Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier: ZQ35HPFEtVDXCgluJr8XmdBGw24C+6ogkrqnyTMC7Os=
Subject key identifier: 82:49:1B:69:61:C8:62:EF:C6:4D:21:8F:A3:ED:7C:84:EC:F1:1B:7B
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial: 019A725C4A7B7F312D23D4A575EB82FB78A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 10:00:42 +0000
Manifest this update: Tue 11 Nov 2025 10:00:42 +0000
Manifest next update: Wed 12 Nov 2025 10:00:42 +0000
Files and hashes: 1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=)
2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: FfYYkKOzBhb0bxOD5kArUbjmOOH5WVGxfiORd2yUoeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4a:7b:7f:31:2d:23:d4:a5:75:eb:82:fb:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Validity
Not Before: Nov 11 10:00:42 2025 GMT
Not After : Nov 12 10:00:42 2025 GMT
Subject: CN=82491b6961c862efc64d218fa3ed7c84ecf11b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:ca:d7:e9:44:ff:53:a2:c7:ca:bd:36:67:
9e:1c:11:9c:b7:6d:27:4c:0d:73:16:28:93:5c:d3:
32:cc:99:aa:75:8f:16:85:41:8d:b0:21:6b:79:08:
3e:4c:56:16:30:c7:72:7d:0e:4d:ca:3e:47:a1:5d:
f7:9e:3b:92:5c:7a:71:7f:83:de:04:f9:12:fc:e7:
b0:31:18:0f:23:ac:b9:0a:8a:11:d3:a1:89:dc:f3:
ea:ba:15:bf:57:e1:f9:7c:3a:b0:a7:b5:f0:e3:c3:
d7:48:53:9e:21:2b:4c:ad:4b:2f:11:7e:28:f7:4b:
4e:6c:85:6f:8a:f8:a5:d3:b7:d3:4c:b1:57:8d:db:
62:3e:ad:d5:7e:36:1a:c0:96:f1:0e:e3:d4:6b:65:
54:ec:88:f8:18:d9:b8:62:23:2e:0b:3a:6b:11:77:
81:8b:8c:15:78:76:c4:c0:c8:44:13:e9:cb:6d:76:
39:88:b2:5a:36:ba:e0:5e:39:9f:ef:ef:e2:e7:5d:
67:18:a6:d6:db:11:35:e6:4a:af:89:d7:ea:b0:b1:
0b:8a:cf:cc:ed:8c:35:d6:36:72:ca:79:fe:d7:78:
b7:d9:0b:89:47:0e:7f:62:81:01:27:f0:ec:f3:09:
03:ec:eb:19:c5:b7:eb:2a:ac:a3:c5:a4:97:9c:3f:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:1B:69:61:C8:62:EF:C6:4D:21:8F:A3:ED:7C:84:EC:F1:1B:7B
X509v3 Authority Key Identifier:
keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1a:73:70:fb:26:15:51:5f:41:de:d4:a9:5c:3c:17:64:ca:
78:bf:32:64:1f:55:d8:97:76:08:86:a4:f4:50:77:33:d8:b5:
5d:4e:69:e6:a9:70:d6:35:e0:1f:82:b4:0a:b9:71:18:79:2c:
a2:b5:76:5b:62:54:3a:82:a2:5b:4e:e4:ad:2f:d9:0b:66:9c:
d5:63:fa:83:70:e4:f1:e2:e8:50:a3:69:7d:65:9e:e8:01:49:
88:ed:40:70:63:b1:b9:8d:d7:56:9c:89:8a:f6:32:91:23:ee:
2c:d1:32:5a:5a:c3:2b:f8:65:fe:22:b0:32:93:26:c3:d6:be:
ed:3b:07:c7:19:dc:9a:62:96:27:80:55:87:a5:75:9f:ab:92:
26:19:d8:a5:fc:83:5a:2c:d9:41:bd:c9:6a:46:8f:95:76:0b:
d7:a1:1a:f4:0c:c3:a9:87:95:4b:56:e2:ad:ae:39:e6:8b:0d:
b6:59:b2:66:f2:ac:2c:ae:66:25:b1:3f:10:64:b1:bd:9a:2c:
bc:f1:59:df:88:22:cd:2f:13:32:02:e9:b5:99:9e:06:4c:11:
54:82:f6:24:dd:ac:13:dd:e5:0b:d2:6c:5e:7e:68:ab:37:e1:
0b:e2:20:74:3a:66:ce:fd:76:93:bd:f6:4c:40:52:de:bd:8c:
71:7c:60:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:40 2025 by rpki-client