Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: ZhwKwvsu7rakvKBpgWd5xjloS0S4j97hcV7OFyiV1xQ=
Subject key identifier: D3:D4:6F:81:78:5A:38:2E:AC:52:A2:4F:70:C0:B5:DF:12:81:1A:7E
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019A5150F129F2F67EC852FA15186985C06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 00:00:50 +0000
Manifest this update: Wed 05 Nov 2025 00:00:50 +0000
Manifest next update: Thu 06 Nov 2025 00:00:50 +0000
Files and hashes: 1: 85tLColHz2gs1kcjcHIOLXPmYtQ.roa (hash: 51Me4gSLKgXfTiir1H4AL3W1LXbfR1eI6xG1CchHRO8=)
2: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: 8dwill0AMRqwnWCOnA+qNWkU6B2iZ99u3EAd5+Tw5y8=)
3: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
4: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:f1:29:f2:f6:7e:c8:52:fa:15:18:69:85:c0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Nov 5 00:00:50 2025 GMT
Not After : Nov 6 00:00:50 2025 GMT
Subject: CN=d3d46f81785a382eac52a24f70c0b5df12811a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:0e:c2:3a:97:35:4a:76:62:17:2e:bb:68:
13:4c:ba:36:aa:ac:ae:c0:68:76:7f:d8:01:0a:b8:
f2:11:17:24:53:50:75:2c:e7:58:f6:6e:fe:ce:ac:
a6:ee:e6:37:3d:e1:c1:9f:45:85:6b:d8:ef:7c:d9:
42:fe:4c:f2:86:dd:56:66:9b:87:b2:87:d7:1f:0b:
02:66:09:24:10:74:b7:68:7a:5d:14:d8:df:65:4f:
8c:e1:82:b8:98:74:ca:52:c1:58:1c:18:44:fa:05:
2d:a3:83:4f:c9:9e:44:3d:a3:92:62:10:c9:5f:ba:
28:51:42:dd:db:fb:de:b3:65:47:4c:10:2e:17:15:
a9:4a:8d:5c:87:28:3f:e1:38:cb:06:72:fc:de:11:
f2:c7:eb:76:bc:fd:34:93:c3:7e:89:81:02:74:65:
e8:f5:f9:48:e4:9e:2a:8f:f5:da:16:9b:15:af:4b:
ea:11:23:03:ea:7e:79:5f:bd:81:61:0d:37:9a:0a:
85:d1:1f:29:cc:85:d6:07:ee:01:b8:b3:d7:5f:46:
e0:4f:27:3d:52:e5:f5:a7:3d:61:e0:9a:ed:d3:80:
19:56:3b:12:77:40:ae:f6:f2:2a:9a:81:71:41:b7:
a4:b5:3c:af:47:24:03:ca:cf:85:81:b3:92:44:0e:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D4:6F:81:78:5A:38:2E:AC:52:A2:4F:70:C0:B5:DF:12:81:1A:7E
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:06:3e:be:5b:4f:9f:8d:af:55:a5:0e:1e:2a:0c:d0:c6:d2:
d5:48:e4:7e:42:5c:34:62:1b:e3:cb:2f:be:7c:ab:bf:9a:dd:
75:32:37:de:f7:e9:36:12:8f:8f:61:5f:4b:76:ce:f6:c8:ed:
b1:e7:ad:1d:ee:3f:22:93:8b:ba:94:d8:bd:f6:4c:cb:af:f8:
56:81:83:99:45:6b:82:74:6c:68:7c:49:48:f6:dc:4e:12:aa:
bc:1f:c7:1d:ff:5d:21:85:04:9f:f7:98:87:46:c6:d2:6b:4c:
d5:4b:b2:f0:e6:1e:f5:f4:49:07:7a:5d:bc:23:13:28:9d:1d:
64:6d:f6:09:1b:c0:68:94:82:f0:e2:87:92:fc:bb:6c:79:a6:
1f:f4:11:47:65:45:e6:06:76:44:c6:a9:57:07:e2:98:8f:02:
49:51:e4:f4:5b:a2:14:9a:65:bf:6d:76:db:21:5c:aa:64:64:
89:9a:78:33:61:73:52:84:00:a2:61:25:fe:a5:11:a2:18:2f:
76:56:32:86:3f:86:3e:36:a0:0b:d8:0b:80:05:81:95:57:65:
2d:9b:71:91:73:d0:63:77:42:ab:20:f7:bc:a0:2b:27:da:1c:
60:59:b5:d6:f2:60:a2:df:f0:9a:eb:f3:53:6a:a8:6b:c2:21:
f8:5f:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:55:49 2025 by rpki-client