Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: 2Y+oPw3/af4kj6DVEcbM/suBGMQwp/cIM3WOFZP0SD8=
Subject key identifier: 78:5F:6E:FA:ED:AC:4D:C9:F0:42:83:1E:B6:EA:EC:5E:37:33:78:99
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019A4D73EF48741DE643E578899D94FC8BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:34 +0000
Manifest this update: Tue 04 Nov 2025 06:00:34 +0000
Manifest next update: Wed 05 Nov 2025 06:00:34 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: 8vik/sGQXEMyN9SMTna6qRQCXtrp7NuuS5/AKqqfJsE=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ef:48:74:1d:e6:43:e5:78:89:9d:94:fc:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Nov 4 06:00:34 2025 GMT
Not After : Nov 5 06:00:34 2025 GMT
Subject: CN=785f6efaedac4dc9f042831eb6eaec5e37337899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:4a:d4:c1:17:30:71:47:44:b9:d4:2b:56:
02:be:2a:76:90:7a:58:7a:af:18:da:b8:5e:b6:e0:
49:77:c1:8d:75:d5:a8:f9:ea:d0:bd:98:0e:61:e9:
b3:06:09:ad:a4:bc:e1:e6:0a:43:38:6b:47:cb:28:
fa:d9:1d:e0:7d:7d:85:e7:73:e1:db:dc:4e:78:77:
d7:dd:8e:a8:4b:97:75:aa:d7:12:80:32:17:5f:d1:
78:6c:85:a5:c1:ad:4a:f1:85:78:28:e5:c7:6c:ec:
fe:6e:57:ed:a1:74:23:16:8d:7d:9b:a6:7f:9f:ce:
ef:4d:2d:47:ff:2d:d4:b3:fe:f2:aa:d8:a0:5a:da:
29:4a:69:d5:62:0a:95:44:89:22:cc:a9:f9:10:69:
8f:2b:78:0d:cd:61:fa:51:d3:7d:fd:3d:95:1b:c8:
ee:a4:d2:61:c7:78:4f:c8:43:bd:64:98:b1:bf:28:
f8:e5:14:96:5e:69:8d:83:cb:81:15:5d:97:6b:97:
79:22:3b:4f:75:83:f3:51:54:a6:25:78:1f:3c:22:
18:ab:a9:75:2a:a0:97:1c:ab:54:3d:d2:b4:de:7a:
3e:4c:1e:9c:15:70:d4:77:53:7c:6b:32:ab:26:e9:
fc:3e:d1:5d:86:1a:cd:6f:a2:e6:b1:ca:76:c6:94:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5F:6E:FA:ED:AC:4D:C9:F0:42:83:1E:B6:EA:EC:5E:37:33:78:99
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6c:87:b8:bf:3c:37:09:cc:15:41:5e:cc:8a:88:a4:a3:41:
a7:25:2b:ab:3a:cf:76:e5:9b:91:6e:ba:b8:a9:d6:6f:aa:22:
70:89:ba:a5:c8:93:af:20:85:23:42:fc:11:ed:e9:9b:8c:c0:
30:df:23:e1:71:e2:ea:67:71:e1:af:4f:58:83:74:c4:29:9b:
d7:53:5e:5e:e9:f5:d6:b3:f8:87:c2:6e:22:ba:7c:81:02:ae:
76:b9:a2:be:8a:37:25:6b:74:b3:2c:e5:9c:6c:e1:ac:5e:cc:
25:6b:ab:99:11:85:9e:61:d8:e7:67:fd:df:47:93:3c:c3:47:
89:b6:90:ed:8d:8d:e9:2b:15:7a:44:46:a4:c6:53:1d:6b:8f:
5f:e6:7a:fa:73:d9:b8:2c:1b:b5:77:6f:cc:ad:e4:8c:a4:3c:
3a:00:67:50:68:94:5d:07:20:3c:c5:13:a6:37:9b:88:db:f4:
78:0e:e5:70:7c:7f:f0:63:8f:cc:48:ac:9b:10:20:1e:ea:34:
36:39:8b:58:c3:a8:f0:84:2b:f7:c3:73:82:4b:02:a0:d3:71:
28:f9:45:2f:c1:13:ba:66:de:02:19:a4:3c:5c:43:bb:1d:25:
e5:69:0b:b4:29:a7:a0:ad:bf:ad:6a:aa:23:26:13:d5:bb:52:
ab:08:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:08 2025 by rpki-client