Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: NpeKLQFq6nsCV3sxsJlWdKs6NgSybE0FjiZEb2+3HCQ=
Subject key identifier: CC:1C:95:B7:75:94:C4:5E:86:0C:D9:5F:B3:73:72:47:47:98:41:0B
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019A4D7389DF68F7D0019263883804FBEEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 0FB6
Signing time: Tue 04 Nov 2025 06:00:08 +0000
Manifest this update: Tue 04 Nov 2025 06:00:08 +0000
Manifest next update: Wed 05 Nov 2025 06:00:08 +0000
Files and hashes: 1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=)
2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: VpZjlWsqPjP+HdrRB5OD53lu1QMvYWnilNaLSwM2HBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:89:df:68:f7:d0:01:92:63:88:38:04:fb:ee:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Nov 4 06:00:08 2025 GMT
Not After : Nov 5 06:00:08 2025 GMT
Subject: CN=cc1c95b77594c45e860cd95fb37372474798410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:4a:5f:77:b2:72:69:f8:ae:56:a3:42:d7:
e6:3b:1b:a1:78:21:c5:fc:42:e7:bf:c1:cc:25:0c:
be:7d:df:23:a6:f8:4c:b3:8a:fc:e6:f1:59:8c:88:
c7:4d:ce:98:c1:21:7c:26:9c:ad:97:13:b4:b5:3e:
1e:12:2d:b0:b3:a5:7a:49:6e:c9:bd:97:c2:8d:81:
a0:9e:7f:cc:49:4a:5a:33:cb:77:d6:dc:04:42:2a:
12:0f:72:9a:45:07:4b:bf:4e:50:93:e7:01:61:85:
e6:13:fa:c8:fc:63:68:29:03:4a:66:82:db:4f:89:
d3:ad:78:f0:c3:bf:9a:da:37:9d:73:e6:bd:6a:ef:
01:0c:f8:37:63:6d:24:71:92:62:df:8b:dc:68:f4:
7d:49:35:87:ee:15:e0:01:98:5c:09:22:60:ea:6d:
c6:e4:08:f3:05:0b:17:b2:7f:ca:37:5e:e0:86:f3:
7b:cb:5e:d6:68:60:d2:c1:06:a0:0b:63:c1:b1:23:
a2:25:76:f1:19:d2:7f:76:2b:ad:de:f4:d7:74:c3:
d4:73:ed:59:ae:06:6e:64:a1:1a:37:05:91:b6:74:
c3:e0:90:16:8b:51:66:b0:62:a0:ae:68:aa:ce:eb:
87:f0:55:fb:28:5f:2a:1c:a7:e3:28:5d:5d:b7:2f:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:95:B7:75:94:C4:5E:86:0C:D9:5F:B3:73:72:47:47:98:41:0B
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2f:a9:ba:a4:e1:1f:e9:9d:96:52:75:9c:c1:a7:72:9f:f0:
5a:b8:9c:bf:c0:e6:22:3b:7b:23:d9:ea:31:41:48:2f:88:de:
b3:8f:fe:d7:21:a4:b5:64:ed:a7:da:66:ab:ec:90:db:38:17:
fe:11:b3:04:4d:9a:60:62:92:61:97:b3:fb:66:9b:a7:3b:55:
a0:62:67:66:71:01:9a:9c:bd:0c:a1:8d:ee:7c:50:ff:51:eb:
c6:cb:99:e6:c5:f6:dc:0e:0b:99:27:91:59:71:af:81:a2:bf:
4f:f4:8a:84:bf:98:06:99:07:87:2a:e6:1d:89:f0:99:62:21:
fa:a9:60:ef:43:18:6a:e7:83:44:80:b3:d4:5f:a5:de:c2:c6:
70:ae:87:65:fa:ae:cf:5e:f9:d6:55:1b:7a:df:fc:27:8b:77:
56:1b:bb:de:95:cc:bf:7a:83:77:a9:d8:c3:3d:de:f9:fd:5e:
0f:45:1c:96:e9:27:a7:0a:b7:3a:67:3f:e6:d8:89:33:29:5d:
ce:42:8b:f2:c9:bd:37:3b:03:74:f4:bf:e3:61:a5:98:90:96:
3d:a6:a4:66:65:2c:b2:38:a7:dc:b9:a9:ff:df:bf:a0:21:8a:
4f:39:69:54:68:2a:ea:30:26:b3:c4:b4:27:61:0a:34:15:1a:
bd:a0:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:04:07 2025 by rpki-client