Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: 6HKiLLKQlmbGtJhgiigYYhe3/GxmGKam++YZDBBfmU8=
Subject key identifier: 4B:64:1C:07:1A:3A:E4:AF:FF:53:B5:A9:CA:A1:01:5B:49:27:6B:01
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 019A4D05FC637C906B5729461FCDA6B72B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:00:29 +0000
Manifest this update: Tue 04 Nov 2025 04:00:29 +0000
Manifest next update: Wed 05 Nov 2025 04:00:29 +0000
Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: Q6FTvELXm9giACI8XYJ98VHyKfQqWV+D5nW5/fpweqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:fc:63:7c:90:6b:57:29:46:1f:cd:a6:b7:2b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Nov 4 04:00:29 2025 GMT
Not After : Nov 5 04:00:29 2025 GMT
Subject: CN=4b641c071a3ae4afff53b5a9caa1015b49276b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:3d:5a:11:30:a7:ad:2d:2c:b0:a8:ca:f1:
76:d0:8d:03:73:5a:4b:0a:a9:d2:e0:07:d6:f2:29:
b9:ac:c7:4f:71:e1:3a:63:e0:6e:33:38:c5:7f:b5:
83:70:ba:c7:ef:9d:35:d8:35:a3:38:96:20:ba:03:
3e:95:c5:48:14:c6:80:80:3e:36:26:4f:6e:81:e3:
b9:ed:28:bf:13:c8:ad:5e:35:2d:5f:9d:07:5b:52:
53:3b:a1:95:0f:b8:e4:89:22:cf:69:d2:cc:87:ba:
42:3e:a3:46:f9:af:bb:3e:b1:bb:46:f1:8d:0a:4c:
19:59:f9:ce:fd:98:a1:52:e4:f1:ec:a8:b1:64:5e:
c5:10:6e:da:08:73:c0:2e:97:87:51:b8:0e:0d:f2:
38:10:b2:27:e3:e0:3d:e1:09:46:e7:b6:74:bc:32:
78:1c:33:66:1b:84:62:5e:bd:8c:64:80:c8:7d:b3:
1e:f5:33:1a:ab:92:7a:80:51:99:b2:07:13:7f:c6:
00:7a:78:f4:ee:81:67:b2:93:e0:f8:9c:60:3b:e6:
57:57:bf:bd:eb:e4:8d:fc:ce:79:9b:e3:a8:6f:84:
1a:e9:b4:5c:8c:6c:4e:bf:a5:7d:96:61:ff:16:5f:
2a:19:d6:8a:dc:d0:6d:c0:92:04:f4:90:01:02:c9:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:1C:07:1A:3A:E4:AF:FF:53:B5:A9:CA:A1:01:5B:49:27:6B:01
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:44:a0:c6:c3:be:a2:c6:b2:8b:73:87:64:31:80:58:be:91:
fc:66:16:dc:5a:05:ae:ea:51:67:5d:f1:00:f1:0d:7d:1b:d2:
7c:f1:73:01:10:66:56:00:63:20:f4:f1:8b:11:a5:57:f3:7c:
b0:9f:31:c3:96:08:2a:20:1a:c1:6e:39:e8:03:0d:11:11:9b:
84:0b:f4:64:d8:f9:e3:9e:48:d8:7a:f4:31:25:a0:52:be:32:
eb:f7:d7:af:62:86:b8:ac:a5:2b:b2:d2:18:a8:02:4d:6e:86:
e1:2c:03:cb:ba:49:ac:87:8f:8d:b1:84:77:12:95:b2:fe:18:
55:53:a6:ca:20:29:a1:16:83:c3:4a:6f:11:9f:76:bd:c2:01:
4c:6f:76:e8:e1:d9:2d:00:8c:79:bb:d6:9b:0f:88:71:77:d1:
4c:b0:d7:4b:18:36:dc:f4:36:4a:aa:19:8b:35:f5:0a:b3:5a:
f5:dd:9f:ab:a3:c4:fa:75:78:ee:71:aa:30:97:08:57:10:62:
f8:03:d9:12:02:28:b1:0b:d1:86:01:ea:75:9b:c4:0c:55:e7:
59:db:ab:72:3b:ed:da:40:2c:98:5c:d0:45:fd:a2:73:6c:f3:
a6:8c:9a:16:90:e1:8f:59:ea:e3:c4:de:2d:6a:1e:37:84:7f:
01:45:97:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:02:43 2025 by rpki-client