Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier: HQeXi4C7hhDGEDpH4Iigwp7ZId/3KEggvEyCFfyShOY=
Subject key identifier: 67:82:21:07:3A:F2:36:B4:69:BD:57:72:29:9C:B4:01:33:70:CE:48
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 019A71EE9BF96F4BCC9788F7CE1D76404258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: bvozHc0WZkqfjGPw3LUFdE4ADFiOb9c+W0qBEO1rkZk=)
2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9b:f9:6f:4b:cc:97:88:f7:ce:1d:76:40:42:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=678221073af236b469bd5772299cb4013370ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:89:5c:88:f6:34:e8:fe:f9:17:e8:8a:fb:
c1:5c:d4:d6:ae:9e:cd:e9:fe:b6:5b:13:ec:61:ad:
a1:a2:e2:31:7c:d9:2b:db:7d:30:64:e3:9f:87:8f:
8c:bb:69:2b:2d:3a:49:2d:be:5f:ac:23:ec:76:63:
68:84:dc:ce:63:0c:57:ea:ff:18:8a:a0:cb:46:ba:
59:29:2d:2b:9d:c1:0e:e5:cb:66:1c:a0:b3:a5:62:
0c:e9:41:43:32:9e:05:17:d3:43:28:b1:50:17:cf:
46:1a:13:7f:44:24:1b:45:18:4a:49:ba:43:10:cd:
49:63:d1:c8:8f:86:af:a5:0d:5f:db:35:ce:6c:e4:
4d:17:b3:aa:83:67:c1:41:db:63:f2:e0:4b:7a:b0:
05:b5:46:74:10:42:0f:5b:98:2b:25:6c:a6:5d:87:
56:05:3c:45:e0:ed:8c:fa:3a:4a:3c:4b:8c:0e:9e:
a5:46:8d:ab:38:52:f5:23:d0:3b:c7:3f:81:a7:58:
0a:c8:29:8e:79:55:35:56:54:c2:a1:35:5a:d6:a6:
fb:d8:0d:b4:e7:84:0b:3c:64:4f:4b:85:99:bc:e2:
98:d5:2b:86:2f:54:2c:24:99:9b:da:d3:49:7e:c8:
ca:41:66:31:90:51:46:38:cb:80:97:f7:99:62:73:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:82:21:07:3A:F2:36:B4:69:BD:57:72:29:9C:B4:01:33:70:CE:48
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1e:81:5e:5f:bb:8d:c4:a3:55:ab:9b:a9:54:e4:22:2c:bd:
5c:70:62:71:76:91:cf:f8:3b:6e:1c:e5:c3:ad:db:7c:8f:d1:
b9:08:4f:e5:a7:da:5e:42:81:22:88:91:c9:51:c2:9c:96:2d:
73:87:07:5a:c9:a5:b5:6d:11:a3:d3:2d:2a:bf:f8:fe:87:d0:
c4:10:ed:a2:79:61:bd:99:d4:66:3c:03:58:d6:04:e0:ff:9e:
c8:3b:6b:81:3d:4c:4f:f4:11:86:ac:f5:df:fe:ca:42:ba:de:
0b:43:b6:fa:03:70:44:a4:85:dc:25:a8:46:09:8a:1e:4f:ee:
cf:28:f7:f2:e3:b9:36:c7:ac:92:83:75:be:9f:04:aa:8e:da:
f3:0e:cd:0d:c0:f1:f9:04:9d:61:63:35:84:b0:c2:71:77:81:
a4:e5:e8:e1:fb:9c:27:e8:19:04:dc:01:cb:cb:73:25:78:57:
fc:71:dc:fb:76:3e:a7:62:81:b1:cd:7c:32:62:c8:73:f2:6e:
1c:56:1a:18:62:7d:3d:87:f4:b5:81:c3:53:bb:a1:fe:f2:e1:
28:58:48:a3:4c:5a:85:7f:3c:5e:15:e4:ca:46:37:df:b2:f5:
b4:50:8c:a3:23:2f:1b:6f:b8:5f:79:e4:80:e9:0e:34:07:1d:
90:1e:52:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:03 2025 by rpki-client