Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: icuZO/PR4QPSiOgmun87NehakF8SRfG68W9/AYBK/mg=
Subject key identifier: BB:F9:C3:81:5E:AD:D6:EB:1A:4B:7B:A5:13:A2:E5:11:F3:A9:9E:40
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 019A71B91043E31C95C35D22623B9B687148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: LjLU8GHe8wvlODxJs5SJzp7Ryx6O3Tu3pdZuRc/pr4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:10:43:e3:1c:95:c3:5d:22:62:3b:9b:68:71:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=bbf9c3815eadd6eb1a4b7ba513a2e511f3a99e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:91:b9:3c:68:ee:c3:02:ed:33:1b:b3:50:
30:07:d0:e2:1b:cf:7c:cd:5b:a2:45:5d:f0:ec:6a:
f1:6d:93:6a:b4:d8:ce:32:51:ae:b6:30:08:93:e9:
bb:98:96:61:f3:91:f1:04:1d:66:2d:71:fa:e6:ed:
53:99:e0:e6:ef:fa:ef:29:07:67:f9:cb:8a:35:b6:
bc:c0:03:9b:c8:fa:5b:f9:77:f1:c9:b6:3f:47:01:
df:fd:e1:f7:80:a0:7f:a4:5e:f6:fc:bd:18:f3:fc:
3c:d5:30:ea:fa:1e:af:76:d4:cd:a2:33:b7:04:69:
a9:58:36:70:18:7a:ae:a2:16:48:8f:d3:b9:8c:57:
a1:1a:98:f1:33:32:69:bc:3f:5e:3e:c7:df:41:07:
f1:9c:bb:0e:e6:c5:d7:18:32:59:6a:aa:2a:e9:53:
0c:d0:4f:ab:b1:0e:17:27:27:1d:4f:79:e2:ff:2b:
1f:d8:6f:a1:60:94:dc:f8:67:39:6a:cb:a1:78:6e:
18:51:b8:a0:09:e0:aa:f0:27:a0:1f:27:c1:d7:ce:
c7:35:9f:96:42:4a:9e:bc:af:da:53:8f:61:ae:b5:
ef:fa:7b:ee:2e:50:7c:18:e2:8d:70:4c:20:f8:ac:
f1:53:d8:66:78:73:ea:c8:3a:b9:44:d4:7b:0f:fb:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:C3:81:5E:AD:D6:EB:1A:4B:7B:A5:13:A2:E5:11:F3:A9:9E:40
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8f:2f:47:1e:ac:62:b8:d8:97:1e:71:6b:2a:f0:08:92:90:
72:df:81:36:99:a8:b8:d9:f6:72:13:f8:17:d3:87:d1:a1:88:
13:44:bb:aa:dc:2a:b4:f8:a8:37:0c:f9:36:1b:2b:89:02:49:
1a:76:9b:2a:6d:f8:d8:8e:c2:1f:c3:52:df:ad:85:91:ac:35:
fa:4f:56:ec:8c:6e:54:a2:b4:2c:ec:09:d8:09:cc:2a:3d:f8:
78:2e:f5:8b:f9:61:a9:5a:b6:e7:e3:c8:e5:ca:d9:9c:ed:30:
70:a8:12:f0:59:c4:d5:3f:e3:54:93:42:01:27:89:85:61:a4:
1e:d7:42:c7:ca:d6:22:94:62:83:21:b5:16:55:9a:4a:25:b8:
46:fa:84:e6:f3:d1:fc:7a:ac:49:6b:16:3a:7b:58:e8:e4:eb:
a8:b2:28:e9:77:fe:60:46:04:15:81:fe:f6:b9:bc:ad:68:0e:
f5:69:e9:70:b2:65:5b:39:47:1d:ff:cb:df:9a:61:25:10:6b:
45:a1:fb:c4:84:a4:0c:0b:95:8f:a5:07:b9:50:5e:41:6b:4a:
1f:90:22:f0:af:12:4b:44:ac:ab:bc:21:d9:d6:0f:65:79:f0:
b0:4b:31:40:c6:15:41:ea:ea:26:22:94:c9:c4:61:42:f1:47:
37:1c:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:55 2025 by rpki-client