Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: E+b7y2hMrl4LwHqZg62MxXP5kYdCYt7R4zq5MuRggz0=
Subject key identifier: D4:8F:44:34:6D:DF:6E:AD:EA:E4:4A:F3:9E:EB:70:A7:55:EC:83:EE
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019A22F751B13A033C7E8E252C093F331319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 0E6C
Signing time: Mon 27 Oct 2025 00:00:24 +0000
Manifest this update: Mon 27 Oct 2025 00:00:24 +0000
Manifest next update: Tue 28 Oct 2025 00:00:24 +0000
Files and hashes: 1: IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa (hash: NFuQufrafEIV/iOKny+LtVRYLA0EJDhZvV8121UO+Jg=)
2: eR5EevbZ-cAP0rVdhXMRAu6R2DU.roa (hash: MFuL2PsX4eqPDfqD1XxiSAvnb9qnnDDl40Z3XSXhTPs=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: r86U29Xpa1eNWBS/YbY1tDxKzKdPLAyixZT5a/XUwoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:51:b1:3a:03:3c:7e:8e:25:2c:09:3f:33:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Oct 27 00:00:24 2025 GMT
Not After : Oct 28 00:00:24 2025 GMT
Subject: CN=d48f44346ddf6eadeae44af39eeb70a755ec83ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:ef:10:9a:d9:b6:6e:3b:f4:93:2e:fe:11:
54:30:28:b2:35:8c:ff:ed:dc:fc:be:7a:30:d6:66:
c6:0d:ca:cd:22:21:01:70:b5:5f:78:cc:43:e3:4a:
78:a0:5a:5c:5c:37:ce:67:32:20:7a:c6:64:f7:28:
57:36:51:3d:45:c6:81:6e:46:26:2d:7d:1a:c6:cb:
87:07:91:61:df:d6:e1:c0:b9:3b:a1:04:85:c3:2b:
0a:d7:03:f7:fa:b9:f5:bd:bc:95:fe:01:ac:d5:65:
ed:bb:43:df:4a:4a:bd:2d:f8:ff:90:e5:4a:26:92:
ab:f7:7f:b8:19:32:5f:b3:bb:e8:50:f7:5c:66:33:
43:a6:58:a1:1e:93:69:25:40:b0:00:bc:07:c0:34:
4d:a2:2e:9a:7c:19:dd:31:e4:1f:26:8c:fe:7d:07:
c5:c6:4e:33:e4:76:18:c9:fd:4c:51:4b:25:6f:76:
19:15:cc:9e:81:d6:6a:80:63:4d:27:81:84:28:21:
18:04:b2:33:00:a3:74:4c:e5:11:38:21:81:3b:f7:
33:62:00:b5:3e:67:8c:07:7d:8e:2a:b7:65:67:42:
5e:ca:32:fb:ff:1c:d9:05:e6:26:22:0a:0d:d2:63:
af:ff:d2:06:7b:f9:27:df:e5:03:d1:f0:75:c6:b3:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8F:44:34:6D:DF:6E:AD:EA:E4:4A:F3:9E:EB:70:A7:55:EC:83:EE
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7c:7f:b0:73:96:da:70:3b:32:e8:0c:bb:24:ee:03:6d:20:
e6:30:be:9e:a8:5c:15:c8:49:ad:b5:1f:21:20:50:d3:fd:87:
57:42:ed:93:09:62:72:5d:8a:d1:72:08:a7:5f:82:73:5c:7c:
de:18:75:7d:89:24:ef:a2:5d:81:e9:14:85:7c:18:4c:17:36:
cd:56:e3:53:6a:e1:49:ec:fd:7a:b7:5b:3b:fa:db:97:1f:de:
8f:ba:a5:8e:c8:a0:7c:b5:dd:09:ed:62:a6:29:6b:fd:f7:ee:
bc:6c:9b:be:20:34:e3:96:f4:7a:43:01:82:12:a6:9b:2e:7f:
2c:62:b9:97:a7:45:1e:34:a7:e4:e2:1e:74:cf:43:2b:d4:d6:
76:ff:9c:e2:d7:a9:c6:4a:bf:78:1e:5d:0a:f7:ce:57:67:ef:
65:97:38:2e:d9:ec:2b:39:56:20:5a:ff:8a:1f:27:b0:f9:ea:
5d:31:70:9f:a4:e7:a2:93:1a:1c:b5:7f:7c:55:9d:92:6f:81:
a4:0c:6f:b3:b3:16:75:ed:00:db:14:a3:12:c1:52:46:56:fb:
ee:d0:52:c5:41:2d:fb:72:b0:d0:07:6d:5b:c6:63:7d:d8:ae:
1f:ad:61:0d:1f:15:fe:33:96:08:7a:ef:90:fb:33:55:82:8d:
06:14:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:03 2025 by rpki-client