Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: eMKLlw1rawCCDQifJAKZjP4OEg7G4vl6/Cd4E1twOx0=
Subject key identifier: 1D:B2:88:EF:2F:70:20:E5:9A:2C:64:83:A4:D0:FE:46:6F:CE:48:32
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 019A518729AD04FB7F169592F5729DE4128C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 01:00:03 +0000
Manifest this update: Wed 05 Nov 2025 01:00:03 +0000
Manifest next update: Thu 06 Nov 2025 01:00:03 +0000
Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: b7Y2qpTen4z0gjWc+Lvs+ebQ9c6fMQ1Iwn3h3N3mTyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:29:ad:04:fb:7f:16:95:92:f5:72:9d:e4:12:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Nov 5 01:00:03 2025 GMT
Not After : Nov 6 01:00:03 2025 GMT
Subject: CN=1db288ef2f7020e59a2c6483a4d0fe466fce4832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:c5:f3:7f:a9:d4:6b:a4:54:8e:70:ca:ff:
6e:5b:7d:9f:e3:c4:86:be:51:e2:9f:75:43:87:a4:
ec:95:1b:33:d2:47:12:84:c9:9e:61:2b:d8:5c:37:
41:ba:22:47:44:2d:d3:b1:1d:dd:39:af:76:5d:cd:
26:5b:12:28:f9:58:10:76:f1:2c:f7:f4:dc:43:a7:
1d:56:ce:fd:a3:68:06:c7:9d:49:ea:8b:1c:17:a7:
4d:9c:a2:5d:fc:93:22:77:c9:e7:79:3b:cb:c9:b2:
49:78:36:29:2b:f1:0f:84:11:e8:3f:39:80:90:2a:
30:d6:44:8e:06:49:d6:04:57:52:aa:46:16:11:ce:
37:b6:40:0d:05:65:6b:eb:11:c4:83:19:fe:8e:d3:
dc:9e:0b:78:38:95:22:46:1d:ce:1a:7c:6e:c2:37:
24:92:4b:61:31:d6:00:96:f8:f8:37:3b:98:b2:2b:
ba:3c:26:61:6f:97:62:6d:bc:86:37:27:b6:30:e7:
7d:bf:d7:54:5d:27:48:9e:d4:dc:df:dd:0d:67:4c:
8e:1c:35:e5:37:58:86:d3:af:d7:b8:e0:1c:1e:95:
1b:a1:22:e2:4b:43:ff:f4:5d:44:c2:d0:fb:82:05:
ea:16:15:cd:b6:ef:73:84:db:58:1f:db:9d:66:ac:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B2:88:EF:2F:70:20:E5:9A:2C:64:83:A4:D0:FE:46:6F:CE:48:32
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:15:c7:02:fd:4f:87:c7:02:85:c3:e9:d8:c1:ec:c0:68:f8:
9f:17:a8:84:6c:1b:ea:6f:8c:78:54:f9:c2:c1:14:aa:dd:26:
35:ac:c2:76:65:24:e7:1f:01:b3:bb:a2:9a:ba:96:f5:08:63:
22:92:73:ab:46:1d:ba:a1:10:9e:44:78:dd:d3:34:fe:02:c4:
cd:03:3d:62:a3:09:da:c9:14:17:67:8b:84:04:71:93:aa:bf:
f9:89:df:24:80:e2:16:27:3f:c5:05:ac:93:56:2b:07:7c:0a:
40:ec:be:57:38:49:6d:35:e0:b9:81:1c:62:bf:af:d8:d3:69:
28:cf:43:5e:dc:66:14:54:3b:a5:43:44:cd:bc:a1:b9:e8:6d:
85:38:5f:d3:d8:85:16:3d:a8:b4:1f:08:ee:fa:f4:e3:b5:be:
98:27:31:fa:17:d2:f7:3c:60:62:7a:f3:ac:17:84:ff:49:bd:
21:11:88:b0:f4:5b:d9:cf:18:b2:e9:db:09:ce:63:3a:60:87:
6d:a2:5d:68:fd:20:cc:58:88:b6:b3:b3:cc:af:12:6f:09:34:
80:e2:5f:87:df:41:8f:d7:53:b1:24:73:58:eb:1b:c2:5f:79:
9a:27:da:67:64:e4:c3:50:ac:bd:bd:aa:6c:e0:59:64:5c:ea:
e6:bc:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:48:34 2025 by rpki-client