Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: 4+ABjP47PUMHh91ItJh013Yzr2+aAO46+qxdlZVjQsk=
Subject key identifier: 21:B7:8A:FE:1C:3C:BC:2B:36:E4:99:45:D6:A9:49:26:68:01:BA:81
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019A5006F931E005D1B1A39CF874017423C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 171B
Signing time: Tue 04 Nov 2025 18:00:25 +0000
Manifest this update: Tue 04 Nov 2025 18:00:25 +0000
Manifest next update: Wed 05 Nov 2025 18:00:25 +0000
Files and hashes: 1: kNClGUwsPzE1RbZ5kG_8xETA5bQ.roa (hash: roFZQPowyRc/yMP0/ECMaCg3rilRHfIteyaYIvj0RIc=)
2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: edBPkAnbBOXIc07u7UO4jX50ME5TtDZUceYPizHJYJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f9:31:e0:05:d1:b1:a3:9c:f8:74:01:74:23:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Nov 4 18:00:25 2025 GMT
Not After : Nov 5 18:00:25 2025 GMT
Subject: CN=21b78afe1c3cbc2b36e49945d6a949266801ba81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:de:a9:30:f1:5b:28:cd:b1:21:3e:f3:bb:
f9:9c:09:38:7b:37:b6:96:e6:74:89:ab:23:74:99:
7b:c1:66:ef:c7:75:64:f4:b7:8f:ba:8e:58:06:67:
80:19:ca:9f:7c:3b:31:b3:d8:55:d9:d2:77:07:4d:
29:af:52:1f:b5:1a:05:03:53:85:e9:07:78:a4:fa:
0e:53:b7:34:b6:ad:01:0e:ef:86:bf:05:05:b0:4a:
1e:5e:46:03:e0:42:86:17:af:e2:c5:04:32:d7:c9:
af:11:02:88:e9:77:5c:66:d7:d0:4a:13:24:fa:1d:
97:66:8a:0c:90:c2:02:c3:9a:ac:07:02:db:bb:ca:
df:92:4a:12:a1:b8:34:1e:66:c8:48:34:45:7c:29:
3d:38:d0:ae:81:5f:88:62:6a:bd:1e:40:a6:a6:93:
7a:b4:a5:a5:76:9c:66:3c:9a:aa:fc:1a:ea:76:a0:
02:25:83:38:a7:c1:38:6f:7f:50:cd:1b:41:9f:6b:
ad:60:48:67:39:b4:a4:e8:80:96:86:da:e6:52:7b:
f8:0e:60:d6:59:e9:fa:9e:15:a1:d8:29:18:90:37:
eb:57:69:28:2d:53:c3:73:47:80:7c:7f:a7:60:42:
df:ad:59:59:bf:5a:51:f3:d8:0f:93:12:5d:19:75:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:8A:FE:1C:3C:BC:2B:36:E4:99:45:D6:A9:49:26:68:01:BA:81
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:02:3c:0a:95:36:f3:24:c5:0b:47:be:75:27:20:89:53:14:
5c:0f:d2:9c:f2:a6:b1:0f:05:c6:d2:98:c6:6d:2a:93:4b:a3:
c4:af:dc:6d:29:13:90:c2:c7:32:f8:97:f0:d8:1c:a2:82:c6:
08:a6:a7:9a:be:e1:e2:02:e7:8a:44:0f:99:b9:f9:fc:17:31:
32:67:2b:1c:04:82:4a:93:a4:ed:0a:76:d8:c1:4e:f7:73:34:
ad:22:61:00:1d:4c:4c:95:c4:3e:d3:3a:11:4c:ab:5c:97:5f:
eb:e3:71:eb:25:d8:21:85:55:6f:0b:6b:a5:a9:fe:12:2e:b0:
0f:a4:4b:c2:ef:3d:ba:9f:fc:1f:b5:e5:df:97:08:7f:1d:2e:
5f:00:93:5f:91:97:16:ff:6c:c7:82:b8:87:d7:8f:0f:1b:70:
11:71:21:58:1c:d8:2b:29:84:5a:a0:c6:e0:bf:89:75:69:84:
e4:80:4a:56:d8:74:eb:b5:e6:9a:13:a6:92:54:a3:2b:cf:39:
aa:6b:16:2e:60:72:f4:75:14:a4:02:07:93:b6:9d:74:44:fc:
dd:97:e0:14:e3:65:24:49:8a:2c:96:3d:fb:b2:24:66:3c:5b:
8a:e0:4e:af:1c:97:f5:89:cc:fd:4c:06:fe:03:10:e3:17:ad:
b9:31:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:35 2025 by rpki-client