Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: VtOagCKmJ0eLCN8tZHNlF3mSoC5uuykHTpk03gZrwDE=
Subject key identifier: 3D:6F:44:A9:10:E5:36:65:03:B3:DD:35:78:6A:2E:1A:03:6D:20:09
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 019A4EF4C53B5AF68F42BF4DE813EEA308DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:55 +0000
Manifest this update: Tue 04 Nov 2025 13:00:55 +0000
Manifest next update: Wed 05 Nov 2025 13:00:55 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: oKGr1DMNxbVFC4OMXI5hN9uMeBscWpY+UwS+ptE0skE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c5:3b:5a:f6:8f:42:bf:4d:e8:13:ee:a3:08:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Nov 4 13:00:55 2025 GMT
Not After : Nov 5 13:00:55 2025 GMT
Subject: CN=3d6f44a910e5366503b3dd35786a2e1a036d2009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:86:5d:73:5c:58:e7:f3:3f:e2:6b:bb:10:
4c:b8:14:4a:32:d6:e2:de:ba:a1:15:08:60:61:34:
57:e0:5f:5b:84:69:5b:86:28:12:d4:67:3b:03:74:
f6:f3:a4:2b:e1:25:fd:ae:02:7a:09:ac:6b:91:8f:
07:03:1b:0f:60:67:80:55:94:f6:98:cf:92:fe:55:
c7:99:20:aa:72:2e:ea:88:08:51:60:49:f3:10:d5:
0e:72:b8:27:44:58:0e:cc:99:e5:d9:07:a1:ad:9b:
69:7d:e6:ad:1f:ea:df:28:b4:83:3b:cf:7c:8b:1c:
3e:dd:99:60:69:10:11:d5:7d:78:f0:68:37:8f:dc:
c6:f4:b6:9f:3f:96:26:4d:f5:9f:9a:83:fa:17:08:
a5:e1:de:07:dc:f9:93:f6:27:0c:0f:32:61:6c:e4:
fd:a0:17:4b:11:3b:63:ee:cd:54:18:b6:6d:f8:d3:
be:6b:c7:1e:71:a8:40:7e:ec:5f:ab:93:58:2c:f5:
7d:88:ef:e8:92:ae:30:3f:71:c9:8f:9e:b5:a7:5d:
ae:29:25:fa:f8:2a:ee:01:93:e4:14:8a:61:c6:19:
f6:62:99:01:82:18:71:47:a2:3a:0f:44:f6:2f:40:
d6:41:36:83:c6:2c:92:89:5d:86:3d:1e:0b:ac:70:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:44:A9:10:E5:36:65:03:B3:DD:35:78:6A:2E:1A:03:6D:20:09
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:97:02:2c:eb:2d:02:4b:6a:c9:47:79:d6:8a:72:16:99:a4:
39:a1:9e:19:04:b7:b1:74:e0:3b:72:f9:21:52:8e:f0:84:e1:
03:e6:23:f7:37:d8:9e:42:41:18:65:23:d6:1f:79:f0:27:9d:
af:cc:18:c7:89:19:db:ff:06:d2:b5:d3:b4:38:42:9f:b8:8a:
87:63:f8:a7:eb:ef:71:81:6b:41:00:99:2b:2c:af:36:66:b9:
ef:71:8a:f5:cc:26:73:4f:ff:15:cb:71:f8:4e:9d:93:75:08:
f3:25:10:f9:9f:59:a0:f0:cd:5a:9e:4d:9a:49:63:b7:59:76:
f4:6f:26:75:e3:52:e5:4d:be:a4:7c:e6:78:84:aa:3a:1f:9b:
ed:05:fc:22:e2:3b:98:eb:65:81:d3:af:55:9e:f4:81:52:c6:
e2:c5:1c:0e:82:99:37:40:6c:4c:cb:12:62:b3:67:eb:d5:fd:
3a:71:20:b3:d6:78:09:e2:9c:02:b5:74:b2:01:a8:f0:3a:43:
a0:47:65:88:b9:99:45:68:90:0e:40:c4:1a:af:c3:5b:0f:1d:
ad:b2:80:c3:56:47:e5:b2:57:89:38:11:dd:36:5e:8f:6c:72:
7a:9e:f0:b6:84:ce:8d:fe:23:65:52:32:76:fb:a8:49:d7:bd:
35:7b:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:51:47 2025 by rpki-client