Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File: c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier: FM0Slg0T8DGKMMA14N2hTJ26qC9puX+VFA7RSE2w55w=
Subject key identifier: 18:D3:B4:68:76:79:82:5B:BF:F5:97:DC:F0:21:CD:EC:08:04:CD:2A
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial: 019A70A4FF510AC43A8A52EA810F3972778B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:52 +0000
Manifest this update: Tue 11 Nov 2025 02:00:52 +0000
Manifest next update: Wed 12 Nov 2025 02:00:52 +0000
Files and hashes: 1: H57NiATge4ZhmPBN_965_8VMs0k.roa (hash: 0TYVpss41AxvRBijLSvUxSXE2COMSD4Rg3g/0pWujAE=)
2: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: E5poz45rQrqd2E7TpsPVPyVhgueaHyZDaMNat1dLYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:ff:51:0a:c4:3a:8a:52:ea:81:0f:39:72:77:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Validity
Not Before: Nov 11 02:00:52 2025 GMT
Not After : Nov 12 02:00:52 2025 GMT
Subject: CN=18d3b4687679825bbff597dcf021cdec0804cd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:8b:68:1d:aa:21:0d:b3:4d:5a:fd:76:57:
c9:ee:b7:5b:53:35:4f:8c:dd:c5:5e:e6:50:fc:e8:
87:0e:83:76:2a:59:88:7a:50:d5:b8:ec:f8:25:75:
3b:a4:a8:45:fe:53:1e:74:45:29:e3:28:1f:d1:14:
c8:df:ae:65:5d:83:61:5c:f5:a2:bd:1e:d1:c9:2c:
0d:41:ea:7f:11:72:61:c6:b5:92:1e:d8:7d:7f:fc:
22:6c:ea:56:d8:c7:fc:54:dc:76:43:c2:f3:8f:00:
ac:32:99:dd:26:23:71:12:d4:17:80:44:a8:23:52:
46:d7:b6:04:22:73:59:a9:3b:0f:e7:d6:e7:19:f1:
f9:2b:a6:26:91:86:0a:98:78:d0:c7:fd:a4:0f:e0:
9c:20:fd:4d:91:90:b2:5e:5b:40:61:b6:0f:e5:33:
9e:56:2f:ab:b0:a7:d8:f3:49:06:dd:8d:b0:13:1e:
2c:dd:c0:fb:c5:68:38:d6:f1:20:b7:88:62:05:3e:
f4:e5:44:4c:a4:4f:cc:eb:30:15:43:21:4f:1d:38:
11:32:01:ae:09:d8:03:f9:fa:28:31:eb:6d:e2:1a:
e3:09:81:a6:ea:90:5f:d3:58:b9:88:fb:78:31:98:
62:dc:fa:3c:19:39:5c:1e:9f:38:48:21:ce:bd:52:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:B4:68:76:79:82:5B:BF:F5:97:DC:F0:21:CD:EC:08:04:CD:2A
X509v3 Authority Key Identifier:
keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:69:e8:1f:20:70:60:a8:76:55:7b:9e:ba:fd:ef:cf:64:a5:
d8:0f:95:17:7f:d5:40:28:95:03:a0:be:d8:b7:1f:0c:4c:01:
91:b0:65:71:99:aa:b4:bd:e3:0e:1a:ac:4c:a9:4c:24:34:54:
db:fd:aa:5d:d7:2d:38:4b:3b:74:fe:6d:9c:f0:db:d7:3e:51:
66:84:8d:63:f6:47:8b:77:96:e4:64:33:21:9a:9a:57:c7:60:
e1:0e:bc:2a:6b:4c:af:52:c3:33:99:cb:73:71:07:66:f4:72:
a1:54:2e:1d:25:8a:c7:50:21:d0:a6:5e:3e:02:aa:b6:db:55:
3c:3e:f9:5f:12:b2:3d:75:71:15:8d:a1:a4:04:1f:c0:13:aa:
31:55:c7:b4:0d:2d:d4:16:a3:98:e7:69:91:3c:da:a7:af:83:
68:38:84:8a:16:5f:03:7d:a0:d7:4f:c7:e6:18:c3:74:87:a7:
91:38:5a:ac:c2:80:f4:ef:84:ef:33:cf:c9:2f:4d:ef:88:32:
8f:d6:7a:4e:08:4a:dc:5a:3d:b9:1a:97:38:a8:66:88:92:c4:
a3:cf:34:5c:f2:7a:7d:17:6d:2d:2b:98:32:56:7d:ef:45:13:
9b:ad:a9:bc:a1:fc:75:17:d0:94:8a:cb:c7:31:12:c1:f4:d2:
13:4f:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:01 2025 by rpki-client