Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: cGS43U4ck2LqIVDHpb5+RpcBdgxyi+aYxIbBgB1dDLw=
Subject key identifier: 17:3F:F7:88:C4:F9:5C:14:04:EF:AC:10:94:38:CD:B1:4A:68:39:5F
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 019A4E8662CF12DE8A8972DC774BBA7DCA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0CBF
Signing time: Tue 04 Nov 2025 11:00:21 +0000
Manifest this update: Tue 04 Nov 2025 11:00:21 +0000
Manifest next update: Wed 05 Nov 2025 11:00:21 +0000
Files and hashes: 1: pbWUlF6kph4C-luLlJFzTT778aw.roa (hash: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: 5cn8u0zOEw6wxaFvVKpak9Ju51m6Y86p3QGGxkmaF8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:62:cf:12:de:8a:89:72:dc:77:4b:ba:7d:ca:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Nov 4 11:00:21 2025 GMT
Not After : Nov 5 11:00:21 2025 GMT
Subject: CN=173ff788c4f95c1404efac109438cdb14a68395f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:60:1a:4c:fc:47:22:55:bf:e6:05:a8:76:
cc:18:c3:f1:d1:e3:6e:ef:b7:ce:24:bb:82:7f:f1:
02:f1:77:f7:3d:9d:ca:b5:41:8a:42:d9:96:da:ed:
02:31:9c:95:64:42:e3:bb:7e:3d:14:f9:39:e8:d6:
71:56:75:33:85:c4:de:cd:1d:31:1e:8f:4b:08:6f:
b9:5f:0e:13:41:a5:f3:cd:2f:1d:33:be:37:86:a2:
38:28:fe:52:14:43:c9:6f:15:06:18:6e:8d:c8:ef:
7c:30:cf:4e:0b:9a:ac:da:0a:83:d2:2d:d1:31:be:
a0:e7:ee:1e:51:d6:2d:3f:fb:78:3d:2b:7f:68:3d:
47:49:0a:e8:ba:ea:4d:09:c1:1c:d3:05:63:f4:88:
52:19:8c:03:bd:cc:ff:96:69:46:f5:83:c6:55:ad:
24:14:24:6a:83:1b:ca:82:ab:d8:99:58:89:f5:64:
f0:5a:66:de:51:3b:3e:c7:8b:05:68:56:33:31:f9:
87:22:2e:5e:0e:dd:c1:17:8c:ec:99:70:10:23:7c:
d0:f6:e9:8c:c8:be:cd:6f:47:de:1c:ca:f8:f1:8c:
cc:5b:19:64:3d:0c:d4:54:2d:6b:9d:ed:45:54:b5:
2e:04:e3:33:9e:38:2e:55:08:f2:ca:f0:bb:c4:f4:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:F7:88:C4:F9:5C:14:04:EF:AC:10:94:38:CD:B1:4A:68:39:5F
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:34:31:91:7c:84:e2:39:4d:45:cc:29:37:38:b0:41:29:9f:
5a:d4:80:34:93:22:11:12:81:18:3c:e9:12:7a:ef:e1:f1:32:
f6:88:5c:6c:23:c2:c1:67:12:a5:25:21:b8:48:e9:44:e9:a9:
b1:fd:fe:d2:10:ac:c9:d3:ce:5b:85:19:c4:15:f1:37:ec:91:
8d:76:53:a8:32:93:d7:dd:16:98:d7:3d:ea:cc:7f:94:43:ee:
10:ad:72:ef:53:fa:54:78:bb:df:61:e2:b4:cd:97:4a:ec:7b:
6f:29:36:50:da:9d:4d:21:d7:d6:87:1f:42:f7:c3:64:22:75:
07:b1:97:28:7b:97:c5:a8:98:40:ff:c4:f5:c4:e4:fb:86:15:
88:50:83:9a:75:8b:bf:bd:dc:63:0b:1d:33:4f:bb:46:56:6f:
2c:5e:8d:22:8a:97:c7:07:fd:3b:70:c6:76:aa:2f:ef:59:45:
9d:ff:3b:e7:34:c6:69:6a:7a:6f:c4:7f:e0:ce:42:bc:ea:54:
20:69:12:78:1b:7b:8f:8e:f0:71:b3:d8:17:3c:93:dd:8c:1c:
e9:59:14:d7:a3:a2:a6:6a:cc:6a:12:16:d6:fd:7e:a6:58:c1:
88:22:61:ed:47:04:27:8f:07:04:62:fe:39:75:00:36:ca:c2:
cf:b2:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:33 2025 by rpki-client