Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier: cCz5LFJ6j/2tl5hsJWfIsBtJq3py+vmMfEIlTs5mPxI=
Subject key identifier: FB:BC:04:86:87:BF:F8:C7:E9:53:FF:C0:C7:C2:8D:16:DD:40:1E:C2
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial: 019A71B8A64E6438246EAC54FC332AE0B58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=)
2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: J/KCHAuU3nWPmO/vPUXnGEUy5pnEWSmKEnHY+1IA4FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a6:4e:64:38:24:6e:ac:54:fc:33:2a:e0:b5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=fbbc048687bff8c7e953ffc0c7c28d16dd401ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:27:9c:50:1a:e6:bc:9c:61:7e:01:e8:c9:
43:81:0c:22:e3:75:69:2e:54:1e:88:7f:63:0e:a0:
78:3d:9f:11:7a:9a:b5:46:6b:50:ab:86:30:9d:fa:
86:f1:12:b6:00:3c:63:3c:14:37:03:cc:a7:32:9d:
21:81:e7:1c:4d:60:cb:e6:cf:ef:c8:e5:50:6a:ac:
85:97:ae:45:8a:c4:8f:d4:15:12:80:1a:6f:f4:aa:
07:eb:40:b3:f5:75:76:ef:e2:86:5c:20:5d:ac:68:
50:31:ac:e0:45:ca:15:dc:2d:ff:a7:57:91:be:35:
ab:df:a9:19:ab:88:57:ce:b2:ec:bd:5a:13:e3:79:
98:a9:5f:cf:64:1c:22:b0:b1:a5:70:00:81:47:80:
7d:76:d3:03:27:d8:16:60:72:8a:9c:a5:e2:e7:18:
b0:af:7e:81:7d:b6:7a:d7:d7:de:9c:41:8c:7c:14:
cf:3a:c9:e0:b4:b5:e2:87:38:6d:6a:04:05:51:2d:
a3:cb:6b:68:ae:48:b0:ec:f9:44:a1:a3:01:46:a5:
06:44:66:30:cb:5f:fc:34:e7:90:3e:ba:04:6a:ba:
33:62:bd:30:9e:db:89:50:58:af:0f:fe:41:4a:a2:
1d:b8:b5:9f:25:ce:e7:fd:9c:9a:3b:1e:22:db:35:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:04:86:87:BF:F8:C7:E9:53:FF:C0:C7:C2:8D:16:DD:40:1E:C2
X509v3 Authority Key Identifier:
keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ab:29:67:a5:08:55:d1:75:e9:de:2e:d8:1b:c7:5e:6f:a2:
60:69:10:ff:e7:c5:e2:ed:60:37:c0:43:11:2b:33:09:27:03:
26:06:7e:bb:60:50:81:6a:90:8f:eb:15:d0:be:dd:a2:d7:ce:
87:87:23:ed:c8:13:4c:fe:f7:c2:e5:bd:fa:88:69:0e:fa:be:
8a:69:48:f5:4e:94:95:ee:ca:e6:3e:21:a7:dc:e5:b6:f6:d8:
8a:99:34:74:26:a6:db:50:c8:9d:7b:26:d1:3b:ca:88:15:8b:
5c:78:be:27:3b:c6:a0:28:6c:1e:5d:15:f4:c9:75:6f:fe:a7:
d3:05:61:94:de:5b:4f:06:8f:5a:f6:79:43:92:cb:f5:b8:b7:
ec:01:03:c1:a1:c1:86:ab:6b:da:09:de:f7:de:3d:93:5f:e2:
db:0d:d5:b1:d5:b0:d2:4a:19:b4:06:0f:f0:b6:e6:01:5e:49:
bc:9b:9b:4e:70:7c:7c:0b:4e:81:e1:17:7b:cb:7f:98:fc:f2:
16:8c:db:79:44:2d:42:c4:40:64:26:d2:be:62:2a:99:b6:a2:
e9:78:8a:0d:01:c9:c2:2c:3e:88:10:a9:19:e2:7c:69:3b:b7:
d0:58:46:a5:88:26:9e:ba:92:10:30:70:79:20:0e:51:2b:3e:
1d:53:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:54 2025 by rpki-client