Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File: ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier: r6Q9U62Ee20qVHDc0Hpy9FA/OxyP9M4okAInxElVkRw=
Subject key identifier: CE:97:E8:D6:30:BE:1F:1B:66:57:8A:2D:70:B7:14:6B:E3:A7:E7:63
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 019A725CCE366677DC78E6F009DE85AFD898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: Lq2Qv74YO0YoTzzSwitScdmrRjRamSIoNsP6lVrVgmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ce:36:66:77:dc:78:e6:f0:09:de:85:af:d8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=ce97e8d630be1f1b66578a2d70b7146be3a7e763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:43:6c:88:5c:2f:92:3e:c1:ae:d7:1c:ed:
ba:c3:38:8d:5a:ba:6c:8e:f6:4a:c6:e3:07:b8:d3:
96:3d:ff:c0:b4:ac:47:db:90:9e:2e:84:35:65:bb:
66:97:da:57:2f:e6:0e:a4:89:6f:b5:d3:3f:f1:38:
49:a5:14:f1:a1:8a:09:95:ef:e9:e1:69:fe:ad:88:
44:96:56:c7:16:a1:82:0e:dd:79:84:ce:1d:ec:9f:
a0:d5:37:81:a0:1b:e2:30:e3:56:d3:a1:42:19:a3:
c0:ba:7f:36:d2:dc:6e:d4:5a:c4:51:d6:f0:78:53:
eb:bf:80:77:c1:dc:e5:82:49:14:eb:35:2d:d6:ba:
2d:e8:f8:88:fd:a2:f1:c3:7c:bd:01:99:9f:6e:51:
41:c6:fe:e2:03:dc:d1:57:8e:e9:f9:e1:8b:48:b3:
b8:75:2b:d3:34:99:26:cd:e4:6d:e1:55:df:0f:a9:
37:91:e1:67:8d:6c:b0:c8:62:5a:8a:0f:ff:ad:db:
01:a2:c6:7a:e6:63:38:3d:50:ff:aa:66:27:55:33:
c1:e6:58:ef:14:e0:ca:29:84:d4:70:7b:a8:31:6f:
78:5b:50:a3:be:87:09:35:bd:86:7e:37:32:5f:1a:
fe:60:fb:5c:95:66:88:89:ac:a9:83:48:28:11:9b:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:97:E8:D6:30:BE:1F:1B:66:57:8A:2D:70:B7:14:6B:E3:A7:E7:63
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:29:f6:a7:db:8e:e5:0c:a4:72:e5:0a:1b:cd:99:9b:f1:c4:
ec:4c:46:a0:4f:a0:d5:1e:57:69:b6:54:ae:3e:bd:a1:72:52:
54:a4:79:e9:09:2c:9b:95:fb:6e:ab:e7:db:9b:24:d6:73:02:
76:42:3f:5b:29:2a:9e:87:2a:33:cc:75:63:e3:49:fc:a6:23:
80:72:4d:bd:37:a7:d2:cb:3a:5a:17:e6:05:5f:f9:2f:64:a3:
2f:40:9b:6c:0e:63:f9:81:2a:e7:01:eb:e7:37:3d:99:4c:76:
ec:9b:a7:fb:95:87:2c:21:b0:d1:02:3c:35:70:8a:27:5e:2c:
51:2b:c7:9f:12:e6:2a:9d:51:e1:63:58:59:f6:2b:ca:fd:41:
57:6e:e0:10:e8:01:8a:b9:8d:29:41:a6:28:6b:a5:f6:2d:b7:
ec:df:78:f5:1a:1f:16:41:9e:33:7c:6b:37:89:b8:dd:dd:40:
02:de:0a:94:2e:23:34:e2:76:13:af:ac:3b:6a:6e:c4:c8:39:
c8:ac:07:bf:1c:1c:90:dc:d8:9a:f1:23:41:80:69:d1:8e:4e:
91:56:3b:17:2c:18:b0:ce:eb:22:74:25:e9:02:ca:92:9f:07:
26:10:67:e9:71:f9:67:61:49:a1:4c:83:7e:72:5a:80:6f:1c:
0a:b3:f3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:27 2025 by rpki-client