Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: pSFXgPDJzTBKaKatnuiFcm07VCV8FMOGiCub1OslC2k=
Subject key identifier: 26:8F:E4:33:2E:68:E6:5D:58:20:91:C8:1F:E0:77:AD:19:73:DA:99
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 019A71B7A5FE45408796594C43B1F339EDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: qtdIaa+oe9f827fMHospb7iyYG6xU7FQeFw1IaIanXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:fe:45:40:87:96:59:4c:43:b1:f3:39:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=268fe4332e68e65d582091c81fe077ad1973da99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:2a:a1:cb:6b:26:37:61:39:91:bb:61:fc:
6f:58:fd:cf:58:f3:dd:a3:b7:fa:fa:bf:dd:ae:ac:
17:32:11:80:70:7c:e1:2d:3d:0e:ff:9e:eb:49:00:
20:ad:2e:a2:eb:e8:60:32:df:62:8f:fc:25:fe:a0:
56:de:ed:32:f5:38:a3:57:98:d0:b8:eb:6d:90:26:
ab:5b:21:3c:2b:23:e7:c1:50:be:da:60:73:db:5d:
99:ad:2d:27:89:8f:9c:97:a7:26:15:93:43:3f:ed:
e8:ff:d0:67:f3:bf:84:d5:d9:d7:47:b5:5f:43:8c:
84:58:46:1b:56:f7:60:26:e1:d0:7a:41:dc:53:95:
ee:56:ce:78:77:2c:a3:7f:82:d2:20:73:db:d2:53:
f2:96:88:9e:ba:22:80:ae:5b:dd:62:6e:85:53:d0:
d8:ec:de:8d:5b:0f:93:c4:56:b6:be:cc:67:d8:a8:
ff:fb:7f:10:f8:05:c2:e2:90:40:c6:81:33:6f:9a:
4c:a9:6e:1c:3b:99:19:17:7e:4e:84:04:49:b5:db:
a8:cc:ff:2e:fb:57:ec:1e:82:68:dd:79:06:7e:9e:
3a:e1:c9:a9:a5:5e:85:ec:a2:10:89:9d:fd:3b:08:
9d:b4:f6:e5:6f:d1:21:c4:28:cb:95:9c:44:c2:c0:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:E4:33:2E:68:E6:5D:58:20:91:C8:1F:E0:77:AD:19:73:DA:99
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:19:09:28:89:32:e0:af:97:f2:3e:d8:f9:4e:39:0d:6c:
db:3b:0f:31:5c:0d:b3:15:1f:68:c7:c9:d8:06:41:25:0f:91:
22:d3:43:eb:10:c9:92:40:db:d9:e4:4c:f3:7b:0c:8a:65:db:
3d:da:d7:da:f8:3f:d3:08:03:40:6e:5c:81:f2:4e:26:98:a8:
83:b2:84:4e:4d:c5:67:d7:66:d4:d7:27:95:98:ee:09:69:ec:
98:73:f6:ba:91:0d:f6:0b:de:89:df:81:33:1a:6e:90:c3:af:
c9:7b:8d:a6:7a:6b:91:99:fd:38:56:be:e9:c2:23:2e:3a:aa:
78:ea:7f:7d:f7:f0:b2:38:81:80:f0:97:1b:91:db:6b:9d:72:
a6:64:33:71:f8:e5:dd:55:ff:7c:f5:ad:aa:5f:67:d0:de:28:
e3:d4:4f:ef:bc:36:02:86:3f:00:7c:ae:3a:22:db:17:73:ec:
27:7e:7e:f3:0e:e1:2d:35:00:21:c1:4d:81:08:10:fd:69:f5:
ef:c7:d6:cd:e4:38:dc:01:80:18:73:eb:c4:c0:d1:24:c5:8f:
70:7f:2d:79:cd:cc:76:75:94:b6:21:c2:64:4d:d1:be:19:92:
77:7b:39:0d:12:49:79:fb:8a:0c:9c:83:26:8b:2e:36:60:78:
5e:cb:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:23 2025 by rpki-client