Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json)
Hash identifier: 2Uhoq88t8YenDj1DBZSJzZXz90b7au+mqvwG9/PtsIY=
Subject key identifier: 64:94:1A:CE:4C:AF:F4:88:72:3E:B6:FE:29:19:C4:89:A4:AF:73:12
Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f
Certificate serial: 019A5119F1D31D332A6A3A649C51BE836F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 23:00:45 +0000
Manifest this update: Tue 04 Nov 2025 23:00:45 +0000
Manifest next update: Wed 05 Nov 2025 23:00:45 +0000
Files and hashes: 1: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: 9XU4vU6SJENgzn2LEbyQCtpJgOub0a0C6tmAuW3wzQk=)
2: tClIzpB8AXYvJfeCisA8HxpOd74.roa (hash: sXbqNinLjTETFbK42QOaktsLVCyYHDlotZvPtCRaxBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:f1:d3:1d:33:2a:6a:3a:64:9c:51:be:83:6f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f
Validity
Not Before: Nov 4 23:00:45 2025 GMT
Not After : Nov 5 23:00:45 2025 GMT
Subject: CN=64941ace4caff488723eb6fe2919c489a4af7312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:ea:ae:71:13:d2:49:a4:43:83:47:4e:38:
35:49:09:80:6f:84:6e:65:66:e5:58:74:b1:1e:b0:
2e:9a:fc:26:6b:67:a0:6c:f7:dd:1a:c6:ac:52:ef:
6a:17:a7:b9:1c:b6:46:f0:d3:70:fe:aa:63:92:58:
9c:9b:ff:77:31:71:76:89:7a:da:ce:06:2e:ff:6b:
de:5c:9c:0e:5e:69:31:45:f9:1b:d7:a0:71:12:5f:
6f:41:d6:5b:e9:5a:79:bf:74:90:e8:90:91:be:c8:
28:3d:94:ac:d3:ae:f6:e7:ca:64:52:a5:79:0a:da:
d3:71:55:29:b9:d5:45:d4:cc:be:c2:e4:0c:4e:c4:
f4:4a:9f:69:db:73:ea:2d:d5:41:53:b6:8a:22:08:
2a:85:f7:a4:0c:e2:ac:23:61:05:4a:9d:d6:2c:e7:
04:a7:11:a4:a9:68:3d:76:7d:ef:61:8d:f9:9b:72:
ca:44:7b:f0:8c:34:6a:b0:1d:62:72:33:50:d8:cb:
16:9a:fe:53:ee:e1:9e:e2:98:d0:08:a9:ca:c1:34:
2b:c2:58:bc:d4:78:7c:e9:9f:47:70:d2:5a:a4:67:
97:4a:8d:72:36:8c:49:e0:eb:33:ed:9b:9a:90:68:
c4:90:ba:32:ed:5b:25:0a:f0:fa:9a:e5:cf:16:71:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:1A:CE:4C:AF:F4:88:72:3E:B6:FE:29:19:C4:89:A4:AF:73:12
X509v3 Authority Key Identifier:
keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:06:f3:ae:55:5e:85:3e:dd:39:2d:c9:57:02:54:99:dc:cb:
12:1d:87:ad:93:e0:65:59:e6:20:66:ff:34:ba:7b:ee:b4:be:
db:f9:d0:2e:28:ac:b2:15:ef:f9:c6:00:bb:33:c8:bd:3b:eb:
c9:7c:bd:30:41:89:a0:82:a8:92:81:cb:dc:fc:d3:a0:83:bc:
41:57:5c:44:ad:5d:72:c9:b9:2e:d1:8f:5f:fd:fa:2f:97:a4:
c0:28:a6:c8:58:18:c8:a1:0f:bb:08:8c:ad:d0:6a:c8:02:17:
aa:5b:35:96:bf:4f:a2:f1:03:d9:58:71:ed:4c:fb:cc:d8:1a:
50:a2:e5:eb:3c:74:ea:35:fc:26:52:0e:c8:4e:fc:89:aa:22:
18:96:1f:c4:a3:d3:88:d4:ff:73:9c:8a:b7:0c:1f:55:12:c6:
66:99:ee:65:46:db:60:1a:80:50:cd:3c:62:4c:39:4e:6c:eb:
1b:60:33:b6:75:a9:6d:75:71:fd:fc:8e:fe:3e:b2:42:f1:b4:
88:67:ec:04:fe:89:10:f5:e1:e3:7a:d5:3a:bd:ef:51:f6:e3:
6f:c0:37:45:17:08:cb:c5:13:51:f8:5f:72:26:ca:ad:0b:ec:
fa:87:7d:b3:40:3d:b3:ea:2d:05:84:ec:3d:9c:bf:8b:82:49:
02:48:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:31:20 2025 by rpki-client