Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: jGZHsvzyRe8OFuZh5WHqZWw+m+rHcA71MnF4vokm33M=
Subject key identifier: B6:97:33:21:09:C0:A0:15:59:17:2A:59:99:03:B4:98:DF:C9:5A:E4
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 019A725C4F83E5FE819764BB245414469EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: F8
Signing time: Tue 11 Nov 2025 10:00:43 +0000
Manifest this update: Tue 11 Nov 2025 10:00:43 +0000
Manifest next update: Wed 12 Nov 2025 10:00:43 +0000
Files and hashes: 1: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: rYCWZg8wJ01MUM2CPHN5iSyml8VUO3ImHQvSGsr0ri8=)
2: tv0ukI6khIAMOhIHQUwhybvajH8.roa (hash: 15K34MSiCF97LiSsF0K1zSiL3spXFwrQsFzvbUDfnUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4f:83:e5:fe:81:97:64:bb:24:54:14:46:9e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Nov 11 10:00:43 2025 GMT
Not After : Nov 12 10:00:43 2025 GMT
Subject: CN=b697332109c0a01559172a599903b498dfc95ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:46:83:b0:15:1b:c2:fe:d2:bf:13:38:84:
95:c2:f0:5e:f8:55:26:11:89:d8:f6:69:23:d8:d3:
29:21:7a:62:98:3d:03:72:bd:c3:3c:70:25:be:ce:
b9:0d:fc:03:83:0e:41:cb:34:01:2f:c5:52:0b:48:
db:50:db:d9:57:3f:7a:c7:3d:72:47:5d:ec:71:c5:
ce:5d:ea:4e:91:80:39:0f:59:dc:ff:39:e3:bb:bf:
5a:d3:31:53:d6:e3:29:9c:13:56:da:57:57:3b:31:
16:60:6b:29:35:7c:e5:ee:2d:b0:f6:45:e3:5c:51:
71:03:0c:ed:31:00:9d:2b:c9:4a:8a:37:c4:bb:1e:
ad:99:c5:c7:b4:19:78:c9:6b:5f:69:35:66:1b:a4:
91:a8:66:90:ef:a0:59:e6:54:83:4e:af:ae:61:2a:
fd:5b:f1:1c:09:f9:4f:15:d6:fb:c7:04:c4:78:93:
cb:42:b6:e7:e3:a4:13:4b:c7:08:6b:72:a3:8b:cb:
5e:7d:79:b8:5d:d5:54:fc:76:b3:89:1c:84:2e:73:
1d:33:c7:a1:62:d0:52:81:55:8c:8f:ec:33:f9:e1:
e6:13:0b:a0:42:5f:e7:ac:db:5c:7e:09:3d:dd:55:
f3:ab:bc:6f:e0:ae:ca:e5:3a:bc:c0:71:7e:f6:8a:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:97:33:21:09:C0:A0:15:59:17:2A:59:99:03:B4:98:DF:C9:5A:E4
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:79:61:42:46:6d:b2:b6:d1:b8:45:20:1f:d3:90:31:c0:bb:
d4:5c:98:7c:fe:3b:21:1a:ad:70:9a:93:f4:7e:c8:8f:9e:61:
e2:32:29:00:29:5c:a2:80:cd:c3:5f:0c:b0:46:ef:46:28:d4:
d5:21:3e:b4:04:88:cb:23:e2:d7:5d:9e:ec:b2:0d:e4:6f:05:
f9:e5:99:8a:5b:30:f4:05:36:d6:47:a8:e0:aa:4d:1a:89:0d:
f5:e6:ab:43:72:7e:7b:f2:0a:0b:9c:9a:47:d9:79:37:9f:89:
40:ed:2e:7c:a5:93:f1:aa:12:e9:70:4e:1c:f4:09:aa:ca:db:
1d:b1:9b:4e:5f:57:32:17:ac:9e:57:f0:a6:db:5b:95:f9:d9:
d8:d1:1d:52:ca:f7:b0:75:89:1e:70:0e:70:49:e6:8a:ec:fd:
c2:4e:63:7b:81:b4:b1:7c:e9:8c:f5:12:11:ce:91:40:c7:51:
57:2e:24:58:27:84:2f:d9:41:e4:0a:75:f5:a0:64:56:9b:52:
f3:c3:eb:56:79:f8:a2:bc:df:ec:d2:f3:aa:e3:c6:c7:12:b3:
93:23:a0:bb:cd:9f:a5:9e:b0:28:48:74:1b:22:53:8a:13:dd:
60:ed:e0:35:8d:c1:1a:76:50:ca:74:cb:89:23:87:f7:4e:06:
59:c5:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:52 2025 by rpki-client