Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File: ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier: 5k4cK6TH6QSxtLv0Q1lzkMzPX+o5/eb1GbqhgKw9ePk=
Subject key identifier: 2C:B3:77:87:8E:36:49:94:12:DA:E4:43:38:E6:B3:75:48:59:7C:0E
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial: 019A4EF40032733A243F166C1422FD8DC0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:04 +0000
Manifest this update: Tue 04 Nov 2025 13:00:04 +0000
Manifest next update: Wed 05 Nov 2025 13:00:04 +0000
Files and hashes: 1: G6NrW3y5EqOh-RgJpBb737yZLyk.roa (hash: wCHunDZi4NJcQQFd2igk175J53d+RrxOeT27vR93kLI=)
2: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: MN3x3LAiWsJzhRTnYLdYVOyZrY1JC82B7qHQnoV8jDM=)
3: gzfX_YElaVuorbJFmzrDP83HpJs.roa (hash: /WT8uVeP+a0ogLSqro0SWXG/OOSeISwxGQticrGht7k=)
4: iIuGz7RbK5-6_sH4vM6hDlbmm84.roa (hash: NR09n14cZ06DE+j7XwmogKyYaQjIh4GJAdSuXipSGyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:00:32:73:3a:24:3f:16:6c:14:22:fd:8d:c0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
Validity
Not Before: Nov 4 13:00:04 2025 GMT
Not After : Nov 5 13:00:04 2025 GMT
Subject: CN=2cb377878e36499412dae44338e6b37548597c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:02:e7:1d:e8:87:80:a5:a3:f3:62:18:b1:
4d:6e:c2:a6:c2:83:57:b6:a0:a5:48:ed:3c:39:a6:
d7:7d:da:6f:fd:28:5b:47:85:f7:ac:e4:aa:e3:bb:
e0:b7:92:e3:88:ae:32:5b:b8:a8:e2:d7:72:08:7a:
7b:88:4a:d3:be:41:d7:d5:b4:69:c4:fe:e0:b4:0a:
92:99:14:ba:94:fc:a9:2c:06:5e:fb:16:6f:37:d1:
8e:cb:40:bc:d9:01:d1:84:86:a9:65:ca:cf:8e:bd:
2e:80:a8:3c:40:8b:49:cd:ab:4b:ce:27:83:7d:54:
60:74:07:40:e6:e4:20:77:b7:bb:36:0f:cb:10:55:
c2:70:d8:a6:5b:b5:78:53:8a:a8:0b:d3:37:54:79:
01:85:0b:72:89:89:f2:45:e5:49:71:34:f8:4c:a1:
47:4d:bc:f4:f1:e8:b1:06:55:22:d1:10:b8:0d:0b:
8b:a9:f5:d4:71:b2:81:6b:3c:80:39:dc:5c:94:b1:
21:3a:3b:26:d5:e3:a1:67:66:53:f4:c7:b5:4d:c7:
7e:f5:d3:90:72:5c:ed:37:29:7e:b9:3f:0c:39:07:
eb:2c:42:46:2f:bc:58:d5:3e:0d:e4:eb:fc:aa:fc:
a4:b2:a3:8d:81:a9:e8:9f:66:ab:5b:0c:3f:55:d6:
41:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:77:87:8E:36:49:94:12:DA:E4:43:38:E6:B3:75:48:59:7C:0E
X509v3 Authority Key Identifier:
keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b7:03:6a:14:64:dc:f0:2c:72:58:f6:9d:39:b8:84:37:17:
f5:36:60:3d:34:c8:4e:c8:68:f7:17:ed:53:e3:14:ae:89:97:
88:42:34:0e:0b:15:5f:cb:f7:e1:d2:33:ab:3a:46:db:87:69:
fb:2c:0c:87:71:cd:bc:83:ff:09:e4:ee:d0:aa:2c:8c:ce:8c:
a4:f7:0d:a4:86:6c:29:24:7e:e7:66:03:35:32:89:d1:bc:01:
a7:27:19:60:12:2f:7e:18:c6:c5:5c:7a:78:c3:1e:fa:a1:a6:
5a:8c:4b:b8:62:89:3a:23:58:12:00:36:aa:07:67:49:bf:25:
6f:7b:a4:14:68:29:16:74:d2:4e:b6:f2:cf:b5:47:fc:59:17:
60:78:62:9e:d2:47:da:54:62:0c:ac:45:fb:5d:ac:c9:58:b0:
27:38:5d:7b:a2:ca:7b:90:91:57:98:73:ad:f5:b6:3c:9e:35:
79:aa:f2:f1:81:c3:34:17:da:cf:51:b7:12:72:db:90:6b:b8:
ef:f3:d1:9c:e9:58:17:87:43:56:ef:a7:23:04:f9:eb:a6:74:
87:f4:7a:48:30:3b:ff:51:a1:4a:bc:ea:85:a2:41:b2:31:57:
3e:cd:ee:ab:b9:c2:fa:95:bc:37:65:ed:3f:05:31:0f:25:e6:
47:76:51:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:57 2025 by rpki-client