Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: neHJ0Mdh0fgqPXVomYhd+tEaatJ1qqyqWw5dwmHbolA=
Subject key identifier: 61:2E:EC:0B:BA:6C:E4:71:E9:F4:2A:EC:06:7B:65:8C:1C:B7:86:E2
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 019A7293A24B70EE3FBEBD27D0D6B04529E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:01:09 +0000
Manifest this update: Tue 11 Nov 2025 11:01:09 +0000
Manifest next update: Wed 12 Nov 2025 11:01:09 +0000
Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: pTHHLlCOwHSHfMKz1FTfoKf9sE/oKNthNesY1makqkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a2:4b:70:ee:3f:be:bd:27:d0:d6:b0:45:29:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Nov 11 11:01:09 2025 GMT
Not After : Nov 12 11:01:09 2025 GMT
Subject: CN=612eec0bba6ce471e9f42aec067b658c1cb786e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:d9:69:fa:8d:27:d0:5f:e4:85:47:44:c0:
2e:86:17:ff:24:00:c1:36:be:31:85:c7:cc:13:52:
17:e7:ad:18:67:8f:4a:4b:98:ac:88:72:09:e0:a6:
34:de:35:62:3a:12:2a:3e:4b:86:3d:6c:f3:86:c1:
3c:0f:52:a4:a8:ff:e8:d2:1f:67:04:69:92:7d:5b:
e5:6f:1c:d2:2c:df:b1:7c:cf:58:a7:70:1e:e2:30:
c6:c5:6a:ac:b5:96:08:ce:8c:8a:d9:dd:a0:36:0b:
ea:26:6f:9b:e6:d7:df:29:96:8e:34:28:cc:14:3b:
ce:a4:b3:c2:f6:f8:ae:60:9d:a3:f4:1d:61:cc:ce:
ea:5c:31:19:9a:d8:b2:ad:52:32:75:7d:bb:de:62:
dc:dd:a9:c8:78:85:f0:4c:d8:fb:2d:6e:96:c1:42:
20:31:6f:0c:1d:df:37:11:9a:8f:c9:d3:2e:d7:5e:
cb:c3:d8:10:96:a9:b4:44:9e:1e:e3:e3:6a:cf:77:
36:6f:76:5e:c3:25:06:3b:03:bd:b2:fa:c7:d2:e6:
52:61:82:94:bd:d9:c3:00:c4:ee:3b:a4:17:b9:11:
40:a9:f5:a1:3e:7a:52:3a:87:41:4d:ec:1c:09:b8:
14:b1:34:f6:ae:15:1f:72:56:37:47:54:44:8e:04:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2E:EC:0B:BA:6C:E4:71:E9:F4:2A:EC:06:7B:65:8C:1C:B7:86:E2
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:32:9e:54:41:91:75:b6:5a:60:3b:89:fb:20:0e:86:58:5b:
a7:4d:31:80:ac:b6:c9:4f:5c:33:9b:15:de:b1:a3:e9:c3:a4:
79:df:66:b6:80:c4:7f:84:ef:c8:ea:bc:65:8e:f7:37:be:ab:
3b:91:51:8e:9e:dc:55:f3:c9:b8:8c:d3:f6:18:c1:ef:e9:8f:
30:a4:a6:e7:41:be:8f:48:52:22:4b:da:e2:f4:73:21:11:4a:
f8:15:23:e2:ce:cf:9b:cc:b5:c2:70:ae:76:c1:52:63:a9:b7:
ad:07:17:19:95:79:38:9f:88:8b:66:65:81:fb:83:6f:03:23:
b2:fe:e4:54:0c:f5:79:1a:7f:b2:02:f5:f4:44:f9:77:e1:98:
11:ba:c7:c1:05:85:75:75:fd:23:5f:f9:13:ea:e2:5e:c6:bd:
4a:c0:c3:21:57:ae:bd:47:0b:1d:68:a4:e8:c6:6b:48:d3:11:
ee:73:91:37:0c:eb:10:0a:cf:f0:79:2b:e8:7f:97:dd:72:78:
8d:5d:51:d8:30:19:c6:71:c7:b8:9f:39:e8:19:5e:41:de:2a:
60:94:ed:f8:14:ca:eb:37:e2:96:59:aa:42:b5:8e:7e:5d:22:
39:94:8c:46:d5:73:27:45:f6:59:5a:f8:2f:1f:70:3a:08:2b:
76:08:28:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:06 2025 by rpki-client