Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: COAoUT0Q17S8xSL/uNf0cpziZzzPp/Pk43Z0fY4Qcm8=
Subject key identifier: EC:07:E9:03:F6:81:60:87:CA:98:8D:54:4D:55:89:E9:65:E1:FC:21
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 019A70DC0FF111556F46731AEA71030969D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 03:01:01 +0000
Manifest this update: Tue 11 Nov 2025 03:01:01 +0000
Manifest next update: Wed 12 Nov 2025 03:01:01 +0000
Files and hashes: 1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=)
2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: bOFjh7Xw0VNEP8IYtzuBoHmmhQKMoVXTPx65LbRVEVI=)
3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0f:f1:11:55:6f:46:73:1a:ea:71:03:09:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Nov 11 03:01:01 2025 GMT
Not After : Nov 12 03:01:01 2025 GMT
Subject: CN=ec07e903f6816087ca988d544d5589e965e1fc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:ad:c6:d1:c7:51:c4:24:87:ef:c5:3f:ef:
20:d6:d2:63:a9:f1:34:12:66:47:0d:b5:4f:16:c3:
c3:5e:48:8a:db:76:79:d9:8d:74:00:3a:d4:43:a1:
30:89:2e:e9:94:56:3a:0d:22:72:e4:5b:ab:51:e9:
2d:92:12:58:94:b7:f8:df:e9:66:c1:78:82:b5:07:
94:50:87:e2:c3:f0:71:32:1a:96:65:1c:dc:9e:40:
83:1d:0e:8d:b9:c2:c9:4e:d1:3e:cb:db:e6:f5:0e:
12:21:bf:3d:ee:22:d9:9d:4a:21:4b:1a:cf:9e:fb:
3f:37:1d:ae:b3:fa:88:d0:14:84:73:e5:63:16:9c:
e9:c5:c9:8a:f9:82:81:87:fa:9e:d0:c6:1e:7a:2d:
33:4b:86:09:75:96:a1:50:25:d7:25:c4:e1:a3:dd:
ce:9d:d1:d3:92:89:62:7f:50:4d:8e:6a:83:a3:07:
1d:3a:f1:8d:2a:53:31:12:84:c0:c0:34:c2:34:5a:
20:a4:51:c3:c9:51:30:f3:bc:45:2f:88:56:c5:e6:
6e:de:34:d6:1f:3a:63:bc:13:64:0b:d3:ac:5b:da:
52:cf:57:c0:67:4a:cc:12:76:e7:98:84:23:fc:92:
55:5d:df:35:f7:4b:c2:ba:66:c6:51:d8:ba:c6:f8:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:E9:03:F6:81:60:87:CA:98:8D:54:4D:55:89:E9:65:E1:FC:21
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:75:9e:8b:05:be:11:fa:4c:80:4d:0a:f8:0f:1b:9c:23:9a:
5e:09:20:72:4d:9a:38:d8:42:1e:8e:35:9f:73:ef:bc:4b:2c:
31:de:e9:10:3c:34:40:1e:ab:db:ca:83:f0:5b:c1:c9:4f:1e:
a7:df:d4:46:f8:d5:e3:26:56:80:cb:f2:8d:d6:a1:f4:d8:cb:
c3:96:63:df:58:a7:03:9f:ad:b0:cd:f2:31:f1:bb:25:e9:9a:
6b:e7:d4:f3:10:65:49:a4:ad:f9:0b:99:89:b2:82:c6:8c:c8:
ce:05:ee:aa:98:12:37:ad:29:30:10:16:6e:93:ec:4b:8d:7b:
07:8d:31:60:20:42:b3:27:f4:22:9f:f0:f2:d9:0f:bd:9e:a0:
f3:f7:96:85:99:e1:30:fd:d4:44:93:b6:c8:fc:6e:36:5f:47:
30:d5:18:f6:37:b2:a8:61:5d:c5:07:e9:fd:da:04:da:cd:5a:
91:2f:89:56:bf:e2:45:7d:37:61:a1:9b:40:b7:59:e8:1c:3a:
4c:cc:4f:b5:ed:c4:39:b1:a1:5b:d4:ca:a5:ca:7d:c0:10:54:
53:41:dd:63:a7:0d:f6:58:3b:47:cd:53:9d:4d:80:f1:6c:9e:
c4:ac:63:65:7a:7b:43:fe:02:30:6e:d8:42:90:31:32:e3:38:
5c:e6:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:47 2025 by rpki-client