Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier: zDGcFLkGsYKacK+Rkn1t93+1aOU04eHcScSr9jxUR4Q=
Subject key identifier: 6C:FD:F2:37:6E:72:99:20:B0:C7:CE:9B:51:E5:CE:36:C2:49:93:15
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial: 019A50076A8DAE6A0F1B8EEA1472FAE58FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 18:00:54 +0000
Manifest this update: Tue 04 Nov 2025 18:00:54 +0000
Manifest next update: Wed 05 Nov 2025 18:00:54 +0000
Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: qcZOtVnKX7w1od2vDcbkb+MB0Nq2tRMwg6o87ma22P4=)
2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:6a:8d:ae:6a:0f:1b:8e:ea:14:72:fa:e5:8f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Validity
Not Before: Nov 4 18:00:54 2025 GMT
Not After : Nov 5 18:00:54 2025 GMT
Subject: CN=6cfdf2376e729920b0c7ce9b51e5ce36c2499315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:6b:1a:22:f3:b0:7d:a3:1a:41:5f:69:ab:
9c:11:3c:ce:08:23:ed:06:52:d3:2e:91:e5:a8:59:
ae:ec:6c:3c:e4:63:08:24:a9:32:9e:68:c6:bd:27:
10:ad:be:e2:8c:0b:09:12:2d:38:56:75:23:27:af:
25:d6:33:9b:d4:71:0d:21:04:f0:14:4a:3a:18:8b:
12:b3:31:9b:b9:1b:63:05:2f:86:8c:66:6d:54:15:
17:dc:a0:25:25:6d:3b:ef:ef:37:56:f0:df:7f:5b:
e4:2a:d7:28:ad:83:c1:7f:20:17:c9:25:a6:c0:83:
b3:e7:47:34:be:a1:14:bf:f6:d9:e2:17:81:0c:e3:
32:4b:2e:b1:d8:b6:e3:f4:e4:e5:77:dc:9d:7c:a3:
79:81:46:b5:80:55:76:e4:5c:a7:95:fe:3a:c5:87:
b1:54:f3:01:c7:1e:42:a8:87:76:c6:0b:00:ce:e2:
26:b4:4b:f8:36:f1:a2:a1:1c:fe:21:d3:a0:c2:e7:
dc:7d:12:79:1b:c8:71:e9:96:0e:76:de:f4:79:77:
ed:6b:4c:67:bb:ba:68:8e:6c:b7:03:84:ea:c6:2f:
d0:39:20:b0:62:a9:3e:d8:52:02:9e:44:c9:47:79:
9f:28:23:26:8b:1f:7d:02:dd:ec:f4:d3:0b:82:c8:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FD:F2:37:6E:72:99:20:B0:C7:CE:9B:51:E5:CE:36:C2:49:93:15
X509v3 Authority Key Identifier:
keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5e:27:bf:cc:b1:c4:50:fc:20:35:b1:89:9a:90:2f:1d:72:
d5:c4:53:95:78:5f:5e:a6:64:8e:f9:46:61:cc:9f:3e:4f:7a:
d9:47:3d:f8:5b:e2:ce:49:49:22:dc:ce:c8:08:21:7b:63:a1:
6a:3d:ba:b2:0e:be:03:81:5a:be:8b:a3:7e:12:c6:74:2d:38:
f1:5a:c4:5b:29:6c:46:3a:4e:81:2b:bb:1f:c1:79:1a:74:42:
a0:7f:98:78:f5:15:b8:8b:e7:1b:64:66:1b:db:34:3b:a9:2f:
cb:c3:b4:1a:d0:f3:de:74:ad:fa:ab:79:d9:7f:da:8a:63:7f:
ba:73:54:11:e6:d0:1d:9e:78:e5:30:85:76:7b:2a:0c:c6:8b:
66:05:3f:f3:15:85:32:c6:8d:35:28:69:23:d1:cc:48:4f:12:
52:e8:6d:52:97:52:7c:cf:23:d1:a2:bf:ad:c7:18:a5:32:af:
2a:9b:1a:b5:1a:8f:03:1f:9a:4c:3c:a9:75:bb:7a:ed:28:2b:
cd:19:ed:e6:83:29:62:1d:0c:ae:10:0f:ec:cf:61:d8:e4:65:
83:06:45:9d:10:4d:f0:91:37:ef:e8:db:3a:e4:a4:92:c9:09:
39:4c:f2:d8:85:a6:6c:21:e0:27:6c:a3:69:61:c3:fa:6d:e9:
fb:b3:24:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB2qNrmoPG47qFHL65Y+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MWU3MTc0YmY5ZTllYTFiNjRhOTJiYTY1ZmZjZjFlOTMx
Y2NlMzIwHhcNMjUxMTA0MTgwMDU0WhcNMjUxMTA1MTgwMDU0WjAzMTEwLwYDVQQD
Eyg2Y2ZkZjIzNzZlNzI5OTIwYjBjN2NlOWI1MWU1Y2UzNmMyNDk5MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFJrGiLzsH2jGkFfaaucETzOCCPt
BlLTLpHlqFmu7Gw85GMIJKkynmjGvScQrb7ijAsJEi04VnUjJ68l1jOb1HENIQTw
FEo6GIsSszGbuRtjBS+GjGZtVBUX3KAlJW077+83VvDff1vkKtcorYPBfyAXySWm
wIOz50c0vqEUv/bZ4heBDOMySy6x2Lbj9OTld9ydfKN5gUa1gFV25Fynlf46xYex
VPMBxx5CqId2xgsAzuImtEv4NvGioRz+IdOgwufcfRJ5G8hx6ZYOdt70eXfta0xn
u7pojmy3A4Tqxi/QOSCwYqk+2FICnkTJR3mfKCMmix99At3s9NMLgsh1GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz98jducpkgsMfOm1HlzjbCSZMVMB8GA1UdIwQY
MBaAFGYecXS/np6htkqSumX/zx6THM4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAt
NmJkODQ0ZWE4NmM3LzEvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAtNmJkODQ0ZWE4NmM3
LzEvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV4nv8yx
xFD8IDWxiZqQLx1y1cRTlXhfXqZkjvlGYcyfPk962Uc9+FvizklJItzOyAghe2Oh
aj26sg6+A4FavoujfhLGdC048VrEWylsRjpOgSu7H8F5GnRCoH+YePUVuIvnG2Rm
G9s0O6kvy8O0GtDz3nSt+qt52X/aimN/unNUEebQHZ545TCFdnsqDMaLZgU/8xWF
MsaNNShpI9HMSE8SUuhtUpdSfM8j0aK/rccYpTKvKpsatRqPAx+aTDypdbt67Sgr
zRnt5oMpYh0MrhAP7M9h2ORlgwZFnRBN8JE37+jbOuSkkskJOUzy2IWmbCHgJ2yj
aWHD+m3p+7Mk7g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:17 2025 by rpki-client