Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: Ty3XHDCqo1en0vLfOGfUIpTdRCDgRk0/HyRD8PGmnHA=
Subject key identifier: 9C:02:7B:5A:FA:40:1D:83:C3:EC:84:F4:2A:58:E0:63:69:04:77:3C
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 019A4E4F8031EF997459A10AAB02A171FF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: 6RyZsF2PffImHKFsfz+j/8LiadkVppwWvPQjOCVoaVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:80:31:ef:99:74:59:a1:0a:ab:02:a1:71:ff:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=9c027b5afa401d83c3ec84f42a58e0636904773c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:7a:22:c8:4f:5a:5b:59:f6:0d:04:4c:d1:
28:77:2d:54:53:cf:5c:d2:a5:29:42:94:73:61:f6:
61:2b:c2:67:04:8f:2f:49:97:a8:ef:63:f0:05:20:
46:b2:25:5a:5c:6e:76:4a:d3:09:e6:ba:08:76:21:
09:bc:ad:5e:38:65:fb:43:92:09:fd:04:58:af:fb:
3f:70:d1:6e:87:ec:b8:d4:44:16:95:72:e4:91:5c:
e4:bd:a9:36:c6:b2:6f:3e:05:6b:95:e5:b4:da:82:
a0:ba:54:30:90:a7:db:9d:eb:2a:47:79:1c:a3:1b:
fa:ce:74:9c:64:15:1e:8b:e8:ef:8a:59:d4:98:a4:
17:50:2e:1d:a5:2b:b9:dd:89:c6:e7:8e:89:4f:aa:
94:6d:a2:0a:ca:e7:8d:eb:c4:b8:71:23:42:75:10:
fe:03:26:db:74:e2:62:34:fd:a3:d8:ea:06:2b:5d:
c9:be:8f:41:eb:28:cc:43:14:2a:78:3e:ee:f4:50:
bc:34:98:0f:3a:95:6e:d5:b0:8b:c6:a6:08:99:17:
7d:26:29:77:83:b2:7f:40:0b:d1:77:17:cf:22:a0:
33:a6:c3:be:b6:50:a3:36:36:62:12:87:b2:2c:b4:
4e:7d:17:a5:9c:1b:25:7d:9f:4f:19:32:d4:b6:4b:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:7B:5A:FA:40:1D:83:C3:EC:84:F4:2A:58:E0:63:69:04:77:3C
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a9:2e:12:d3:a5:85:ac:bc:77:c8:39:2f:63:7f:d1:bf:46:
10:5a:dd:37:87:e3:bf:bf:4f:4e:7c:78:f8:99:c5:ce:8c:e4:
c1:b6:26:01:6a:91:18:96:f2:1d:11:13:c4:e9:01:e4:8b:28:
2a:03:ef:b0:24:db:1a:7d:0e:d6:b2:c8:89:e6:e9:16:e3:3d:
02:66:3b:a6:ff:a7:fe:c6:6b:fb:7e:8a:89:1d:39:1e:78:70:
b7:f3:84:bc:d8:2f:f3:c6:1e:e9:6b:12:c7:87:0d:a2:a4:8b:
76:03:61:79:11:a5:f9:3a:e5:ca:b9:ac:8f:e3:2e:6c:3d:37:
c4:17:a6:fd:9d:4b:d6:99:d2:58:ef:87:e9:29:11:f5:0f:93:
59:a9:ce:61:a6:55:0f:44:c7:08:24:ca:ae:8a:ea:50:ae:55:
36:fe:c1:d2:6a:6e:49:35:a9:31:34:f3:50:26:eb:a2:ad:79:
99:34:6d:4b:75:00:dc:7b:f4:c1:01:d1:3c:58:5b:2c:86:e6:
0f:4b:e7:3b:5a:f5:7b:4c:0b:20:36:a5:7b:a1:85:f9:55:16:
d0:7b:18:4f:9f:97:11:33:6f:9f:72:19:36:c2:53:35:8c:a7:
29:3f:d8:30:c3:56:2e:4e:23:b2:c2:19:8a:85:c4:a8:2c:27:
d0:08:70:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:35 2025 by rpki-client