Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: 0tIcBHkwuSLZQqkXc8jqGuCN5V0zUTa+a8+w/Cg5GfM=
Subject key identifier: 77:F8:4A:88:58:25:6A:3D:A4:26:84:34:5E:85:27:44:9E:A2:25:40
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019A71B86A3F1A0CE55CC260FBC048AC67D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: GCLXvV5Y8SAFCJPUvMhEU9y9ZUbLQ+Z5HVSAGlkwbtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6a:3f:1a:0c:e5:5c:c2:60:fb:c0:48:ac:67:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=77f84a8858256a3da42684345e8527449ea22540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:6e:49:df:0e:dc:ac:2c:ff:ca:bd:fc:e4:
a3:5b:1b:54:06:ea:01:13:1f:fc:ec:9d:00:06:b4:
eb:98:01:e7:4b:d2:bd:00:a6:45:2f:bc:5c:d4:38:
e3:fd:97:51:f5:b6:18:9f:18:8c:67:06:9a:73:3a:
34:5b:12:99:62:d3:5a:38:34:db:51:c9:ab:d9:66:
2a:23:44:97:d4:a5:6a:ad:b5:5d:14:03:42:0d:e6:
91:41:9f:43:3f:26:e1:93:27:60:00:b6:95:89:f5:
d5:20:fc:e9:0a:57:ef:2c:16:e2:30:fe:95:bb:cc:
1a:05:9f:47:be:67:64:90:70:41:5a:06:85:4e:3e:
f4:d2:57:55:c3:ff:ed:cc:25:00:6b:f6:eb:b0:f7:
65:9e:96:4b:02:a6:63:a8:23:22:4a:61:39:28:59:
65:37:b6:1c:26:9b:ba:4f:4b:13:b2:09:70:6c:27:
9f:e5:03:60:c9:77:b1:b8:a0:26:2e:34:db:2a:0c:
b2:cd:72:85:61:26:2a:bd:67:e9:20:5c:85:77:81:
5e:d2:12:05:65:1a:50:12:0c:a7:df:95:3f:8e:fe:
6c:42:25:9a:fb:67:20:c1:95:3b:9a:c4:80:32:a3:
10:f1:e4:0c:ed:a1:91:b0:01:f3:3c:aa:e4:df:10:
74:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:4A:88:58:25:6A:3D:A4:26:84:34:5E:85:27:44:9E:A2:25:40
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:32:e6:4a:8d:49:ee:01:84:73:37:94:f7:35:f4:9e:78:51:
e0:35:06:fa:f9:15:3d:d4:ee:06:1d:52:5b:9b:03:7f:a4:56:
35:f8:31:be:78:ec:90:2d:99:b7:c5:20:b7:bd:5b:42:3f:ec:
3e:83:53:1d:0e:39:0b:ed:42:8a:d5:14:24:12:6e:d0:ee:23:
b2:be:a0:ac:e3:1d:7d:16:62:92:61:63:31:8f:6e:b6:c0:be:
1b:62:e4:de:e0:f6:3b:b3:c9:f9:3b:a5:09:b7:ed:f3:65:ef:
c0:3e:ef:96:8a:8f:c8:41:f8:94:0b:fc:b6:f3:9d:cc:9b:6e:
c7:16:07:1f:a8:98:61:49:8d:22:e3:23:c4:01:80:6e:57:4e:
58:2e:95:f8:5b:50:53:7d:64:45:02:06:8f:12:d7:81:8b:cd:
21:88:0c:c8:3e:e0:f2:a0:24:aa:cb:99:60:88:36:e4:08:6a:
6d:05:cc:7a:d7:68:4c:35:bd:2b:2d:15:c3:af:1b:7d:8f:5b:
2b:71:05:c4:e8:77:e5:e2:af:39:75:27:a9:1f:10:52:7e:60:
5d:c7:5d:2e:ed:b0:d1:d6:b8:bd:97:5f:63:1d:9c:c5:5d:b6:
7f:d1:91:47:8f:89:e5:ea:8d:b8:70:62:18:2b:ea:a9:eb:18:
9f:ba:45:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:48 2025 by rpki-client