Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: 7o5baA/XdO6M5hTlcCUxwnJLBSJeRFD+LGSo1dUPJys=
Subject key identifier: 9D:48:B5:E2:44:6B:80:C5:E6:92:E9:C7:E9:82:7C:2D:E3:E1:B8:38
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 019A72933A268126B5D8AEA44DAB4DDC4D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:42 +0000
Manifest this update: Tue 11 Nov 2025 11:00:42 +0000
Manifest next update: Wed 12 Nov 2025 11:00:42 +0000
Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: hAlNnbao89fOde5JpAYQV3gcjmuBpBOC8YZGBLMuPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3a:26:81:26:b5:d8:ae:a4:4d:ab:4d:dc:4d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Nov 11 11:00:42 2025 GMT
Not After : Nov 12 11:00:42 2025 GMT
Subject: CN=9d48b5e2446b80c5e692e9c7e9827c2de3e1b838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:d8:91:07:ce:cf:98:05:fa:78:1b:b5:c1:
94:5e:67:88:90:f4:85:e3:b3:52:73:de:89:97:0e:
c6:2c:52:af:97:42:aa:3b:4f:f8:d2:4e:48:04:ab:
ce:35:3c:5d:0c:56:b8:5d:a0:bb:31:21:a6:69:74:
05:3d:7d:5b:ee:0e:e3:eb:d6:02:aa:28:c5:e8:5f:
14:fb:f1:cd:20:a0:d9:ab:9f:d3:cb:23:7f:26:3a:
f5:65:9c:4e:14:85:83:f4:0c:5b:a7:7f:93:03:c4:
11:62:df:d7:6d:1c:4b:0f:c8:15:bd:2e:26:da:fa:
14:fe:95:42:35:74:4d:92:30:4e:7b:06:5e:54:02:
7a:d4:ea:e3:06:8f:bc:15:d8:50:8a:80:49:6b:3b:
b6:54:4c:52:62:0d:85:58:ae:2f:68:09:8a:7b:cb:
b1:9c:45:8d:1e:ef:54:04:18:3b:8f:54:da:e1:dd:
6b:97:d7:f1:07:45:ba:13:b7:e6:13:8b:0b:ac:f5:
c5:3c:45:e1:6e:ce:2c:14:40:fe:00:11:38:c6:d4:
7b:94:d9:9b:5f:ae:2e:ed:24:2c:fa:2d:a0:31:53:
b7:b7:9b:23:76:55:35:10:34:17:ec:09:1a:c1:dd:
61:ca:46:b5:b5:7f:89:a5:0a:a8:1d:b6:3f:fd:28:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:B5:E2:44:6B:80:C5:E6:92:E9:C7:E9:82:7C:2D:E3:E1:B8:38
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6a:78:97:41:df:9a:12:f2:67:18:ee:88:cb:a9:78:01:9b:
81:f0:f5:81:c8:19:99:72:83:5a:fe:49:cd:3e:83:1d:91:dc:
4a:18:f2:b9:cf:b1:eb:e1:cc:aa:eb:4d:d5:ba:dd:f1:d4:c9:
05:ea:7c:ed:2a:60:c7:a2:11:33:2f:35:46:be:8b:f8:34:8e:
f8:94:03:e3:93:2c:2d:c2:22:75:c4:b9:8e:5b:62:1c:e9:c4:
b4:fb:76:af:74:e2:64:64:5d:6a:63:a5:e6:73:af:ce:63:ed:
58:22:03:d0:7c:fb:07:fb:b9:09:7d:e6:f2:38:9a:ea:1f:fc:
0d:40:d1:d5:1b:dc:07:33:42:a4:40:cb:59:b5:88:05:e0:0b:
b8:68:f1:58:81:1d:4c:c3:65:8d:f8:14:39:bc:51:46:50:7b:
94:9b:4c:da:68:10:06:9c:69:0f:51:86:01:c5:ce:e8:2e:87:
b0:a5:2d:a4:a5:6c:ab:97:9e:36:6d:a1:b1:8c:9d:b9:bc:df:
d1:82:67:b8:3d:90:f5:87:cb:96:69:25:33:3d:95:73:b7:ff:
db:6f:0f:b8:15:d2:e6:22:43:c7:64:af:8a:44:2d:7e:82:7a:
52:6e:24:ee:97:f8:a1:6e:42:d2:e7:f8:b7:c8:6a:61:fd:17:
ab:da:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:38 2025 by rpki-client