Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: 92dnJ4CImPYLH0ND1xURgczEzi0Am8SggDX2yQ56Kqg=
Subject key identifier: 6B:1B:45:51:18:AA:65:B7:FF:CB:F4:85:21:99:F4:AB:F4:04:B2:E9
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 019A72CA1F124B02A8928A469A790D16FA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:00:40 +0000
Manifest this update: Tue 11 Nov 2025 12:00:40 +0000
Manifest next update: Wed 12 Nov 2025 12:00:40 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: JXpg3FxMni2s6o3mp2rDyAahhEam63WfMVY3BbB+6Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1f:12:4b:02:a8:92:8a:46:9a:79:0d:16:fa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Nov 11 12:00:40 2025 GMT
Not After : Nov 12 12:00:40 2025 GMT
Subject: CN=6b1b455118aa65b7ffcbf4852199f4abf404b2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:a3:78:09:22:d9:53:e7:81:27:89:8f:d3:
96:6f:23:f7:20:e8:dd:01:86:fa:c2:df:35:e9:e0:
0e:d7:d4:42:bc:8f:40:66:7a:be:8c:9d:ad:34:3b:
c8:94:70:93:7d:f6:ef:03:b0:23:b3:43:54:ad:bf:
e3:c4:ac:83:2c:79:2c:23:47:51:98:a0:16:c8:55:
ef:18:30:e4:e7:5d:5f:44:a2:98:aa:72:23:b9:70:
ea:d8:4d:f5:b1:39:06:71:97:6e:93:43:b8:f6:4f:
8f:af:cb:1f:56:0c:31:04:52:27:00:70:51:f2:c1:
41:d1:f1:0f:fc:a3:ba:ae:0e:eb:9d:ca:44:fc:29:
4b:72:b0:41:e7:67:c7:c1:09:02:d9:44:10:2d:d1:
5b:14:79:48:62:13:6a:d4:0e:ad:60:e1:d1:48:ef:
07:81:03:d1:86:55:08:be:83:e2:7a:ce:66:65:b8:
0a:6f:66:d5:b3:ae:5c:bb:bc:a2:b8:d5:89:5c:fd:
a7:0f:22:08:49:64:78:a6:ca:4a:4d:d9:a6:d5:f0:
42:98:56:d0:58:26:bb:33:fb:39:b4:82:a3:66:72:
84:00:35:f1:91:df:1f:82:0c:24:db:3e:3f:60:cc:
2b:73:f6:6a:6d:72:15:30:e9:26:9c:6b:b8:b6:e1:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1B:45:51:18:AA:65:B7:FF:CB:F4:85:21:99:F4:AB:F4:04:B2:E9
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e8:fb:3d:f6:9f:ca:b0:a2:6a:b5:d3:b0:d5:1a:0b:0a:f6:
c8:ad:c3:fa:9c:31:73:3f:f3:c6:80:36:03:32:5b:ff:2e:20:
6c:8b:cb:ac:ad:32:2f:2a:0d:fe:79:ca:57:1a:cb:a8:90:24:
74:45:ba:4f:1f:54:4e:07:6b:d5:85:df:c5:0d:f8:b3:6b:bf:
62:a1:29:df:a6:27:7e:6d:df:0d:1f:75:d0:ee:8f:35:f4:c6:
6a:42:7d:3f:65:30:30:1e:b6:6a:f8:8f:63:43:2c:a4:50:ab:
1e:2b:20:c8:17:9e:d7:7f:3f:ce:24:0a:ba:98:25:6c:65:14:
35:d0:94:dc:d6:7f:ac:bc:fe:73:29:17:62:e1:f0:c9:f0:d5:
c6:d0:8e:ce:a6:7a:0a:8b:f3:13:eb:4e:70:e9:80:1c:58:7a:
41:19:39:6b:c3:e5:1a:a2:84:75:36:70:ef:20:ca:a6:98:81:
0c:49:c1:a6:ff:a5:1d:a9:b0:24:55:b1:90:76:8b:5e:4f:16:
6b:b7:ea:91:ba:86:f3:4c:e8:4a:a1:4a:fb:6f:d6:2f:70:a7:
86:9a:95:3f:4d:f6:5a:a7:b9:1f:79:34:d0:d4:33:b1:f6:6d:
59:24:8d:94:28:12:04:5c:c9:d2:b8:14:d8:cd:1e:2e:55:5c:
03:57:1f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:15 2025 by rpki-client