Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: 7Znyh/FRoEbxSbCKIs4/Fd8k5E1NRzXl7hT6i71EWW8=
Subject key identifier: 07:87:A3:D7:44:9B:CE:AD:20:6D:86:D7:5F:54:74:F6:88:FC:1B:88
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 019A503E08E113CD3D65AA06E92E5F37C05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 19:00:33 +0000
Manifest this update: Tue 04 Nov 2025 19:00:33 +0000
Manifest next update: Wed 05 Nov 2025 19:00:33 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: 5jkKcV2QwsKCasX4rXMQeGKtoHH5eyxQa/kqPX8m0x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:08:e1:13:cd:3d:65:aa:06:e9:2e:5f:37:c0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Nov 4 19:00:33 2025 GMT
Not After : Nov 5 19:00:33 2025 GMT
Subject: CN=0787a3d7449bcead206d86d75f5474f688fc1b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:63:30:82:92:cc:36:e1:14:f8:65:11:6d:
89:03:d8:2c:28:da:68:26:a4:5e:67:19:db:7f:0d:
38:e0:e9:b9:11:70:a7:4c:f5:b7:61:a2:8b:11:51:
05:dd:7b:35:63:96:7f:67:18:e0:de:6c:99:85:0b:
e0:3f:a3:a3:41:30:da:ed:60:01:e8:c7:39:51:2c:
51:97:fb:82:9c:66:0b:a2:78:ab:d6:fd:8a:2a:a8:
60:e8:fc:41:7a:45:b7:d8:d3:86:3a:13:1a:fb:af:
d1:1c:90:ab:cb:cd:ae:c4:f4:19:3d:a2:cc:4c:67:
cd:56:d9:59:db:28:be:cd:1b:87:3d:a1:1b:f7:85:
3f:52:ab:95:e6:bf:0c:96:8f:05:de:ed:a1:aa:a0:
64:9c:4c:b2:ba:42:02:2b:e1:ee:18:19:9b:55:b9:
71:27:e2:51:5b:d6:63:0a:0d:a8:2b:4c:7d:40:6c:
3a:4b:e4:7b:1b:45:c9:e5:0f:41:6d:ef:cf:79:f9:
cc:f2:dc:40:0e:61:e5:37:02:63:9d:e8:74:ba:e2:
e4:19:81:6e:59:a4:1a:65:64:f4:15:bc:d1:3d:db:
7c:d1:e6:da:4c:51:fb:76:b6:a2:c5:06:5c:ae:01:
67:dc:fe:ec:12:0e:20:0e:5a:38:c3:19:58:66:e7:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:A3:D7:44:9B:CE:AD:20:6D:86:D7:5F:54:74:F6:88:FC:1B:88
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:37:4e:a1:8f:01:31:cd:44:a4:ed:6a:04:23:95:c7:8c:35:
75:d2:e3:63:26:50:61:0c:c2:fd:bd:87:4c:dc:db:b0:ae:3e:
4e:e6:d2:3a:1c:d2:f4:f0:72:36:15:1a:35:9c:0b:30:a1:6a:
67:ea:1a:21:c7:37:17:4a:7f:6e:64:ef:cc:7a:ac:5a:c3:dc:
1f:11:2f:c1:6a:d1:cc:f0:62:8f:89:75:10:da:60:96:d9:a7:
f9:23:1d:7b:71:1d:6d:4c:b2:c3:13:d6:09:51:ae:86:a2:e7:
41:ae:69:ef:ed:42:6a:aa:62:fe:99:5e:33:ba:96:1f:e7:d0:
9d:c3:d9:e3:b7:86:94:15:fb:29:47:7d:6b:2a:df:27:a6:dd:
59:1f:5f:1a:39:d5:5d:60:da:8f:9c:cd:b1:fe:f7:bb:cf:13:
65:67:69:ee:11:d6:91:26:34:c6:fe:33:a1:54:8a:5c:7f:dd:
07:a2:a8:8b:91:a6:60:c6:df:8d:44:75:0a:55:64:59:9d:1c:
1b:a2:14:63:57:4f:4e:1a:03:6d:ad:6d:80:26:aa:1d:37:b1:
b1:ba:78:7e:df:0f:60:4e:24:c9:9f:b1:5d:43:0e:45:80:c9:
8d:f5:d8:ba:11:32:56:33:48:d5:76:3b:8f:38:ab:e7:b7:60:
88:e8:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:09 2025 by rpki-client