Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: njXFXS1GygIgtRlowRIDmzulFiHRsslWHFJHnJKRcB4=
Subject key identifier: 40:09:A8:A9:F9:49:49:D8:E1:43:05:2E:AE:D0:1C:BD:3E:8A:43:A7
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 019A71EEDC82F42977C77612D253E5D3E1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: EZAZ0AXTxzysEEWibnww83+vkpx2/ksWT+LTeP74NAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:dc:82:f4:29:77:c7:76:12:d2:53:e5:d3:e1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=4009a8a9f94949d8e143052eaed01cbd3e8a43a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:44:28:e6:1b:9a:55:cb:c4:93:7c:0d:9a:
3c:ce:1e:72:07:db:9c:a1:81:9c:4f:9f:2f:67:0c:
ec:e5:65:6e:f9:21:1f:76:ff:bb:ff:28:17:02:fa:
41:a6:73:4b:f6:e6:bf:7a:0e:12:6e:8c:cf:e1:a1:
ab:64:31:cb:17:38:64:39:7e:59:fa:2e:ba:9f:5e:
50:d6:18:fa:e6:50:6a:b3:3d:82:01:ab:fe:26:93:
98:ac:41:c2:ed:21:25:67:b2:57:98:74:36:c7:8c:
80:6b:8e:d3:9e:1e:df:52:aa:9f:d6:b6:57:62:c0:
74:91:15:0d:d6:0e:1f:45:3e:fa:b3:c8:fd:0d:12:
53:ef:b4:b4:c5:5c:b0:7c:58:10:0a:a1:64:dd:73:
db:ac:72:8c:9e:61:5b:cd:78:fd:5e:86:b3:ea:c5:
ca:a3:ca:22:1c:51:0a:d8:05:a5:c8:d0:37:93:9f:
7a:ff:31:ab:57:c1:e9:6f:26:19:5f:29:7f:de:84:
d7:84:b4:f5:78:fa:c7:a4:ab:c6:25:39:bf:1f:d3:
99:5e:63:b2:65:e3:16:44:82:33:60:ca:a3:aa:92:
e6:76:32:42:e4:c3:33:29:38:4c:71:c8:c0:5d:8a:
d9:58:43:35:77:c6:94:97:cd:2d:5f:a7:4b:ba:8a:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:09:A8:A9:F9:49:49:D8:E1:43:05:2E:AE:D0:1C:BD:3E:8A:43:A7
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:05:84:80:95:51:09:57:5b:47:4e:f1:ec:cd:36:f1:1b:6c:
4e:1b:8c:86:59:f5:e6:7c:ab:0b:36:d6:95:b2:e7:71:71:a1:
25:1a:4e:bb:35:12:a8:eb:1f:96:94:84:1e:27:7d:f9:2d:38:
fe:a6:2e:6a:d0:bd:05:50:21:6a:32:72:22:f8:8b:1c:38:2a:
76:7f:d7:15:2d:12:d1:0c:98:e2:bd:16:32:89:37:f0:c2:69:
af:86:c1:15:71:42:0f:07:8c:d6:c3:92:17:ee:bc:35:4a:b8:
97:ef:dd:af:04:fe:18:86:4f:ec:e9:2d:27:c7:32:d2:e1:d5:
36:d9:95:04:bb:a9:d7:c7:10:8d:1c:93:72:55:83:99:eb:f7:
71:97:a5:14:4b:86:43:00:eb:ab:26:be:12:59:ff:c4:ce:ef:
c2:b6:09:9f:1b:fc:57:e7:61:0f:24:a2:22:bf:87:58:03:43:
9b:19:1b:04:36:03:91:bf:47:7b:bd:95:28:1e:d2:7e:fb:1f:
5c:04:6b:8c:c2:86:11:54:99:fb:c1:9e:6f:36:ca:53:db:6e:
76:a6:04:71:a1:ff:c0:1f:fd:2a:d3:3b:33:b3:19:7d:cb:17:
62:87:42:69:7a:32:64:4f:30:de:7c:1e:f8:a4:b9:47:20:31:
a1:97:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:07 2025 by rpki-client