Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier: ZmPtU5DjwEn2MhDfxP0ik8OjI0EMHBHxm1yPRyyiOtU=
Subject key identifier: C6:90:54:D5:B5:4F:85:57:2D:13:43:7C:A2:BF:3C:93:72:B0:EA:A6
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial: 019A4EF443843670537BD1933C8433CE0AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:22 +0000
Manifest this update: Tue 04 Nov 2025 13:00:22 +0000
Manifest next update: Wed 05 Nov 2025 13:00:22 +0000
Files and hashes: 1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=)
2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: nLx06Ul875v4C6Lqz9kydPfe+7x6UOS4gYtVbxDq2R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:43:84:36:70:53:7b:d1:93:3c:84:33:ce:0a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Validity
Not Before: Nov 4 13:00:22 2025 GMT
Not After : Nov 5 13:00:22 2025 GMT
Subject: CN=c69054d5b54f85572d13437ca2bf3c9372b0eaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:a9:be:04:9b:25:96:bb:20:0a:32:df:d6:
4a:e6:d3:14:08:f6:3a:55:bd:e1:6b:fe:43:c5:56:
9d:9a:d7:fb:e8:8d:67:9f:2a:ae:9d:80:fc:71:ae:
81:8c:2f:1a:c5:9e:37:60:15:96:06:22:b8:a4:2d:
2f:3f:8e:34:e1:9e:34:7a:65:66:78:d1:33:73:a9:
fa:90:b3:ed:73:0c:6e:9f:e7:23:56:2c:7f:b8:cb:
a8:88:ef:29:4f:a2:c5:60:ce:52:89:c9:65:3f:5c:
69:2b:f1:eb:8f:36:3b:08:ed:a0:16:bf:66:af:5f:
b0:67:a9:e3:5d:5e:8b:d5:fc:4a:8c:41:54:ad:0b:
4a:45:df:79:b2:7b:85:53:3b:82:9d:38:c6:7f:ae:
8c:ac:d2:30:92:8a:38:a7:71:49:2a:c6:4b:3b:86:
08:72:f3:c9:33:6e:32:fc:c4:b6:22:cd:36:85:80:
1e:ea:3b:aa:bf:ab:fd:3a:63:07:e9:22:a5:8b:a8:
e6:72:0a:c6:11:81:97:dc:9d:fb:ce:5e:5e:68:8d:
be:59:5c:ed:8e:06:b3:53:be:5e:76:c5:14:a9:da:
a1:3c:2b:b3:4e:14:ca:04:1b:9b:4c:6f:92:4c:41:
ee:17:da:c4:d1:f1:d5:0d:5f:31:31:c5:0e:8b:73:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:90:54:D5:B5:4F:85:57:2D:13:43:7C:A2:BF:3C:93:72:B0:EA:A6
X509v3 Authority Key Identifier:
keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8e:37:a1:6d:c8:cc:0a:f1:a1:5d:79:6b:59:02:03:5e:c5:
b9:c1:7a:5e:94:97:ac:50:63:c6:4f:44:57:9e:14:5a:0e:a0:
01:f2:b1:13:a2:5b:f7:75:17:b9:cf:63:a2:8f:5f:74:fe:43:
bd:bc:9b:d7:f2:8f:b3:8d:0c:5b:e1:f5:87:ab:8f:ef:54:99:
cb:66:34:30:4b:86:a3:8f:1e:af:ff:c3:24:bb:a9:3a:9f:55:
43:2c:23:e5:b0:70:80:20:e1:ff:37:fe:bc:90:09:5b:ce:2c:
e0:f6:05:9f:c5:14:b0:ed:68:80:7f:f6:eb:58:04:0a:c5:ea:
f4:08:e9:cc:6d:84:c9:6e:7b:cf:b1:b1:ee:be:be:a9:54:a9:
dd:f2:14:23:3f:73:39:d6:ce:f3:4b:54:a8:32:e8:49:20:66:
f2:67:9f:59:72:b6:20:68:00:b1:9f:5f:9d:ce:e9:8c:ad:b7:
46:b0:8f:4e:cf:cb:40:04:fb:9d:ce:6c:c4:5b:c2:b1:94:5e:
7e:36:35:d7:0b:0c:cb:6a:e7:52:19:52:61:04:b0:27:4f:ac:
f3:6c:c9:21:fe:b5:83:3e:40:cd:66:ac:c9:65:b3:22:45:0d:
9c:bc:8c:a9:ce:50:50:4c:86:95:82:8a:40:cd:3b:a9:1b:de:
ed:ed:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:09 2025 by rpki-client