Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: olyD75RQL8bTJTrzt1UnQo7c3qqs1b8H6Gki78kyKZU=
Subject key identifier: D6:37:56:66:00:C9:FE:80:D7:6E:35:1C:15:41:01:B2:1A:19:05:DA
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019A4DAACF20BDD0A0E02072416150A34AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 07:00:30 +0000
Manifest this update: Tue 04 Nov 2025 07:00:30 +0000
Manifest next update: Wed 05 Nov 2025 07:00:30 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: vtzBRiXTW3lc0KIz9UCMvyzU+0n7Rw7h4DPzJCYgx9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cf:20:bd:d0:a0:e0:20:72:41:61:50:a3:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Nov 4 07:00:30 2025 GMT
Not After : Nov 5 07:00:30 2025 GMT
Subject: CN=d637566600c9fe80d76e351c154101b21a1905da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:60:e6:39:fb:0f:fb:29:01:71:37:f1:31:
24:46:78:b5:6b:c1:01:4e:71:58:fc:6c:dd:f4:ec:
58:8d:43:08:9b:9e:ee:5f:96:98:e7:d2:6f:c1:6f:
a5:98:27:45:f6:a2:fa:9e:c1:8f:4c:e8:90:09:2c:
ae:1b:44:5f:db:17:08:3e:42:d5:dc:5a:9e:d7:77:
53:c2:c5:06:43:5c:2c:ea:78:1b:d5:ae:d6:bc:5e:
cf:d9:c3:5f:c9:8a:37:0f:f8:ac:2d:ae:15:57:3f:
35:20:98:da:63:3a:ec:ae:9e:d2:f1:9e:e4:86:2f:
4c:84:ca:c9:10:8e:5d:d5:a7:14:ef:df:55:ba:6f:
cf:f5:8b:62:b3:3b:b3:5f:17:0e:71:8f:17:1e:03:
2b:62:4d:fa:9a:9e:75:5d:fa:70:72:1d:10:70:c5:
94:6a:20:ac:c4:e6:d0:33:82:ec:a5:c2:9f:ca:ab:
31:38:50:2f:15:12:12:69:bc:33:ce:0d:44:a9:48:
02:8b:1d:99:21:f6:90:fe:e8:50:04:f2:38:94:27:
6a:e5:b9:d9:cb:ee:e9:46:83:c9:29:a8:5d:8f:59:
a9:41:9f:c6:ff:a6:20:da:8a:f8:7f:70:ec:c0:39:
f9:f0:b2:8f:cf:d7:86:b6:72:84:29:91:ae:5f:a8:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:56:66:00:C9:FE:80:D7:6E:35:1C:15:41:01:B2:1A:19:05:DA
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:46:bc:e6:72:c0:a5:f6:a5:7d:39:01:f7:65:12:fe:62:27:
7f:1f:fd:f0:96:36:24:fc:e2:52:c5:9e:41:bc:9a:e9:6c:ab:
5a:0d:0d:4f:8a:eb:82:75:b5:63:2b:96:ce:18:9c:df:dc:fc:
c5:b9:24:22:14:6e:66:25:f5:e7:58:fa:f0:18:68:54:06:c2:
7a:48:93:f7:44:e8:7a:94:70:aa:b9:ea:72:df:f4:e5:af:b8:
24:15:61:26:5e:3e:17:ed:02:7f:4e:06:5b:fe:ca:16:3d:b7:
14:5a:a8:53:c0:35:68:a3:44:7b:4f:54:56:c0:e7:b5:98:12:
c4:ba:3f:39:bd:91:e2:71:9e:d1:39:d2:fd:47:6d:8f:46:aa:
a0:f6:a2:fb:1e:ba:e4:71:42:09:06:f5:02:e0:4d:d7:03:58:
b2:c6:be:db:d7:78:10:6e:f3:5e:a0:b9:f8:0d:72:0a:50:0c:
0d:0f:2a:47:4f:ef:b1:a1:53:98:19:93:6f:04:35:20:8b:17:
5c:52:bd:fd:97:6c:eb:80:10:8b:f8:ca:15:44:1f:46:6b:57:
e5:7c:8e:a5:f5:c3:32:7c:4f:d1:49:ce:b9:53:82:75:f0:e8:
22:e1:6f:21:7a:5d:00:89:2b:35:ae:5f:bb:07:e0:eb:36:e1:
12:39:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:26 2025 by rpki-client