Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier: dRbDbVNQemVWoBxFH15eyYobArM2Jp2cYcZtaTlZIbE=
Subject key identifier: AA:2D:F2:1F:2F:DE:9F:32:7B:CA:0F:79:BF:FD:24:E0:A4:81:CA:C6
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial: 019A4E4F7D88C51C695BB4EDE16397175F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: 27WBhhpGCu8KcUXHgHNDtyT7qA4.roa (hash: hASVoi4FkuHDPpmp5IMQcLI7MKWjHmB6IplIj3b2UNs=)
2: BlXtwuXJZi1FsUYJseJuuvLHwG0.roa (hash: E+H4MQ+p60pNwEw6UNfCnrSspvLH+GiOyo4ssEl9XXQ=)
3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: 4tzfU5sg+U+ekqFvosF7ZvalGQP9oJrGvR4P5XYzVlM=)
4: l7PaOk1ocbrgfH7RkR-EmGKNBYI.roa (hash: 2MdjtNxo4ObSDeeX352JxmkPKpeMrJB/59RsZtzSS9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7d:88:c5:1c:69:5b:b4:ed:e1:63:97:17:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=aa2df21f2fde9f327bca0f79bffd24e0a481cac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:9b:01:37:6a:37:40:3e:65:63:65:76:d1:
5a:d5:81:9b:49:d7:ee:9d:7d:e0:fa:7b:ba:22:1f:
63:25:8e:db:48:31:3a:af:39:85:2b:63:7f:74:c2:
2a:5d:c7:d8:78:4c:e1:db:0e:a6:f2:36:ff:ea:0d:
43:3e:75:7f:ee:f3:de:93:a6:eb:6c:e8:0b:9d:5b:
c8:f7:54:53:7a:db:67:4d:bd:a4:53:71:4c:7f:53:
ac:1c:88:37:d4:2b:43:7e:1d:1a:bc:f9:6e:79:e5:
7a:05:bf:bf:60:a5:24:ae:38:10:cf:d8:94:c3:de:
00:b8:d5:c9:27:bc:54:4b:74:c6:0d:02:39:4f:61:
07:ab:bf:c4:8a:03:7c:40:24:2e:df:2a:a2:eb:af:
5a:2d:73:22:42:9f:24:0c:e1:85:5a:fc:31:cf:37:
f3:c5:54:3e:8c:9a:d0:aa:f0:51:3d:3a:4c:2d:f8:
7e:21:8f:75:96:6e:65:17:20:13:b3:47:8f:87:1c:
5c:b9:72:d1:2f:4a:46:b5:20:95:98:c5:52:b7:58:
c8:e5:9e:f5:be:65:cd:4b:e0:2d:c4:6b:a6:18:50:
14:ec:e8:8d:0d:e9:90:fa:72:df:89:39:fc:9e:bd:
bc:bf:16:bd:5f:a9:10:aa:73:0f:20:1e:3c:26:19:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2D:F2:1F:2F:DE:9F:32:7B:CA:0F:79:BF:FD:24:E0:A4:81:CA:C6
X509v3 Authority Key Identifier:
keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:50:17:7c:85:17:05:85:81:60:e8:04:5f:0d:aa:e5:d2:49:
bb:95:a9:94:5b:7a:99:1a:1c:9d:d0:92:43:73:40:a3:0c:fe:
25:d3:6f:29:95:c8:a7:50:2d:63:9c:7a:01:84:30:95:98:ba:
5c:d6:18:da:36:3d:7f:dc:de:5a:cf:6f:20:ac:09:70:7b:09:
3c:ef:af:6d:6e:b6:c7:5b:70:19:62:49:71:82:f5:96:d6:3c:
1f:ec:ae:15:0c:fc:b1:af:50:38:ab:d9:ae:b4:18:9a:95:3b:
f9:f1:4e:ed:10:3c:5c:f1:59:2e:97:83:cb:e9:79:d3:01:fe:
39:d6:7c:45:bb:ae:6f:80:bb:fb:53:4b:5c:9e:6d:7e:fd:1e:
63:9f:6e:34:24:7d:c3:ec:cc:e9:5e:ac:aa:62:f6:8e:80:a1:
2b:1b:3a:80:b4:26:85:fd:11:72:3a:5e:fa:1a:97:d4:d3:39:
bb:0d:a2:85:05:7b:42:07:f4:56:a4:c1:b8:57:d6:81:fe:3a:
80:86:35:1d:b9:f3:05:1c:80:b0:be:5c:16:f8:15:36:80:71:
27:d7:92:73:ef:16:d8:f1:7e:f3:13:d7:0f:88:49:88:50:ec:
98:ab:a3:17:f2:41:6b:ad:f5:be:54:57:32:6e:18:19:59:60:
1e:a7:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:34 2025 by rpki-client