Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier: /+a43XPwyE31HMjS3XPnR+Dr09CGmatUhBqMDK9NKk0=
Subject key identifier: 2D:6B:91:63:31:86:94:2A:FA:C7:08:25:AA:A4:97:C2:3F:DE:71:6B
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial: 019A50751D01BD08352CE82E10123547AA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 20:00:43 +0000
Manifest this update: Tue 04 Nov 2025 20:00:43 +0000
Manifest next update: Wed 05 Nov 2025 20:00:43 +0000
Files and hashes: 1: Rn5W7oiVYRufZC2Cc9HQB686zNI.roa (hash: r6LX/rQ2IMQ0lnqajopwaJaJ6RgScSLx/FlgSbqRLTc=)
2: XHUUpmsTIvK_KTF6Ns7MAyI399w.roa (hash: Hd7LpYgtsmwvaWEwTnrD15eJzW3l7MahPrkz65fNT1U=)
3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: q21CQpiHu5M0mkNQjOQIclhaS/kwTuQLnxzYG6l823Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:1d:01:bd:08:35:2c:e8:2e:10:12:35:47:aa:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Validity
Not Before: Nov 4 20:00:43 2025 GMT
Not After : Nov 5 20:00:43 2025 GMT
Subject: CN=2d6b91633186942afac70825aaa497c23fde716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:42:6d:b4:9d:2e:f9:28:b8:36:20:e2:ef:
98:e2:73:c2:2d:d8:2b:ae:9c:94:3e:8a:02:44:9f:
a9:c5:bc:c0:dd:91:da:69:b3:4e:eb:fb:fb:61:46:
08:93:7c:fc:15:5c:d4:a3:19:73:e8:00:c7:84:f4:
3b:29:6b:b6:bc:5b:e7:74:56:9d:9e:51:59:03:13:
42:42:23:e9:28:7c:a3:69:af:68:b5:16:fd:10:1f:
a2:5d:6d:97:2d:c6:9e:99:99:ca:b5:25:ca:b8:0d:
3a:da:57:5c:e1:a2:ad:88:b6:ba:0a:de:1b:36:be:
d2:07:ea:be:7a:d1:b1:72:46:b0:78:89:cd:16:70:
8e:53:f9:a2:fd:e4:bd:f6:25:a6:1f:2b:80:22:55:
2b:f0:3d:73:35:a3:30:06:7c:bd:46:2a:ed:b1:fe:
92:91:70:37:b1:82:41:0c:f0:7b:9a:72:32:e0:cf:
e8:7e:42:2a:8e:52:2b:80:f6:b9:e2:3f:8b:72:e4:
ae:45:5c:70:02:ce:ef:ea:ab:37:0f:f7:6d:5b:d6:
20:98:b1:e6:a7:db:6b:55:47:a6:9b:25:3d:0d:e9:
be:85:09:8a:6a:57:f2:8f:c3:1c:6b:79:77:dd:46:
30:cd:f4:24:a0:ef:e1:5f:df:62:34:2b:45:7b:0a:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6B:91:63:31:86:94:2A:FA:C7:08:25:AA:A4:97:C2:3F:DE:71:6B
X509v3 Authority Key Identifier:
keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:03:73:93:5c:b1:45:39:e1:85:1f:ad:97:69:ec:65:45:5e:
c6:89:4d:0d:33:71:c5:05:fa:92:1d:e8:2f:5d:8e:4c:4e:7f:
f6:f1:0b:85:30:43:43:95:44:48:82:61:00:20:80:8a:65:f4:
3d:7c:ba:14:da:a6:ec:2c:3a:9b:c2:0a:b8:21:85:95:a0:03:
58:c0:c8:fc:79:ee:64:51:14:af:fe:d4:75:9a:36:64:c0:7e:
07:e9:f1:2b:49:4e:0e:4b:c2:3a:c4:99:1b:e5:8e:b0:84:ab:
75:cf:1e:72:d1:0c:77:6f:34:0c:70:2f:bc:eb:4a:2a:33:79:
43:dd:b6:ab:a9:ca:2a:a4:39:8b:4e:46:45:64:10:48:c8:92:
45:db:51:8e:dd:e8:6a:9d:ab:0b:50:a7:d6:42:84:e5:72:65:
28:de:02:2c:1b:9b:fe:ed:32:fd:63:46:3d:0e:b5:b4:47:a9:
6d:01:f8:e6:7c:61:6f:a3:6f:f3:55:94:29:73:9e:8b:4c:d1:
40:86:e3:78:07:e9:ea:8a:2b:90:69:f9:2c:fb:4c:cb:ac:7c:
d8:ab:3f:88:b9:c1:7e:cb:b7:9b:46:64:a6:17:51:9d:d5:9f:
25:56:a3:01:0f:57:63:c5:30:90:44:15:45:06:8e:c0:8d:3d:
31:3a:e9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:34 2025 by rpki-client