Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: oXaSPSWxrG8wUvE/6w2CWjEdBu4B9hfnWUC8fbywWV0=
Subject key identifier: 89:E7:6F:B9:F7:00:7B:58:59:A9:B6:94:7D:F9:59:35:11:BD:A9:6A
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 019A4EF49B504FDF971FEF8C324FF8A934DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: d0NFbyI6QlJgQJ/QQljXD7WJZHkfwtZNyldAIJVLXAc=)
3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9b:50:4f:df:97:1f:ef:8c:32:4f:f8:a9:34:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=89e76fb9f7007b5859a9b6947df9593511bda96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:9e:61:52:08:ae:24:41:df:1e:8c:ed:52:
b1:7e:ff:6b:69:61:71:e8:6e:0c:39:1a:07:3f:c2:
81:19:10:27:5c:bf:be:9c:17:2d:ff:b5:81:17:9d:
ed:af:75:91:ac:df:6d:17:32:99:58:af:3d:51:dd:
eb:c6:a0:19:e9:1a:e6:ca:22:56:06:c9:f2:20:e0:
8d:13:c6:47:42:1c:4e:f5:b9:04:8e:c3:e7:40:0a:
52:5b:01:a6:f9:dd:88:ed:90:74:50:db:c1:8f:a6:
d9:0a:3b:af:14:40:1c:b9:29:51:a9:ed:5f:95:91:
d3:e6:a9:74:f8:51:83:ee:9f:88:dd:11:a2:b6:a4:
fe:92:56:a7:32:eb:28:03:8f:88:b1:d2:52:3b:42:
d4:e8:e8:7b:c1:6f:b5:48:5e:0b:48:e5:c2:c0:e1:
a4:e1:81:5e:87:e5:cc:71:9f:03:8e:8c:26:bd:b4:
76:da:f6:41:0e:8d:b0:c5:d5:bf:0d:c5:3d:1d:49:
36:33:fb:0e:25:6e:b3:67:87:14:f0:86:75:57:76:
7e:25:0c:56:55:2e:24:74:aa:73:c7:0b:85:72:52:
26:ee:8c:5b:de:f2:dc:ad:80:f9:13:7c:e6:a4:84:
5e:a4:77:73:ae:a3:93:b2:46:d4:57:0c:d8:2d:42:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:6F:B9:F7:00:7B:58:59:A9:B6:94:7D:F9:59:35:11:BD:A9:6A
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ec:4c:68:c6:fe:37:86:e3:e0:30:52:16:29:32:71:7e:4e:
cd:21:9f:50:49:48:e6:ad:33:a3:25:2b:04:cb:36:4d:4c:de:
da:45:94:17:ae:29:4d:18:b9:87:17:f9:4a:9b:e8:24:a4:94:
d1:0e:43:a5:43:1b:4a:5d:2e:9b:54:3e:e6:cb:85:5c:e8:50:
39:8d:30:a2:65:7d:77:e8:ff:3f:32:3e:fa:a2:28:18:21:d0:
01:35:f1:e2:eb:b9:ee:b6:e6:e5:da:45:e2:d9:8b:37:05:97:
dd:ba:8d:87:dc:a8:99:4c:13:69:8c:3d:46:36:4c:44:8e:69:
df:2d:03:2b:f8:b0:d7:1d:81:cc:dc:d0:11:b1:74:da:58:00:
0d:de:cc:6a:97:f9:f4:f1:b5:86:1c:76:0a:e6:6b:52:96:11:
c7:bd:64:53:ef:64:5f:2e:2e:e4:b7:34:a4:a2:13:87:39:e8:
a2:22:ec:df:ac:c0:00:92:95:10:a6:ab:12:ec:b3:77:1a:fd:
4c:ce:6b:86:4b:c1:17:cb:40:bb:56:04:1d:91:ae:6b:11:11:
f1:1e:e8:19:fe:24:9f:b6:a7:b8:ed:b1:9d:94:d7:ed:e0:e8:
6e:27:0d:d5:c2:e0:03:a7:10:0f:e4:be:17:41:a6:d2:1d:e8:
d0:03:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:19 2025 by rpki-client