Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: y78KV4ZiBO/ZtUO3Ke2nBPjDiiggaS5FNJTcAdBzuqk=
Subject key identifier: D1:D9:2C:7B:CD:A0:11:DB:CD:C3:AA:18:29:FE:93:C7:67:84:C5:3D
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 019A4D3D370D6173FC23DFCD3D76D90B6B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 05:00:48 +0000
Manifest this update: Tue 04 Nov 2025 05:00:48 +0000
Manifest next update: Wed 05 Nov 2025 05:00:48 +0000
Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: SSfnseZwVE0yQWETvaielSOZyXc12xEtcVWImuX0I0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:37:0d:61:73:fc:23:df:cd:3d:76:d9:0b:6b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Nov 4 05:00:48 2025 GMT
Not After : Nov 5 05:00:48 2025 GMT
Subject: CN=d1d92c7bcda011dbcdc3aa1829fe93c76784c53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:c2:03:d3:a8:ba:16:32:1d:4d:d1:bd:d7:
fd:8e:40:a8:49:25:f4:a0:f4:6d:11:2a:0f:0a:66:
c1:34:24:f0:5a:d7:e9:11:31:27:75:f1:47:63:a6:
3d:a2:c1:ae:cd:ed:1b:85:a1:6c:a4:f4:25:49:c5:
28:24:a8:6b:b3:28:b5:82:9e:20:00:2b:09:aa:c4:
38:54:bb:eb:66:30:2d:f4:e9:28:fc:d8:41:e8:c5:
d7:ca:ed:0a:a0:0f:50:09:cc:68:5f:41:6e:cc:6a:
83:e5:c2:03:73:b0:23:20:6a:e4:20:5a:48:38:0e:
da:31:d3:1c:74:7d:d3:fa:83:02:b7:fa:ff:5c:95:
ef:68:fc:3e:3e:2c:6d:4f:4b:55:55:6d:51:4e:1f:
42:bc:be:42:d8:51:30:42:20:9c:22:01:2a:88:fd:
c1:1c:b6:e6:72:2a:c4:0f:e1:9d:37:8a:4a:d3:d9:
21:1a:4a:b5:51:6f:a5:5d:54:44:bc:42:ba:78:87:
70:31:b7:87:39:e5:0c:e2:95:ff:69:e9:2e:e8:f7:
cf:0b:2c:16:a8:d5:08:92:3d:1a:64:51:46:34:e7:
6c:7b:57:15:90:7c:58:5b:f5:39:f4:c1:59:79:6c:
7e:71:ce:92:49:3b:3c:2e:96:e8:03:b7:e7:7e:f7:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:2C:7B:CD:A0:11:DB:CD:C3:AA:18:29:FE:93:C7:67:84:C5:3D
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f8:a6:03:89:54:85:36:19:f7:11:70:96:3a:bc:cb:19:cc:
fa:e9:c0:04:be:d1:a4:64:e3:c4:21:6e:5c:c7:c1:d2:60:2d:
f3:57:1c:72:d1:bb:e2:9b:72:39:87:59:61:25:5f:64:08:e2:
40:a3:6a:c9:07:fb:a5:b3:df:28:6d:e8:bf:cb:59:ec:bb:e7:
36:1c:3c:ba:4e:36:dc:24:82:26:75:a8:b7:f1:50:e8:52:17:
fe:22:3b:e3:29:75:e0:d5:a7:3a:cb:53:46:81:34:9a:ac:9f:
cd:cf:00:70:76:1f:af:4a:c4:f8:c3:c4:fc:a7:3b:7d:16:1f:
e9:3f:66:d5:b3:83:ac:2d:29:7e:5e:c7:ae:4b:08:a2:af:56:
f8:fc:6e:8e:80:ef:1f:dc:a4:96:43:9c:7a:19:2b:f0:72:3a:
5b:3b:97:52:ea:a1:91:61:87:ab:9c:d4:64:d5:96:72:1d:06:
21:37:5a:f8:61:ad:0d:64:98:4a:82:67:58:eb:1e:6a:bf:40:
45:db:af:0b:0c:bd:80:1e:63:43:88:2e:f1:30:0b:63:a7:1f:
c6:6d:6d:34:35:a9:a4:e1:ee:fc:5f:01:0f:77:72:72:c1:d4:
af:1d:a3:f9:ba:1e:0c:32:12:c4:2a:d9:78:b3:8d:34:ba:a8:
e4:e2:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:59 2025 by rpki-client