Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: pFj342RQDVNuDPYZjvICmwNzOEv1lfcpaNGCwT2pi+A=
Subject key identifier: 81:FE:3D:89:E7:0D:54:59:27:5D:DF:7D:CE:8E:E8:F8:0B:08:7F:44
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 019A4DE18803DF34FE2E8B2E51CBAE3B1CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:17 +0000
Manifest this update: Tue 04 Nov 2025 08:00:17 +0000
Manifest next update: Wed 05 Nov 2025 08:00:17 +0000
Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=)
2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: MgGj4eNxMKYIRCC73QluQv6cWdRPPWfwe/q7LnG8vD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:88:03:df:34:fe:2e:8b:2e:51:cb:ae:3b:1c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Nov 4 08:00:17 2025 GMT
Not After : Nov 5 08:00:17 2025 GMT
Subject: CN=81fe3d89e70d5459275ddf7dce8ee8f80b087f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:a6:99:12:50:cd:b5:4f:08:70:7f:4a:ee:
75:53:73:74:fc:38:a5:36:4c:af:0b:02:fc:02:02:
29:23:41:2d:ba:4a:f8:0b:28:d0:e7:12:0e:44:a8:
e9:c0:7c:08:9c:18:aa:5b:45:76:99:ec:e4:7e:b6:
2b:3d:34:ed:27:db:2f:57:63:d5:bb:26:25:bd:9e:
76:8c:dd:ca:6b:f3:f4:a4:93:eb:05:a0:c4:2f:de:
98:1e:e8:cf:36:b1:46:8a:2f:9f:df:c5:ae:f5:c3:
46:e2:13:d0:4c:16:67:ec:b9:96:9d:bb:d4:43:7e:
2b:e8:33:4e:85:b3:02:39:c9:51:9a:84:6c:d2:fe:
1b:5c:72:1a:66:ab:85:05:74:6f:de:4b:12:27:3a:
fe:4c:a4:a8:2f:42:14:0f:b6:55:15:83:a9:66:1a:
e9:76:87:de:10:3b:4b:df:3f:45:cf:12:77:2e:00:
40:75:42:16:6e:d5:ef:f5:3c:4e:95:f6:b9:99:b2:
a1:f8:45:88:ab:fd:bc:9e:a3:f0:1e:b6:c6:f2:35:
f9:a7:f8:59:b2:08:a0:24:b5:47:d9:a4:a9:26:0d:
79:29:93:a5:2c:db:63:48:27:a9:f8:45:ed:ed:d2:
48:b6:fc:0c:b7:41:93:1f:d1:fd:b5:0e:2f:ff:a9:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FE:3D:89:E7:0D:54:59:27:5D:DF:7D:CE:8E:E8:F8:0B:08:7F:44
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5a:b6:6b:c4:e5:8b:10:c5:35:14:43:f9:69:6b:58:b2:8a:
e9:59:1a:c1:75:32:6b:8d:e4:25:91:d4:74:a3:a4:be:2e:68:
09:11:4b:61:ad:2b:b1:9f:f2:f6:d4:98:7a:92:ab:4e:8f:c4:
58:c1:8f:21:4c:7d:c0:92:bb:ca:73:9f:02:f8:5a:93:12:a5:
29:bb:54:c3:28:31:cc:1f:89:37:f6:a3:91:28:b8:44:a5:e1:
9c:8b:14:bc:e8:cd:50:94:41:8a:a6:b5:fd:58:03:45:6a:f1:
15:43:b5:a4:e9:c6:13:8c:94:bb:fc:cf:27:7d:53:27:15:9e:
5a:39:ba:e9:46:72:60:87:e4:5f:be:e1:b4:0f:3e:20:6a:4f:
da:c9:23:2f:a2:02:0f:8a:f0:57:42:4a:fd:43:6d:29:34:4b:
e7:01:76:8d:d1:96:86:07:fa:a6:24:9e:55:fc:f0:65:d3:c9:
e1:10:a3:d2:20:76:2a:4e:27:c5:d3:fd:0e:76:48:ad:97:3c:
3c:da:bf:a3:d3:b5:9c:ad:fc:db:1a:42:2b:0a:56:47:20:56:
12:6d:59:af:77:68:c7:bf:c5:8f:61:85:0b:16:a9:33:70:81:
43:74:ab:a3:d2:25:bf:76:14:ea:ea:c0:6d:4b:98:9d:79:54:
1c:6e:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:29:35 2025 by rpki-client