Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: ovl5JjwoIoDVJFkH/zP97HxJj7YID2qcmNW30GFlpP0=
Subject key identifier: A6:FB:A5:75:9F:FE:97:B1:94:F8:EB:BE:AC:0E:42:DF:30:74:A0:30
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 019A7226711E053DFDFA28F73A52D075F71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: VUNPCVBI+27xARdNl18dgiDKtR+wC003EFm/3n4G7mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:71:1e:05:3d:fd:fa:28:f7:3a:52:d0:75:f7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=a6fba5759ffe97b194f8ebbeac0e42df3074a030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:6d:6d:ff:48:c8:4a:66:bd:9d:41:41:9f:
b7:e6:da:87:64:d0:55:68:5c:89:e1:3d:07:1d:a1:
c7:ba:0e:e9:5f:55:3e:7f:02:31:28:18:01:31:5e:
28:52:3a:fd:c2:50:d2:d8:d6:9a:97:6a:7d:1b:69:
47:c1:1a:fa:17:c4:31:e3:e4:5f:9b:48:6f:f8:bf:
4a:e8:d2:10:b4:2f:7e:fa:35:40:60:45:9e:e2:7c:
db:61:6b:ef:8e:3d:19:8b:70:25:90:70:14:c0:a2:
c0:60:9d:d7:7d:73:63:b8:a9:a0:11:fb:12:a1:1e:
a7:d1:01:59:ff:fa:78:e7:56:aa:7f:24:1c:76:32:
38:88:1b:8a:b9:38:61:51:3b:4e:03:18:a8:87:9b:
8e:99:12:cf:fa:87:8d:55:a3:5c:5b:3b:a2:38:52:
4d:48:f9:1b:58:bb:ec:dc:77:12:35:7b:14:43:6d:
fe:1b:33:4c:f4:e9:58:f5:ea:bf:b3:95:cb:ca:cf:
3d:a3:77:6a:8d:a0:a7:66:43:b8:d1:d6:f9:58:2a:
d7:68:03:17:d5:fc:ea:0a:82:a8:7c:2b:47:83:9d:
35:6e:63:2e:9e:3c:12:d9:bc:c3:78:4e:2f:88:e8:
e5:50:7b:9b:11:73:11:77:12:44:3b:93:e1:5c:f7:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FB:A5:75:9F:FE:97:B1:94:F8:EB:BE:AC:0E:42:DF:30:74:A0:30
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b2:33:2c:0e:22:7b:5f:3a:17:57:f4:61:1a:6f:4d:ab:b7:
7c:b8:79:03:e0:5d:a5:6b:8d:97:c5:23:41:75:01:6f:0c:b7:
61:49:44:cf:56:28:f5:c4:5e:40:6f:10:96:b9:35:77:4a:04:
94:23:b7:b0:b6:b7:f2:03:88:38:fc:30:a5:14:e5:35:79:20:
7d:d4:fc:86:56:ce:50:34:9a:36:04:76:05:6f:ed:73:6f:f6:
a6:b3:05:2b:9a:4b:f4:47:5c:96:41:97:11:a1:e8:dc:4b:d7:
2e:47:f7:42:50:c2:a5:4a:2d:32:d2:e2:eb:34:35:8c:a8:f2:
88:c8:56:53:80:d5:39:0c:cd:4f:e9:35:3a:21:d0:da:bf:33:
33:b5:b7:e7:97:85:94:3f:4c:9e:03:88:42:fa:49:41:9c:d8:
21:01:8c:a7:ec:7c:05:77:25:6f:eb:04:b5:54:63:3b:5f:37:
2b:5f:04:8d:7a:7b:c4:42:5f:3c:07:59:4c:57:fa:6d:a8:4b:
da:bc:34:42:dc:3d:ac:c0:41:aa:f6:9b:3a:a1:9f:70:66:e8:
87:4a:2a:03:82:65:76:8f:94:aa:c6:b4:c8:e7:e2:33:88:50:
51:ca:67:cf:5b:f9:6d:a9:80:e9:b4:5c:8b:43:03:5a:3c:e1:
df:d2:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:57 2025 by rpki-client