Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File: Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier: a/1iIydTYn33q1mv6ugxQ9pHK4T1knL4KVihh8k/1N4=
Subject key identifier: D0:D5:40:5D:01:5C:4B:D2:51:5D:8A:3B:28:5B:51:12:D4:D4:DC:DE
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial: 019A5007620D19EAD1F13E6FA29D65470B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 18:00:52 +0000
Manifest this update: Tue 04 Nov 2025 18:00:52 +0000
Manifest next update: Wed 05 Nov 2025 18:00:52 +0000
Files and hashes: 1: 7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa (hash: k+U35adZwDUqbZfONZN9YxBvYnb8OmgnqwbSFhlvMsw=)
2: Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa (hash: IbN6B6NWFefTjZbMVpJkmbwj8ZHivUrVhvuHXNdd+oQ=)
3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: p4UOUdrGGxyz2I132nYdMQJ5gX2GZQ6pEI+pHnmbkoU=)
4: jFXSmkjEC26c8mxhOetY3rp2Ccc.roa (hash: olcLB40Oa+I2BCFt/Z0AGNONx90qq/xMtLVV5Y1vQVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:62:0d:19:ea:d1:f1:3e:6f:a2:9d:65:47:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Validity
Not Before: Nov 4 18:00:52 2025 GMT
Not After : Nov 5 18:00:52 2025 GMT
Subject: CN=d0d5405d015c4bd2515d8a3b285b5112d4d4dcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:79:79:bf:c3:a4:2d:a4:c4:50:cf:8e:c9:
23:6a:4c:00:94:7c:e9:55:c9:76:55:2f:d9:e0:32:
9f:72:80:bb:5e:44:7b:df:83:b2:4d:71:07:5a:85:
41:15:1a:5a:76:2a:1a:a8:cd:0f:05:a4:85:65:be:
f1:f6:00:b2:47:95:4c:7e:b9:f2:33:ca:05:96:9c:
5b:94:d8:bd:e7:16:73:be:fe:07:55:92:61:d2:96:
85:43:d9:b4:9f:b9:da:18:02:70:a8:90:33:db:06:
b7:09:0d:7d:f6:5d:d4:ec:35:c8:02:68:58:d0:9e:
6f:b2:bd:c7:5a:8a:f0:ef:8b:6b:18:90:8e:f3:81:
20:67:c9:e3:b3:dc:7b:95:ed:81:ff:49:75:0e:59:
89:f8:37:23:05:42:b5:bf:ad:8f:90:28:55:ba:36:
0d:28:2f:3d:5c:8b:61:a1:6e:10:06:4e:f7:8c:73:
9d:f9:38:c6:0e:6a:2e:9a:c7:01:1f:47:e0:fa:54:
0e:86:0a:f9:da:3c:c6:52:4c:ca:c2:a1:b5:9c:d1:
75:ef:aa:21:34:37:09:f3:14:28:09:28:ad:b5:ea:
da:8d:af:6f:d0:09:e1:9d:de:b1:e4:0f:c0:ea:99:
53:db:b8:a7:d9:94:78:98:27:1e:75:d3:33:13:40:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D5:40:5D:01:5C:4B:D2:51:5D:8A:3B:28:5B:51:12:D4:D4:DC:DE
X509v3 Authority Key Identifier:
keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e8:3e:e5:74:bf:11:6e:79:3d:28:a0:b5:8d:ee:6c:88:06:
81:f6:57:a3:a8:c3:10:b0:eb:ac:4e:45:68:54:9a:8c:74:2a:
d2:ce:cd:c6:e4:3b:36:56:b6:20:dd:a2:d0:41:37:86:f0:b9:
2a:6b:39:15:b3:3f:bc:26:b0:7e:0c:b3:55:3c:4b:f1:f4:be:
76:56:12:94:66:15:f7:cd:66:aa:59:28:c8:6b:8a:ab:b6:f1:
69:12:3d:ee:c9:ac:65:ea:0a:41:7e:cf:70:32:f5:01:ab:75:
8e:41:b8:d8:99:31:c6:20:4c:ae:16:3e:cf:5b:5d:c3:f2:08:
4f:ea:f1:b6:19:32:86:b8:ef:71:da:4e:ba:86:2d:6e:3d:93:
33:1f:a3:8d:77:9b:5f:18:04:fd:70:4a:0b:a0:f4:51:b2:c6:
07:b6:0d:f7:26:97:24:12:32:73:ee:7a:93:0b:3d:37:92:b5:
69:a2:38:ab:cc:65:1d:26:73:15:0f:13:e2:56:1b:1b:89:23:
21:99:68:4b:30:a1:01:34:de:0d:db:43:a3:4b:90:30:bd:d5:
9d:12:da:22:01:83:a8:e7:38:ad:e2:96:63:9d:71:2c:53:61:
ee:5d:0c:de:64:15:b4:e9:39:9a:08:e7:01:ae:1e:d8:b7:36:
16:42:5a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:47 2025 by rpki-client