Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: mlVtyXpknwL1gcCfikauyZx4H0J3LNpEjPzHf+935fA=
Subject key identifier: B8:8D:8C:4D:8B:21:39:9B:0D:08:76:B9:2A:6F:A1:AB:26:80:92:CC
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 019A4D746D85AB84631ED1B5C364535965E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 06:01:06 +0000
Manifest this update: Tue 04 Nov 2025 06:01:06 +0000
Manifest next update: Wed 05 Nov 2025 06:01:06 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: PmpBRbEntBnE5kb3trtxi+FcImb9TdENE08Fmapp8WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6d:85:ab:84:63:1e:d1:b5:c3:64:53:59:65:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Nov 4 06:01:06 2025 GMT
Not After : Nov 5 06:01:06 2025 GMT
Subject: CN=b88d8c4d8b21399b0d0876b92a6fa1ab268092cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:06:4e:54:32:04:ad:0d:52:01:4d:80:9f:
9c:00:a2:b3:a7:23:64:c7:ed:e2:dc:b8:db:80:0c:
72:f3:19:df:ba:38:98:8d:0a:92:65:97:a8:e8:e8:
d8:ce:d9:99:45:4b:df:bc:df:12:7b:23:2a:54:a7:
c3:db:1b:45:6f:30:22:a8:81:82:2b:45:1d:31:85:
61:b9:44:07:13:ce:c3:b6:55:36:7c:a4:16:2e:72:
e7:d8:35:20:20:15:0c:50:80:2e:c3:3e:64:fc:e6:
4e:a5:f3:c3:12:cf:71:28:76:bb:43:c8:4c:d2:e7:
f1:61:0e:49:24:27:ed:33:1e:be:22:a4:44:ad:55:
6f:a5:8f:e0:bc:2c:57:11:2b:30:23:7e:4d:98:33:
9d:15:40:69:e8:e5:07:d1:c9:a4:e8:1f:4c:d4:99:
ee:e6:37:48:38:91:50:0e:c8:e9:8b:42:70:e3:d9:
c7:43:8a:10:76:e8:cd:14:2e:a8:65:2c:f6:ad:ae:
2b:97:05:a8:d7:9d:83:d0:ef:05:27:3c:f1:4a:43:
47:84:a3:01:96:10:50:aa:97:99:9b:ef:20:12:d2:
8d:f8:da:11:f9:72:0c:d2:a5:6f:a6:81:a3:f5:04:
83:1a:14:1c:60:58:c2:31:4b:63:c8:5b:24:24:46:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:8C:4D:8B:21:39:9B:0D:08:76:B9:2A:6F:A1:AB:26:80:92:CC
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:16:73:d5:fb:69:1e:f8:48:0d:db:59:e7:e5:60:0f:55:b9:
2b:8f:4d:7d:01:ac:05:54:f4:ac:10:d5:7e:7b:8c:ab:cc:46:
9c:a1:e3:e4:aa:eb:d2:7a:a8:43:cd:9d:91:f3:e5:34:37:a7:
a9:4d:01:b7:ff:81:86:63:c1:ab:82:49:21:dd:8f:fc:2a:08:
02:bb:7d:67:bb:ca:d2:59:9d:0f:af:02:41:03:13:91:ad:7c:
8d:d4:55:3f:e3:30:d7:d9:76:82:8b:8c:50:27:69:70:70:e2:
fd:5f:c2:c5:48:d6:26:76:a2:50:4f:ec:dd:24:1d:41:6c:75:
3b:ff:a4:2f:f7:f8:ae:1a:10:25:91:ab:8e:d3:04:66:32:a2:
f5:cf:9a:50:0b:d2:17:a5:14:43:84:ac:58:96:a5:a5:da:66:
15:d5:96:cf:bc:ae:c6:32:2f:1e:4c:61:04:62:72:ef:0d:4a:
87:30:ce:a6:ec:1f:af:d5:90:d4:a5:00:4a:5d:eb:cc:cb:a9:
4c:28:96:cb:11:81:8a:d0:42:99:d0:df:2b:6d:88:fd:43:3f:
77:37:a2:f7:2b:6b:85:3f:2e:c8:62:b4:4a:0b:9d:e3:82:d5:
c1:ea:4b:80:2d:22:37:ac:fd:9e:41:c9:4c:eb:a4:a3:a3:85:
dd:91:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:34 2025 by rpki-client