Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: hu9GxPXFUnEGQxf4dQQM9UyYG8tYvquHHDrNO62sXzs=
Subject key identifier: 4C:A6:0C:6F:5A:FC:2B:71:85:F0:EA:B0:53:7F:43:13:9C:EF:24:A7
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 019A4FD059051E0933BDC1AB0603D914A0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 17:00:45 +0000
Manifest this update: Tue 04 Nov 2025 17:00:45 +0000
Manifest next update: Wed 05 Nov 2025 17:00:45 +0000
Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: R0R2y4EKXA9TtUqukmea21SFZBKHmi05FDVwCFsg/EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:59:05:1e:09:33:bd:c1:ab:06:03:d9:14:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Nov 4 17:00:45 2025 GMT
Not After : Nov 5 17:00:45 2025 GMT
Subject: CN=4ca60c6f5afc2b7185f0eab0537f43139cef24a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:43:33:3b:2d:a8:f9:9d:12:cb:c4:62:24:
3e:d6:33:6f:9d:b8:f7:81:46:5b:13:fa:11:60:15:
72:93:d8:9c:59:9a:d6:b2:c1:d3:2d:79:7b:1e:4b:
94:76:e8:3e:0c:98:a4:57:e5:b6:7f:7d:75:f5:60:
67:b3:36:32:e4:2d:bf:92:78:2f:e1:2e:8f:c7:1c:
78:44:d1:ea:02:54:d8:93:65:fa:d4:61:4b:b6:8f:
5a:54:e9:4b:33:b2:b4:23:41:3b:7d:8f:10:ab:23:
bb:a7:56:f0:48:2d:5d:3e:69:23:50:cb:53:cf:da:
58:d9:25:1c:11:4b:10:a8:4a:f3:e3:fb:28:42:07:
be:c6:1d:f2:ae:b2:8b:36:cd:39:35:6d:d6:04:9e:
97:32:23:61:9d:92:04:47:e4:5a:9c:34:28:71:b7:
53:6d:cd:cd:ef:12:1f:fc:6c:24:d5:ed:15:04:70:
02:c4:c7:2a:ab:ae:40:0b:94:e2:9e:b3:b1:03:ab:
d6:ba:93:69:f7:65:1c:0f:c1:c1:6c:22:29:1d:7e:
c3:18:75:65:6d:e6:be:24:f4:80:cc:39:b2:9e:1e:
82:d7:2c:b2:04:2c:9c:25:1f:bd:25:88:1e:17:c3:
c8:82:c5:7c:0b:2b:90:6a:cf:95:86:80:b8:69:e8:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A6:0C:6F:5A:FC:2B:71:85:F0:EA:B0:53:7F:43:13:9C:EF:24:A7
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fc:e8:06:f4:f0:1a:e3:83:ea:a5:20:68:f4:be:4d:7a:14:
e6:27:15:cb:84:81:88:f7:a9:d0:61:b9:e4:35:b6:f6:9a:35:
25:87:83:ec:f1:5d:f1:9b:87:c5:88:dc:b1:aa:30:0d:e1:16:
92:79:ae:aa:9e:7f:00:6a:e1:19:41:4f:b2:8f:e4:2b:0d:3e:
6e:b2:8b:cd:3c:e3:a3:8d:0d:7f:d8:de:42:88:da:dd:16:fc:
f3:0f:d7:de:9a:ff:5c:80:66:a4:2a:f0:46:a9:5f:65:4c:f5:
04:23:b0:24:02:a6:c4:d8:c0:55:7f:d1:bd:2c:5c:10:7c:01:
39:c1:f3:52:d6:54:a6:1f:5d:f9:68:84:9c:70:ff:80:48:8e:
97:83:ad:27:37:59:95:fd:b1:7e:c1:10:68:0c:dd:11:79:3e:
ff:94:0d:bc:81:d4:38:3b:0a:ea:4f:47:ff:c7:cb:b0:ad:78:
40:24:4c:98:cf:c3:f5:71:54:02:15:f1:98:31:77:f8:fc:51:
96:6d:35:72:02:44:25:47:01:6b:36:90:84:a0:3b:bb:5e:51:
b4:c6:90:eb:1f:14:81:4f:f8:4b:74:5f:f2:34:ba:f1:a1:da:
6b:b0:bd:0d:d0:e8:a4:23:f0:d9:91:1b:23:c3:b3:a7:45:32:
8f:be:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:25 2025 by rpki-client