Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: zFF7Pel2NbedgH/AAWPSkcaaogJJq/t9kQAbS6FlBxw=
Subject key identifier: B6:9B:30:A5:84:B8:D8:1B:F6:75:E7:8D:78:3A:DB:48:75:12:23:AB
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 019A71B983EE4C963D743711DF05D197EB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:54 +0000
Manifest this update: Tue 11 Nov 2025 07:02:54 +0000
Manifest next update: Wed 12 Nov 2025 07:02:54 +0000
Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: DC09TZ+H84xFdL1LuORJ+Du0FsLgGSmD6hRjeOpfLBM=)
2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:83:ee:4c:96:3d:74:37:11:df:05:d1:97:eb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Nov 11 07:02:54 2025 GMT
Not After : Nov 12 07:02:54 2025 GMT
Subject: CN=b69b30a584b8d81bf675e78d783adb48751223ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:25:a0:77:8a:cf:b9:b7:fa:51:b5:3b:cd:
6e:98:1c:44:11:40:d3:8b:b7:57:06:77:63:6f:6c:
cd:a5:bb:ac:a7:6c:9d:29:93:a6:a5:2d:91:ae:42:
c3:2b:3a:4b:5a:1d:f9:76:18:5a:4d:e0:eb:db:3e:
c8:40:4a:f2:df:7a:c8:1f:c5:d3:78:7c:73:60:5e:
94:31:04:f6:dd:a6:8f:80:2b:9a:43:5f:44:97:1f:
33:79:e9:fe:e3:3b:6d:38:03:3c:af:03:bc:c7:a1:
27:fb:9e:20:d2:d4:f1:7e:85:55:0f:15:aa:c5:11:
f2:d6:26:ea:7a:c4:af:f5:34:e6:b5:24:97:16:1a:
35:10:82:84:6c:be:3f:5e:ff:33:47:d2:ba:1f:c1:
96:7c:b3:af:03:1b:1f:cd:0e:76:af:0f:d8:7e:8f:
7e:b9:2f:2b:f6:b0:11:48:6e:a1:48:34:94:c4:9b:
e6:9f:1a:6c:ee:19:a2:6c:5b:04:e1:58:59:d1:08:
34:48:42:9d:47:e6:3a:67:49:bf:0f:9e:aa:80:6b:
4a:78:64:e5:92:4c:dd:4c:d8:54:05:3f:55:0b:30:
e0:d6:8e:54:ad:c3:fe:f4:06:bd:52:d4:fe:68:81:
d2:a4:27:04:84:38:89:6f:e9:6e:a2:e5:8d:54:e7:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9B:30:A5:84:B8:D8:1B:F6:75:E7:8D:78:3A:DB:48:75:12:23:AB
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d3:e7:9c:8f:11:c0:a4:e7:76:7e:ef:6f:db:41:a9:a7:0b:
77:0f:e5:43:16:a8:68:26:5f:60:55:9d:c7:20:1e:bb:8e:72:
c8:ea:19:be:9e:2b:37:3b:18:fb:17:50:12:2b:1a:3e:04:27:
ce:5a:85:64:84:25:c2:ea:f9:8f:1f:b7:31:29:97:a9:df:db:
08:8f:71:67:d5:40:e9:b9:a8:13:8c:9e:2c:e3:4c:e3:e0:49:
62:7e:0f:91:79:20:f8:b4:46:be:70:d3:31:da:b9:c5:06:50:
ee:e9:9d:62:97:35:66:5b:c3:dd:2a:51:42:27:ea:2b:18:59:
5a:84:6d:a2:90:a3:27:d3:60:40:e3:89:45:9f:d0:b9:a8:31:
24:dc:25:0f:61:36:26:60:d6:13:59:b3:9d:35:4f:2e:4c:d2:
b0:53:ca:2f:e4:bf:a8:b9:a9:eb:f2:ee:c7:1e:ed:6f:6e:91:
07:36:71:1c:ea:97:e2:12:8e:36:08:9d:4a:82:87:12:e9:14:
c9:bc:20:1a:e0:c6:ea:e3:1f:02:6a:c4:d1:9c:6f:fd:11:f2:
f8:f6:e9:88:dd:3b:98:f5:4c:11:c2:5b:bd:8f:ac:ac:bd:90:
e6:a1:b0:91:81:72:6d:d1:ad:af:30:24:bd:96:bb:28:ff:d2:
9b:9e:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:48 2025 by rpki-client