Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: sFpCqaLL6ZGixcQyGKE7V8d9M/Hc4ViQBXwTZdvGuNc=
Subject key identifier: 37:E6:02:8D:87:09:5F:F9:F2:30:78:F5:53:4D:44:6D:82:76:97:A9
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019A4D73AD4DDFC97D7C01778FD23539DBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: spnZRdFwnyVjzqep7QvmG0z0XJ6hziJEXCYx7AwHF64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ad:4d:df:c9:7d:7c:01:77:8f:d2:35:39:db:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=37e6028d87095ff9f23078f5534d446d827697a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:cc:66:88:c4:e6:0c:ab:17:21:66:a8:64:
91:3c:33:fa:92:27:6a:71:c0:ce:da:4f:4c:91:f0:
42:94:e7:70:12:84:be:bf:6e:08:90:ea:95:db:3e:
8c:e4:05:21:f3:2a:16:4b:a5:70:55:f5:40:2b:56:
41:2a:02:32:6e:2e:fd:e0:4f:4d:ba:70:55:01:bd:
24:02:60:86:3f:d1:40:75:89:72:13:d0:1a:9f:bf:
52:22:60:13:b3:69:92:c2:7d:91:92:fc:be:61:da:
30:82:e9:9a:c1:8b:7c:b1:84:d6:37:01:02:cc:29:
da:70:31:c8:0b:65:fb:e4:6b:b1:2a:53:06:b2:8e:
bf:04:15:23:9d:63:b2:e1:be:1d:03:c9:35:1e:36:
7e:19:ea:62:ee:4e:bb:9f:39:ab:52:49:33:f9:0f:
c1:69:73:69:6f:d6:d9:68:c2:5f:8d:db:1b:0b:76:
f9:c1:30:62:dc:b5:6f:b0:e2:77:ec:5c:ad:7d:01:
d5:40:7b:a2:e4:51:48:92:08:d0:dd:ff:9d:68:de:
6d:5d:6c:de:78:64:7b:06:ee:0d:fd:84:43:d5:01:
fc:75:09:a5:38:b6:8a:6b:6e:2a:74:c8:47:31:43:
71:eb:ed:8b:9e:9a:e3:0b:6d:24:0b:41:d6:d4:3b:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E6:02:8D:87:09:5F:F9:F2:30:78:F5:53:4D:44:6D:82:76:97:A9
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:25:ee:d6:e7:eb:08:9a:9d:8d:ec:28:e4:3e:5a:67:39:c4:
7b:bb:a9:1c:6f:60:46:4c:44:7d:e1:90:27:ef:06:7a:6f:ac:
52:d5:a8:af:37:3b:6d:9e:a7:9b:6a:01:91:be:2c:c9:14:ca:
69:50:4d:84:36:09:0d:3b:05:3f:71:09:dc:3f:60:b2:3d:c8:
5d:ad:85:f2:98:27:00:de:ea:92:c7:76:a1:2f:49:0c:3e:73:
7b:8f:c0:88:31:c2:3e:bc:5e:96:6f:8a:98:64:b5:56:61:96:
53:0e:c4:38:9a:f3:3e:17:c4:a0:04:81:54:d7:20:0e:bd:17:
50:90:96:39:3e:ad:cf:72:f8:dd:ac:b1:66:0a:dd:ba:1b:93:
93:ba:4c:fc:6a:3d:5a:63:31:1f:c5:63:42:69:ee:01:81:f6:
8e:af:a5:88:ea:91:a8:e2:f7:08:70:af:33:69:2b:84:4a:5a:
96:89:a4:b5:dc:5e:eb:4a:f8:ca:bb:e0:c8:61:8e:2a:dc:7f:
5a:07:ce:24:3d:ae:0f:a8:a5:90:89:f8:17:4b:4c:27:5e:8e:
34:cd:b6:93:6f:f1:d8:f6:79:22:d2:df:1d:69:a1:aa:95:17:
2c:78:57:88:45:81:8c:cc:4f:89:ad:7d:77:82:6a:c1:7a:6c:
73:17:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:47 2025 by rpki-client