Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: J3CXV7PKopnRiPCgHmU6ZkgYPIAepROpYKA6VyoxELw=
Subject key identifier: 7C:0E:18:C0:A8:01:7A:B0:ED:8E:D8:A5:F1:1D:29:5D:70:B9:16:0D
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019A4EF4D9F5612C2614FA1DC9107CDBA409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:00 +0000
Manifest this update: Tue 04 Nov 2025 13:01:00 +0000
Manifest next update: Wed 05 Nov 2025 13:01:00 +0000
Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: N3+Eppb+ZSsQ2YbTWlIY6kIZpjdLOG+fWJXaZe3LEnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d9:f5:61:2c:26:14:fa:1d:c9:10:7c:db:a4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Nov 4 13:01:00 2025 GMT
Not After : Nov 5 13:01:00 2025 GMT
Subject: CN=7c0e18c0a8017ab0ed8ed8a5f11d295d70b9160d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:07:7f:85:7c:48:29:15:ca:51:87:28:38:
75:43:4e:d9:67:75:9a:8a:9d:94:02:e3:6c:f0:e2:
ba:1b:96:55:86:47:86:de:91:cd:12:ba:1d:5c:5c:
c2:ad:c9:6e:7b:a6:09:78:6b:66:32:fa:5a:88:9a:
75:47:03:87:3e:7f:aa:41:1b:9b:5b:b4:78:b8:63:
a8:85:56:f4:52:40:26:b2:67:4e:8c:e0:ef:00:59:
e3:d0:8f:73:bf:94:89:61:ae:98:92:9b:f3:1b:31:
0a:31:a6:05:40:82:f7:f5:18:0f:3e:15:fc:4d:68:
2a:45:c4:e3:37:d2:f0:ff:cb:79:3c:8c:ce:88:ff:
6d:ff:a9:7d:07:89:a8:f7:00:88:52:9b:85:4f:6e:
32:66:d9:c6:28:7c:8b:48:8d:e8:f5:70:81:2a:c5:
9e:93:93:84:8d:11:9d:86:4d:69:6f:45:a3:c2:cc:
45:8d:d7:8e:c9:e6:f9:04:eb:26:3a:57:e0:c9:ec:
da:46:7c:32:85:cf:ae:12:d7:48:af:00:fa:ee:a3:
6c:4f:28:71:9f:e3:30:30:60:b4:f9:a4:7f:3c:49:
3f:63:81:f9:41:a4:df:ea:ff:c2:a0:a4:aa:a2:61:
0b:96:c2:55:f1:c3:d9:37:c7:79:bb:4b:63:30:59:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:18:C0:A8:01:7A:B0:ED:8E:D8:A5:F1:1D:29:5D:70:B9:16:0D
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8e:fd:e2:34:14:8a:d1:bb:ef:bc:ca:68:2c:97:20:28:4a:
b8:55:15:e7:11:04:3f:b6:44:96:5b:da:e5:ba:12:67:f7:8a:
43:04:f7:fd:62:6b:e3:99:58:f0:14:2a:e1:1e:72:5a:2d:11:
1e:c3:5c:9f:f1:68:d5:55:31:4e:2c:0f:f1:22:2c:ff:a7:c9:
39:2d:f6:40:50:e4:43:99:b1:e6:17:f4:0d:f8:b3:9e:29:bc:
f5:07:f6:f5:5f:56:00:0d:54:18:41:81:cb:76:43:db:e1:a0:
13:b1:a6:48:a7:66:cc:2a:db:dd:d3:61:73:1c:22:cd:ba:93:
b7:56:e6:44:8b:7a:40:ae:a4:22:04:c8:46:bb:e0:c1:90:c1:
0a:4d:c2:5b:aa:7d:0c:b5:d7:1a:63:fd:f0:c4:ec:7a:1d:bb:
ec:7b:ec:60:ff:61:0b:9f:66:3b:44:a9:49:bc:8b:06:86:e0:
cb:59:59:0d:38:68:7d:66:49:7a:2c:b2:2d:5a:7b:e2:1c:5e:
23:f4:07:88:db:cf:e5:a1:cb:97:9f:b6:cb:7b:66:95:5b:65:
08:63:07:5a:d2:39:2f:c7:7b:57:63:c1:0b:9f:b5:06:c6:f4:
a9:40:3d:c3:86:31:4b:b7:d1:72:03:eb:21:7a:32:7b:0e:75:
eb:f5:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:57 2025 by rpki-client