Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier: pxP8BpyZZgZ8TC6V86Aqi78uOQuNCXKQuTwL6BPQHmA=
Subject key identifier: 0C:E6:6A:AE:8E:8D:36:A9:10:3E:0E:9F:99:C3:84:24:A4:52:48:8D
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 019A4F2B422EE7AD21A68E2417284F846D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:26 +0000
Manifest this update: Tue 04 Nov 2025 14:00:26 +0000
Manifest next update: Wed 05 Nov 2025 14:00:26 +0000
Files and hashes: 1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: J0OcN3fBzPrPo4oRgJKY5piXxtoko7O4w8WeK9Z/teY=)
2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:42:2e:e7:ad:21:a6:8e:24:17:28:4f:84:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Nov 4 14:00:26 2025 GMT
Not After : Nov 5 14:00:26 2025 GMT
Subject: CN=0ce66aae8e8d36a9103e0e9f99c38424a452488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:15:b2:49:f0:4f:f9:fd:a7:79:d7:3d:2d:
22:1c:f3:2f:bd:a4:48:c3:38:3f:11:43:ef:dd:36:
e4:8e:3d:cb:d5:69:8d:78:91:ca:e5:9c:92:bc:ab:
92:45:1c:07:44:e4:5f:ed:3a:c7:0e:b7:80:67:e3:
d8:bc:6e:cc:1c:cd:d9:4b:6d:f3:f6:9a:62:cc:17:
5a:88:1a:d1:b4:54:2e:04:96:a8:77:67:03:44:cf:
d0:e9:11:e9:04:06:ae:6d:7f:95:88:d0:a3:03:80:
e5:20:52:c7:cc:79:63:10:0b:b6:7f:fc:d9:0a:6f:
5e:f1:78:a5:00:d2:80:2d:0f:d0:8b:c2:69:24:1e:
24:d0:a9:7d:08:df:2d:ae:dc:d5:f5:b4:ca:55:a8:
d3:2f:d0:16:6c:d7:23:9e:8d:7d:f5:d1:98:19:1d:
18:79:ea:74:d7:b5:00:36:a9:35:06:18:e7:73:26:
bf:5f:85:0b:1e:e1:57:2b:13:3f:d5:df:ee:c4:0b:
fb:ab:07:c7:7e:1b:69:50:de:e7:85:93:76:96:0d:
43:65:c2:2c:00:e2:4a:58:28:ae:0b:33:bb:bb:1f:
b5:27:0a:ec:a7:98:6e:45:06:fd:4e:a5:2b:fd:39:
db:08:9f:0a:90:36:ea:40:1d:07:a1:7b:f8:6a:78:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E6:6A:AE:8E:8D:36:A9:10:3E:0E:9F:99:C3:84:24:A4:52:48:8D
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c5:db:ee:96:dd:0e:32:9e:8c:33:c5:de:cb:b2:6f:e0:59:
c8:9e:ff:4e:d2:c1:75:b7:c8:cc:84:50:44:43:6f:b4:11:83:
e0:89:f5:ed:4e:ff:71:8e:ed:71:69:6c:85:a5:83:20:60:4e:
73:94:bf:ba:c4:32:43:66:0d:04:9f:74:04:f4:4b:70:d8:ee:
d2:ae:3f:64:04:11:93:b4:17:1b:f4:f7:a6:b5:98:6f:38:d0:
bf:b8:39:cf:2d:04:49:4b:29:61:a3:70:89:d3:00:e8:60:f1:
c9:8b:0d:e0:24:c6:39:e2:07:71:26:0b:61:a5:35:09:63:16:
99:05:35:13:80:df:88:c5:fe:02:a1:a7:72:d9:9e:77:15:5f:
31:16:c0:b6:20:6d:62:6f:6e:7e:c7:ea:a3:7f:69:fa:fe:6a:
d7:39:e7:3b:0e:a7:87:a6:fc:fc:54:e7:ed:3e:44:99:9b:09:
15:7b:76:3e:34:18:02:49:31:8e:2c:29:d7:8e:cd:15:b1:36:
f7:4d:23:6c:44:83:63:1d:69:70:be:d2:8d:c8:11:34:af:f2:
15:9b:4b:19:f9:5b:db:d8:d4:59:94:4e:25:b2:24:87:e8:f8:
c5:a0:42:0f:bc:18:7d:83:04:29:5b:7c:55:f4:93:9d:d5:64:
3e:30:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:27 2025 by rpki-client