2e:36:05:20:42:
2c:f7:17:21:f8:24:80:92:d0:72:e3:6d:42:30:7e:
8b:02:b0:0e:16:64:47:c0:72:e1:c1:32:e2:48:f4:
21:7d:e9:89:28:38:59:d1:8c:7f:10:ad:4e:ef:95:
17:d6:3a:34:64:72:d8:34:d4:66:dc:51:33:41:ac:
ef:d2:c0:f3:fb:d2:b9:7a:f4:0e:c3:8e:39:86:ff:
f3:d6:2e:d0:ea:29:b9:48:c6:81:44:de:b5:13:3c:
39:f0:be:fc:17:aa:9a:56:66:b2:99:bd:8f:66:37:
d4:8e:71:da:87:4c:6c:cd:aa:95:5b:c5:ef:d2:93:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:16:31:DC:9F:49:15:84:41:0B:F1:25:F6:00:90:15:FD:38:71:85
X509v3 Authority Key Identifier:
keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a1:0c:32:0e:f6:72:2a:5d:55:59:56:97:20:5d:10:21:4f:
42:2f:35:90:58:ab:95:10:77:ac:85:33:78:04:59:9f:a6:af:
a1:ff:6a:15:82:bb:eb:de:36:69:55:c7:ce:c4:bf:fc:23:d9:
b6:eb:d5:ea:b0:28:67:25:67:15:b9:4f:0d:df:98:3c:e4:58:
a4:0d:71:96:e0:a5:f4:76:73:ad:93:6c:05:b3:fb:8a:52:d6:
b6:d1:02:01:e3:1d:60:07:87:a3:c7:cf:b1:1a:21:5b:a1:65:
b9:1a:2f:bd:12:f8:b3:c9:b9:cf:95:b4:e2:94:98:58:82:10:
9d:66:68:fa:7f:c2:98:d0:cb:d8:e6:32:48:73:b4:be:13:5a:
cc:b1:33:52:34:fe:09:74:c2:bd:aa:8f:c4:79:7b:c6:28:26:
3a:06:9a:a4:f7:f4:4a:cd:df:ec:68:fe:a6:8a:5e:09:c3:e8:
ee:01:d3:66:e3:77:8f:4a:f9:8c:17:4b:f8:ce:2f:67:59:a9:
c3:3d:2a:6f:c7:75:34:e6:e9:76:f1:24:b8:43:78:1e:bf:c3:
b8:f5:38:ea:84:c9:08:11:9a:d5:c6:4f:f4:26:8c:c8:ec:03:
b2:86:db:63:4b:79:c1:f0:3b:cb:ea:f6:93:ce:4d:40:15:46:
ba:e3:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:23 2025 by rpki-client