Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File: Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier: 2U4Mf9gl4iMvxI/SAkte8GalE/jag7czG/4KfRdXAPM=
Subject key identifier: DE:5D:97:F5:00:50:79:47:36:17:98:AB:FA:4B:D8:AA:60:5D:D2:55
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer: /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial: 019A4DE1F7FEBA97C1259EB28E6CB5DC7D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:46 +0000
Manifest this update: Tue 04 Nov 2025 08:00:46 +0000
Manifest next update: Wed 05 Nov 2025 08:00:46 +0000
Files and hashes: 1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: mRfguOip2eer6NOx+nYZTX78Zw05fni5xM7G00XAtCM=)
2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f7:fe:ba:97:c1:25:9e:b2:8e:6c:b5:dc:7d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Validity
Not Before: Nov 4 08:00:46 2025 GMT
Not After : Nov 5 08:00:46 2025 GMT
Subject: CN=de5d97f500507947361798abfa4bd8aa605dd255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:d1:39:fd:2a:f5:26:4a:47:59:ff:37:5d:
70:b3:69:e1:2b:a1:c1:98:23:fb:51:5f:ca:2b:51:
34:69:ef:d5:e1:e6:63:6d:3f:dc:80:bb:95:29:84:
0e:86:51:bd:b7:0b:e1:a0:8c:20:70:5b:7a:b5:12:
d3:41:e2:a4:26:7a:20:94:85:1d:ea:18:ec:c4:bf:
72:6a:7e:79:e3:cb:c4:38:5a:d8:ff:e0:ae:fc:d4:
49:83:36:a9:fd:fb:39:f9:2b:b3:c2:0e:86:c5:a1:
fa:f9:1f:a9:4a:4b:f5:37:82:f2:1a:cc:25:e5:66:
a9:a9:a8:a8:68:66:33:1f:63:f8:9f:bc:1e:5f:95:
b8:dc:1b:61:b3:5e:08:4a:81:cf:58:7d:cb:ad:78:
ca:da:ba:6c:b8:88:f1:56:3b:89:0b:b2:14:ce:df:
3c:42:e6:f4:cb:e0:44:cf:43:93:74:57:48:47:bf:
22:68:83:87:20:52:ec:d7:70:b1:00:d5:60:9c:1f:
73:7c:59:79:53:d6:9b:4e:94:63:1d:b1:cb:d5:ab:
b5:cd:c5:ea:07:c6:4b:ec:bd:7c:d8:84:b2:52:05:
ff:9f:96:e8:30:b1:07:91:a9:78:7a:c1:42:4d:40:
2c:28:1c:f2:69:ec:90:11:c2:dd:24:b8:72:ce:af:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:97:F5:00:50:79:47:36:17:98:AB:FA:4B:D8:AA:60:5D:D2:55
X509v3 Authority Key Identifier:
keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:3d:32:cf:3e:0f:a4:43:81:44:a3:9f:58:a5:9b:d4:81:
a6:33:da:ff:65:00:0b:b2:67:23:45:46:bc:94:20:ca:2f:d1:
e4:5f:0c:af:a0:1e:9d:6e:64:8a:82:6b:aa:7a:8d:ad:a2:c6:
b2:23:8e:73:7d:b8:37:c8:87:66:df:af:26:0e:45:ab:b4:2f:
0b:ef:52:f0:88:0d:a4:5e:87:5e:41:24:b0:57:ac:09:b0:1e:
03:66:10:a2:06:89:f6:1e:3d:35:77:78:18:57:42:e1:15:e5:
c7:10:8e:93:03:4d:d1:f5:bb:22:7f:9a:64:b5:0a:5a:3c:fc:
45:76:72:dc:08:9a:c3:21:f0:fe:45:26:1a:a8:78:59:bb:69:
db:de:ee:be:ca:42:d8:06:05:ac:22:3c:a9:29:3d:a0:bd:47:
34:e7:c8:26:df:83:3f:51:78:04:45:ae:70:22:8d:6d:38:27:
50:4c:e9:aa:27:62:95:90:f4:bb:cc:b9:c2:28:07:e1:6b:37:
2e:7a:10:13:d8:24:ad:d8:d8:db:dd:f7:f1:be:c0:09:0c:09:
c6:08:83:9c:6f:ef:e6:8c:dc:30:64:0b:8f:d7:82:61:04:fa:
29:c9:36:e7:b3:36:7b:de:0b:34:e9:3d:27:0d:01:d0:6b:d0:
6b:0c:2f:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4ff+upfBJZ6yjmy13H0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2FlNWVkN2NhOGJkNWY4ZWZmMzBiMGU0N2FiNGRmOTM4
MjhmZjEwHhcNMjUxMTA0MDgwMDQ2WhcNMjUxMTA1MDgwMDQ2WjAzMTEwLwYDVQQD
EyhkZTVkOTdmNTAwNTA3OTQ3MzYxNzk4YWJmYTRiZDhhYTYwNWRkMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7jROf0q9SZKR1n/N11ws2nhK6HB
mCP7UV/KK1E0ae/V4eZjbT/cgLuVKYQOhlG9twvhoIwgcFt6tRLTQeKkJnoglIUd
6hjsxL9yan5548vEOFrY/+Cu/NRJgzap/fs5+Suzwg6GxaH6+R+pSkv1N4LyGswl
5WapqaioaGYzH2P4n7weX5W43Bths14ISoHPWH3LrXjK2rpsuIjxVjuJC7IUzt88
Qub0y+BEz0OTdFdIR78iaIOHIFLs13CxANVgnB9zfFl5U9abTpRjHbHL1au1zcXq
B8ZL7L182ISyUgX/n5boMLEHkal4esFCTUAsKBzyaeyQEcLdJLhyzq9FswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5dl/UAUHlHNheYq/pL2KpgXdJVMB8GA1UdIwQY
MBaAFGZ65e18qL1fjv8wsOR6tN+Tgo/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2Ut
NGE5Y2UyMTMxYjQyLzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2UtNGE5Y2UyMTMxYjQy
LzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMQ9Ms8+
D6RDgUSjn1ilm9SBpjPa/2UAC7JnI0VGvJQgyi/R5F8Mr6AenW5kioJrqnqNraLG
siOOc324N8iHZt+vJg5Fq7QvC+9S8IgNpF6HXkEksFesCbAeA2YQogaJ9h49NXd4
GFdC4RXlxxCOkwNN0fW7In+aZLUKWjz8RXZy3AiawyHw/kUmGqh4Wbtp297uvspC
2AYFrCI8qSk9oL1HNOfIJt+DP1F4BEWucCKNbTgnUEzpqidilZD0u8y5wigH4Ws3
LnoQE9gkrdjY29338b7ACQwJxgiDnG/v5ozcMGQLj9eCYQT6Kck257M2e94LNOk9
Jw0B0GvQawwvyw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:43 2025 by rpki-client