Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: 6MBWHY3wJbhlsLkTTpI3oEO94CJr6axOWN9qUilhqR0=
Subject key identifier: 65:31:19:3D:D6:A6:24:C3:B9:BB:01:C7:67:F6:2D:E3:C2:69:A0:54
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019A71B93C4D99EE72E8BF505FCD2CB32DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:35 +0000
Manifest this update: Tue 11 Nov 2025 07:02:35 +0000
Manifest next update: Wed 12 Nov 2025 07:02:35 +0000
Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: xpr0oZhBLND11fCCeY/PD8muJVNOwFXh2qam+r/AMbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:3c:4d:99:ee:72:e8:bf:50:5f:cd:2c:b3:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Nov 11 07:02:35 2025 GMT
Not After : Nov 12 07:02:35 2025 GMT
Subject: CN=6531193dd6a624c3b9bb01c767f62de3c269a054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:d3:5e:1c:d1:3c:5a:95:89:b4:90:e8:04:
8c:de:9c:d2:34:da:95:47:71:1c:5a:46:05:a4:91:
c7:53:37:38:1d:c5:b9:4c:a7:f5:0d:36:63:03:cf:
06:c2:09:11:81:86:4a:99:41:4d:2c:3b:30:40:18:
ff:27:1c:bd:31:7a:88:8e:07:d4:9b:ba:c2:bd:da:
3d:d3:14:38:de:f8:bb:ef:22:33:7d:3f:9f:95:b0:
22:ad:d9:4d:ac:c5:78:be:41:60:89:65:cc:43:8e:
c3:fe:86:a0:96:af:1a:a6:53:c9:03:c5:0b:47:0a:
d9:1e:03:7d:bb:fd:12:85:6f:17:10:3c:04:32:0f:
de:61:e3:4c:a7:be:20:ec:44:c6:58:08:70:fb:dc:
0b:bc:54:dd:62:fb:7e:ca:c2:e7:db:25:18:13:10:
cd:76:26:be:0d:ce:b8:6d:2f:e5:9e:73:fa:73:89:
68:da:a0:d4:8d:c7:b8:39:fa:fe:f2:e6:f1:25:d1:
9e:71:c4:75:07:80:ea:d3:b9:cd:4f:93:7f:b3:3d:
ab:72:d0:41:aa:7f:9a:3b:68:1a:85:a1:68:95:69:
98:d2:20:a4:42:e5:81:3e:62:0d:ed:06:7f:44:4f:
02:be:86:42:c9:e3:4e:fe:ac:5d:ab:c1:aa:cf:97:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:19:3D:D6:A6:24:C3:B9:BB:01:C7:67:F6:2D:E3:C2:69:A0:54
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:00:6f:b6:ec:ae:cc:50:40:09:54:de:93:17:e9:23:31:21:
00:68:7e:fa:6a:54:90:16:0f:96:92:01:21:05:24:fe:b1:a0:
67:35:b2:c6:d8:83:9b:0a:15:3e:7e:bd:df:8d:ff:73:36:f9:
af:c4:4f:f1:ea:aa:16:53:85:2b:a3:d6:ce:30:23:19:08:b1:
4c:a0:0c:8f:2f:20:58:76:a1:6a:38:3e:c1:30:04:42:2b:85:
48:d7:df:3d:06:0d:e1:c4:27:20:66:73:0f:85:4c:51:dc:de:
b6:db:42:85:41:60:43:e3:0f:1a:e9:d0:b1:55:9a:20:4d:97:
be:9b:76:47:8e:54:62:80:00:a3:0d:57:75:7d:41:cf:a4:61:
8f:0a:90:54:d3:95:89:53:94:27:28:bb:2a:85:84:40:a3:41:
4b:e5:07:1c:0e:0e:0f:17:03:8c:bf:66:9a:e0:15:c5:4c:d7:
ce:cf:d7:89:a1:ea:fc:aa:e9:14:fb:21:ee:12:9e:4f:15:52:
fc:58:f6:c4:d2:f4:1d:85:c2:c4:97:4a:2f:69:55:56:b7:c8:
4e:78:35:fd:3b:bc:92:92:d1:40:00:c1:9b:10:b2:4f:c1:7c:
8f:fe:66:ad:5a:58:a9:ef:0e:db:9f:71:3d:4b:45:85:d1:7c:
52:a4:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:52 2025 by rpki-client