Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: V/FHMX8TRvos8mS9UGs4lowuyPeC3hbdN7XlZmo7A1Y=
Subject key identifier: A9:D6:FC:D0:2A:C4:19:50:BB:93:C3:0E:02:31:40:3C:02:CF:C3:F3
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 019A71130097758BFAC28E3512E0FDBAEC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: u5nSR5kw0oFOMhpuL00cabuGwctJv6GpKzndoZKuX3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:00:97:75:8b:fa:c2:8e:35:12:e0:fd:ba:ec:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=a9d6fcd02ac41950bb93c30e0231403c02cfc3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:c2:52:cb:0c:15:71:5e:fd:28:fc:9e:3e:
5b:72:62:34:89:83:99:cd:34:04:31:99:6b:d6:2c:
7a:bb:5e:98:8a:87:68:56:6b:e1:84:2d:30:d1:62:
53:c5:b9:46:ff:48:10:76:a3:14:fa:d4:52:0a:2e:
20:26:69:51:0a:b8:bf:85:33:fc:c9:a4:aa:81:34:
be:1a:14:ec:3d:12:f4:00:6c:da:73:aa:63:57:5e:
29:7e:02:a4:dd:34:bd:26:30:4c:0a:c4:ee:a4:91:
a2:47:0a:3d:11:07:bf:40:cc:54:45:67:d1:a1:4c:
ce:79:8f:18:8d:dc:6c:68:80:ef:7a:91:16:18:33:
bf:e8:7e:15:ac:9b:54:14:7d:4e:68:7a:90:41:1e:
01:e3:eb:9c:cf:14:8a:4d:90:ac:ac:fd:8d:71:39:
14:f6:77:bb:d3:9b:9f:8e:3c:0b:a1:4b:c1:b0:71:
72:c4:5c:16:60:13:33:9c:70:8d:77:60:27:c4:c5:
2e:c0:96:01:ff:6c:d2:f4:b4:89:d5:8b:3e:7a:0c:
2e:a9:94:b9:92:93:19:ed:0c:8e:81:2d:ea:8f:59:
22:89:07:ad:d4:f2:40:eb:4a:04:6f:2e:a4:af:27:
7d:22:b1:99:12:e7:f7:9c:ae:b9:c0:b6:77:29:bc:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D6:FC:D0:2A:C4:19:50:BB:93:C3:0E:02:31:40:3C:02:CF:C3:F3
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:2b:9f:61:26:3f:14:6b:20:47:44:3b:63:61:6f:4e:74:
51:a8:af:82:17:5b:09:14:30:93:2f:98:88:ba:34:c8:4f:70:
59:ab:47:77:7b:48:ad:aa:e5:41:d3:c7:f1:2a:82:55:67:fb:
4f:1a:07:de:c4:23:18:52:02:fe:f7:18:f7:69:95:02:ea:bb:
64:89:11:49:98:b0:96:32:0f:0b:2e:4c:6f:98:4b:9a:6a:e1:
47:fb:76:0f:8f:4c:0a:49:3a:35:25:d0:5b:25:4d:cb:8e:4c:
2f:46:1d:89:9c:59:1f:4b:27:59:1b:96:a8:30:9b:d3:3a:ec:
c2:4e:bb:d9:e4:38:d6:35:78:46:82:2b:77:ef:fd:1e:6a:cf:
aa:a1:d5:4b:cc:d0:a7:8e:6e:5c:b9:a6:80:e9:c0:a4:81:1e:
c7:80:ea:4e:c8:9a:f2:7b:16:39:31:08:f0:94:cb:d2:fe:9b:
79:b2:c4:28:cd:47:bf:16:2f:c3:49:81:f9:4c:d1:51:68:26:
db:01:4c:cc:f0:50:33:61:30:29:48:8b:b8:85:37:c2:a5:99:
c2:d2:67:a8:80:9d:28:4f:42:28:14:37:0a:2f:dd:70:82:e4:
e7:01:52:f8:e8:30:e3:27:c9:81:e8:74:67:4a:57:25:12:e0:
31:42:4f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:40 2025 by rpki-client