Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json)
Hash identifier: 5Goe/Hl1l3eIGEYHOFwEB/rvE+DdhAQbsd/Nu9Zqtu0=
Subject key identifier: 91:FC:FF:68:9E:DE:46:50:A7:B2:23:C3:FC:5C:67:B4:D3:FD:CC:2F
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial: 019A51BE1D4FBC6DD82A37E49B123A83C2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
Manifest number: 11D1
Signing time: Wed 05 Nov 2025 02:00:04 +0000
Manifest this update: Wed 05 Nov 2025 02:00:04 +0000
Manifest next update: Thu 06 Nov 2025 02:00:04 +0000
Files and hashes: 1: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: AaxRzdILnXdRmb0BlDdeirJiFOpOIyEuDgnlj9Nf7Ds=)
2: qjMEBhnPSGniZnI84qDRLbjstP0.roa (hash: zxHWsvNMH3bRN0wwXS6+6h5nHO/vNMw7yKNF0sDPkqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:1d:4f:bc:6d:d8:2a:37:e4:9b:12:3a:83:c2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Validity
Not Before: Nov 5 02:00:04 2025 GMT
Not After : Nov 6 02:00:04 2025 GMT
Subject: CN=91fcff689ede4650a7b223c3fc5c67b4d3fdcc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:43:73:4a:59:a3:6b:cc:f5:05:28:1f:60:
71:22:94:5c:14:eb:46:f7:c8:1f:6b:0f:e8:9e:cb:
33:43:eb:f0:d2:7b:d5:c3:4d:c0:03:6c:7e:2f:65:
a4:e8:54:51:a4:d8:01:17:ed:aa:cb:79:0a:ba:69:
29:20:06:17:63:b3:4e:f5:93:68:18:78:5b:32:7f:
2b:88:db:ed:5b:33:5f:1d:1a:a1:93:11:9f:6c:a8:
7a:4a:36:12:41:15:1e:1c:e4:5a:8b:b7:0a:bb:38:
0d:d6:47:8b:b6:f5:9c:db:84:87:03:e0:21:f8:fd:
0a:b8:ec:86:5b:8f:ae:f4:b2:ab:72:ac:8a:41:da:
47:11:b6:e1:09:1e:5a:b7:92:a4:94:25:0b:12:01:
05:23:18:10:df:13:2d:ad:fe:52:df:07:7a:7a:a6:
c9:b8:26:fc:c1:61:d3:da:40:b2:66:36:a2:b6:66:
dc:20:d8:1c:58:0c:83:3c:72:d8:81:21:40:52:5b:
ad:70:b4:2a:1f:7f:d7:45:97:1b:58:36:34:6e:24:
0f:60:be:af:04:10:26:d5:0c:1a:2c:b3:e7:36:05:
41:41:b6:69:8e:ed:39:dc:20:e0:eb:7b:65:61:c5:
39:ca:7a:77:d1:24:70:54:49:09:29:27:b5:24:8b:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FC:FF:68:9E:DE:46:50:A7:B2:23:C3:FC:5C:67:B4:D3:FD:CC:2F
X509v3 Authority Key Identifier:
keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1e:c2:a5:5d:e6:cd:57:45:5f:b2:cc:51:d9:aa:e0:2c:54:
4e:1a:68:d4:55:e1:71:ad:10:ae:61:cc:88:b9:0e:72:63:98:
9a:8c:a3:42:08:c6:d6:de:67:90:c5:10:e5:00:17:60:a1:55:
3d:7d:69:9f:4a:9b:a4:22:11:2b:1e:be:81:31:85:a3:58:32:
36:6f:4e:32:33:d6:81:05:f2:c0:b1:4f:6f:3d:97:ca:96:b9:
ca:c2:28:a2:9c:2f:82:b9:5f:45:e0:b9:ab:88:04:68:59:43:
c4:87:29:bb:ca:8d:b6:00:45:21:c3:53:2d:41:39:12:74:30:
af:9c:b7:c2:0b:5d:2c:db:63:68:b2:03:c2:62:79:3e:f7:b3:
ca:15:8c:ad:08:d4:ac:2b:4e:8a:68:cb:4e:b4:d9:da:bb:2d:
71:e7:51:4b:57:c0:63:10:57:dc:ec:95:29:0e:c9:92:e2:d2:
af:ef:cf:7e:1b:a2:03:77:8a:56:cb:dd:69:b4:49:89:3e:b6:
da:2e:dd:c9:d8:60:fb:e2:5f:5b:aa:cc:f7:db:66:51:f0:87:
c0:ae:68:0f:3e:13:33:3b:84:61:ec:fa:69:50:5c:48:6b:f6:
64:88:8a:54:2c:92:68:eb:4c:1a:15:e5:a8:dc:ef:d0:e5:26:
d7:0d:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:30 2025 by rpki-client