Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: 0UL7RIp7A1XU75hBVaaU6mlMAKUss89iHQ/RKLQIEAg=
Subject key identifier: AB:B5:19:73:F4:50:8D:20:32:F9:04:71:6D:3B:CD:BE:DC:A3:8F:E5
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 019A70DC3FFD7E8F3CB5C531C705C313ECC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 03:01:13 +0000
Manifest this update: Tue 11 Nov 2025 03:01:13 +0000
Manifest next update: Wed 12 Nov 2025 03:01:13 +0000
Files and hashes: 1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: u/5Qyd1kCxSm+1/Mu5xdhLQM5PAfFGkkpjg9IZARynI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3f:fd:7e:8f:3c:b5:c5:31:c7:05:c3:13:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Nov 11 03:01:13 2025 GMT
Not After : Nov 12 03:01:13 2025 GMT
Subject: CN=abb51973f4508d2032f904716d3bcdbedca38fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:ea:78:7c:29:e1:94:1f:2d:b4:90:aa:26:
f4:e2:a4:87:87:ea:17:54:63:19:2d:09:10:0b:d9:
17:c0:c8:43:34:0c:5e:4b:a3:32:ff:de:55:ff:b4:
04:b8:2a:f6:66:9e:c0:71:44:5c:ee:2c:12:b2:c3:
7d:92:bf:cd:d9:5e:3d:a7:3b:bd:64:56:de:21:2d:
5a:2d:36:dc:3f:f4:c2:10:e1:b5:b4:3d:e5:9a:07:
d1:c4:00:e8:a6:c1:aa:91:9b:e6:dc:98:7e:01:06:
18:15:54:48:ab:fd:66:33:bc:6d:c3:0c:fc:d0:03:
7c:92:5e:ff:c0:68:76:d3:01:90:ca:47:7b:51:95:
d4:0c:81:ee:12:74:6e:a7:49:09:e9:83:5f:c0:04:
8e:2c:1b:2a:95:fc:f4:46:e3:28:db:f2:8d:13:cc:
9e:20:3e:96:a9:23:9a:df:70:b2:f7:7f:c5:b9:40:
70:64:67:6a:61:c2:38:14:ad:ad:90:72:b4:8e:21:
22:9b:43:0a:b9:82:95:13:d6:5c:e6:c2:e8:0a:e8:
6d:82:80:a4:b4:a5:da:4e:06:d0:3d:bd:4d:f2:21:
63:9b:8c:32:fb:27:1d:bb:f9:a1:36:48:74:91:91:
f0:19:f6:2b:e3:f5:15:c1:fb:0b:da:6b:05:fe:c9:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B5:19:73:F4:50:8D:20:32:F9:04:71:6D:3B:CD:BE:DC:A3:8F:E5
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e0:22:93:5e:9e:90:89:49:3a:53:0f:9e:e1:8c:05:3f:b6:
72:b8:23:87:0a:71:8a:b5:ce:95:e5:61:23:1b:80:15:0b:87:
59:31:67:8a:1b:53:16:7c:77:42:bc:de:aa:c5:b3:69:fe:f0:
5a:df:75:6d:6b:77:6e:51:da:35:6c:7a:4c:32:49:56:e1:e1:
d6:09:62:50:ab:05:7c:d5:81:d4:11:28:1e:2d:7e:c1:67:c2:
6e:d2:f1:d3:37:78:fe:e0:a0:18:73:e8:6a:a1:dc:61:fb:90:
6e:34:1a:7d:fa:e3:56:14:55:70:91:c3:69:35:88:a0:27:62:
19:3f:7c:79:e6:b5:a3:7b:a0:7c:86:f9:b3:89:fb:d4:54:46:
35:17:ad:99:35:cd:20:ab:10:81:09:bc:c7:1c:29:8b:e1:c4:
c4:48:54:9c:36:06:34:de:d2:31:14:b5:0d:ef:28:cf:23:c9:
bb:cc:cc:7f:5b:d4:20:be:4f:01:75:e8:31:c4:4a:ac:09:30:
85:82:1e:17:3c:30:3c:ac:b1:98:d8:5b:74:c5:a4:a0:8a:98:
07:ea:b1:de:e9:9f:c4:66:df:16:c2:cd:89:cd:64:ce:30:63:
b4:41:c4:b6:58:19:c4:2f:e3:5d:63:7d:5e:c7:5f:4a:fd:78:
85:8b:8b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:10 2025 by rpki-client