Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json)
Hash identifier: miq2ziimLaZSUkqeODbcOd3C6njoWvIf5JTezQ/nNTY=
Subject key identifier: 4B:15:0B:65:11:23:9D:61:CA:DE:22:C5:78:0A:9F:42:A7:2A:5E:57
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 019A72CA87C37CBC88979C81C6BFB7C3E3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 12:01:06 +0000
Manifest this update: Tue 11 Nov 2025 12:01:06 +0000
Manifest next update: Wed 12 Nov 2025 12:01:06 +0000
Files and hashes: 1: 35bIez4DE4f8IctL5QEgdASB-4Y.roa (hash: TCPS2vFGt9j3BHs+mf2M0eQppw/ELA+Rm7h4Oyv00F8=)
2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: 2qzTE8eowjdfxbLSYH/7D4xHm3JqqKIS7XWi/UE2wcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:87:c3:7c:bc:88:97:9c:81:c6:bf:b7:c3:e3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Nov 11 12:01:06 2025 GMT
Not After : Nov 12 12:01:06 2025 GMT
Subject: CN=4b150b6511239d61cade22c5780a9f42a72a5e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:6d:37:d5:f4:f8:01:05:ff:76:a2:d1:d7:
b1:8f:df:d6:d1:45:9a:6f:5b:fc:98:87:39:cb:c0:
f1:d3:de:20:7d:7d:8c:93:d0:a0:b5:5a:07:41:62:
d2:bc:17:c9:30:c1:49:88:f6:bf:8e:5b:af:e5:c5:
22:c9:4b:7c:7c:48:c8:e6:eb:65:6c:62:e7:9a:69:
61:19:b0:be:8a:f2:24:de:ae:1f:0e:d2:8e:8b:77:
9c:0d:82:98:05:1d:23:67:47:1a:11:d9:37:08:4c:
89:97:c1:a6:fb:96:35:15:ee:0d:86:e4:c6:5d:64:
2c:12:b0:ba:a7:99:fd:32:c0:0b:e5:77:f7:da:12:
e7:ee:64:57:f8:f3:d0:d9:7b:df:81:42:58:0f:0f:
14:57:78:5d:55:aa:78:8d:5f:a2:70:8d:88:8f:60:
31:6f:dc:9e:16:5d:9d:78:11:f6:49:de:1c:fc:2e:
23:2b:42:78:32:c6:01:81:ca:b9:17:ed:53:eb:f9:
62:f7:f0:55:83:fa:5d:37:2f:7d:4c:09:b9:11:9c:
73:47:39:43:b0:94:32:62:8e:66:6f:e8:a7:05:02:
bd:94:35:28:43:9b:9f:88:60:f4:8f:97:48:a4:c8:
ac:41:07:7e:7b:c6:24:67:d0:ac:7a:b2:8f:8d:20:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:15:0B:65:11:23:9D:61:CA:DE:22:C5:78:0A:9F:42:A7:2A:5E:57
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b9:c8:f4:e2:14:17:f6:d6:d4:4f:55:84:90:bf:0b:a9:0a:
40:c4:e7:25:7d:77:e6:a9:19:62:06:d5:38:ea:d0:27:74:06:
c4:1f:a0:1d:08:2a:ac:64:3d:33:f7:ea:a5:56:7a:86:39:74:
c3:3e:30:dd:b8:6f:98:1e:93:c5:a9:f3:69:60:e6:ef:d1:e6:
98:a9:53:9c:3c:13:95:8b:72:85:ab:4c:bf:98:87:92:46:26:
1e:02:46:da:6e:1f:a4:1e:e1:0f:92:55:f6:ab:4b:83:6f:a3:
b1:06:16:ea:05:d1:6b:f2:ab:d6:d4:e6:42:35:7e:57:78:0b:
de:8f:9a:6c:be:03:d9:4a:f9:47:61:c0:fd:bc:07:6e:9c:b3:
43:05:a2:a6:d7:c7:b8:10:94:7c:1c:90:ac:95:b7:81:c9:03:
09:cf:f8:55:2a:ab:79:96:13:cc:01:7e:0b:00:52:5f:b7:b1:
fe:50:d8:78:23:68:8b:82:82:11:7d:53:9b:61:57:32:be:a4:
e7:1d:21:66:f8:43:c3:6f:f3:77:fc:17:9e:6d:ab:59:82:84:
51:41:85:b3:9a:e7:df:f3:4e:25:d6:a3:49:c2:23:c6:3c:a4:
c8:c4:60:c4:36:c4:23:7c:8a:1b:43:36:94:2c:7d:5d:b4:75:
55:03:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:47:01 2025 by rpki-client