Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: nF+vOQ744eli2G4b8iAVBAp+bSTsozxPlzw0HFxM/kA=
Subject key identifier: 43:E3:82:77:FF:BD:E6:F4:11:93:F8:12:71:85:01:25:04:85:55:EC
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 019A4DE1F7549618AE64F23931C1F12EF29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
3: Npx18kARbKwhPsVOQp9AGtW-IRk.roa (hash: vuiB+5rGT82oxQbwKjm+/1tHrIOrr/bLoXItiD0HcWA=)
4: NsYwUgzVMnXieGE8ET2TEjto6eg.roa (hash: oLZXFnzZzj9unXv5slzpUpxTvQH/LdOTTYWq8r8y++4=)
5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: Wb5BVTakK+Z7sibmMbdksgUsOs2IiMUIEEgkH+AMIos=)
6: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f7:54:96:18:ae:64:f2:39:31:c1:f1:2e:f2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=43e38277ffbde6f41193f81271850125048555ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:3f:e0:dc:6d:b6:50:c5:f8:a8:9d:10:8a:
f6:e1:2e:07:43:09:2a:6d:ec:2f:44:74:c2:a3:b9:
e3:98:f2:1f:27:62:fe:37:47:72:62:7f:13:0b:db:
a9:89:65:db:59:6b:cc:4c:11:25:bb:b9:7d:17:7b:
38:23:30:03:9e:6a:00:c4:ce:97:ec:3f:b7:bf:b7:
71:22:ac:40:ae:62:90:2c:41:be:b9:d0:b0:69:30:
d8:c5:bb:63:be:08:7a:1f:44:3e:ea:ca:d9:ca:84:
a6:50:0e:3c:47:d4:cb:49:b2:ad:39:ff:77:be:54:
d7:de:29:2c:1d:10:82:23:13:6a:1a:4d:17:d9:c4:
09:4c:39:ce:a4:16:06:46:2e:8e:80:cb:ee:26:d8:
e5:2d:7f:7c:67:c7:54:ac:fd:59:bd:50:5e:19:c8:
cf:8f:5d:35:cd:8c:02:c2:9d:56:b9:36:b2:5f:d7:
d9:ec:ee:63:3d:a4:79:e0:de:17:9a:57:d9:57:a9:
2d:5e:05:d8:33:72:0c:63:85:72:a3:ab:8e:ed:2d:
27:2c:63:8a:65:3c:9e:9a:70:10:f0:25:74:69:65:
69:eb:2a:d0:4e:90:da:45:d8:8f:4d:b5:90:33:f9:
3a:b3:6a:40:f0:bc:55:51:82:e3:1e:01:5a:e8:4e:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:82:77:FF:BD:E6:F4:11:93:F8:12:71:85:01:25:04:85:55:EC
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:aa:21:12:e4:d2:f3:d4:4c:5a:85:94:90:ee:be:0c:f5:86:
8c:88:0a:09:e4:f3:45:c4:d5:d5:12:e5:87:7a:1f:af:76:44:
d7:30:55:5e:70:22:77:17:02:08:b1:df:56:cd:08:74:e8:4b:
7b:7c:f1:26:41:f4:79:d4:29:da:85:b4:b2:02:83:bb:ac:b0:
a9:26:13:b1:41:aa:63:a5:fa:2b:a9:9b:8c:82:e5:40:f0:dc:
ac:85:da:4f:ed:54:4b:df:5c:c6:b8:39:35:1f:5b:f2:72:a8:
13:7f:57:96:28:2f:44:59:3f:ff:28:f8:21:3c:22:ab:08:b7:
6b:15:a2:37:0b:a8:bf:74:99:81:3c:b1:be:6a:a3:53:f1:4b:
f2:b0:76:ae:15:5f:13:78:21:0c:94:f8:29:f1:d4:3f:e9:6c:
69:37:c3:31:57:21:d2:ff:9a:4c:69:89:10:6e:a6:05:a7:89:
2b:0d:03:ba:dd:11:40:72:ea:a2:70:d5:a3:b4:e2:a8:6a:04:
44:38:65:06:54:bf:a5:02:b3:d1:15:7f:d3:4c:33:40:a5:0d:
13:ba:08:ee:4e:7c:8a:92:3a:22:1d:e7:d9:38:69:f1:fc:78:
6e:8d:3f:f5:7c:34:41:8f:7a:b0:3f:f3:89:94:af:e6:92:28:
4f:5e:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:00 2025 by rpki-client