Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: ThWAW4uFCoFt/PXFyMy3kOqahS9dJYCwYIn7xngQZ4s=
Subject key identifier: AC:71:76:70:C4:9C:6E:16:D5:B9:45:3E:AA:F0:BE:48:23:D2:40:CE
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019A00A314E3FF718BD1A7B12342D3405F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 172E
Signing time: Mon 20 Oct 2025 08:01:18 +0000
Manifest this update: Mon 20 Oct 2025 08:01:18 +0000
Manifest next update: Tue 21 Oct 2025 08:01:18 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: xQAb48ZmrsDW8zMVQhnpUz0ScLoULXjSGO96FX3iv64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:14:e3:ff:71:8b:d1:a7:b1:23:42:d3:40:5f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Oct 20 08:01:18 2025 GMT
Not After : Oct 21 08:01:18 2025 GMT
Subject: CN=ac717670c49c6e16d5b9453eaaf0be4823d240ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:63:3e:df:77:b2:12:28:cf:bc:0a:ca:0d:
00:5e:8b:b1:ad:8c:9f:02:d0:0e:3d:57:19:dc:c1:
c0:6a:e8:1e:e5:73:97:71:04:b1:97:96:61:dd:f2:
c0:ef:be:f0:c8:b8:f0:68:2d:e0:ca:1b:1a:5d:d1:
4d:91:52:b5:c8:24:6a:2d:95:55:55:36:2f:23:67:
87:95:d7:4a:6f:f2:9a:72:c5:62:62:b6:69:a8:1d:
03:07:62:15:f9:95:47:0c:66:af:f8:d0:09:7c:5d:
5e:f6:dc:f8:e1:19:b1:37:3e:7c:19:94:17:b4:4d:
1a:68:24:ba:0d:53:73:ca:da:7d:e2:6e:a5:ed:88:
3c:2d:d7:4e:6e:b2:9a:ba:bd:47:22:b4:36:3c:88:
f2:80:96:b0:11:24:c7:ad:02:9d:02:be:37:c7:5a:
39:46:05:6c:ea:db:6e:36:64:0f:5c:19:47:b8:7b:
70:46:09:18:e0:da:03:f9:df:e9:7d:7e:a6:e9:58:
e8:10:53:9b:cc:43:50:8f:e0:50:cd:fe:10:6f:1a:
82:15:54:1a:e7:a3:a6:b7:5d:12:50:82:e2:4b:77:
fd:fe:8d:3a:a3:a5:a3:bc:2b:69:d4:1e:48:ed:1a:
db:26:1c:70:f5:46:c7:8b:cd:fd:ed:e3:a2:6d:3f:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:71:76:70:C4:9C:6E:16:D5:B9:45:3E:AA:F0:BE:48:23:D2:40:CE
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d8:58:93:71:77:ca:ec:5b:90:22:c4:8e:60:89:ba:fd:9c:
f7:83:4e:11:aa:c5:9e:1d:08:4c:3b:ce:e6:83:8c:11:c7:29:
0f:78:b0:62:80:c8:62:54:fc:44:e9:cd:3c:87:f1:bd:dd:68:
7d:60:8a:1e:26:6b:ed:72:8c:87:83:9e:d0:7f:06:60:cf:2e:
9e:b6:87:02:50:33:26:25:40:bb:2d:d9:12:c7:ba:ec:45:09:
46:9d:ef:3a:38:73:39:6c:ec:b2:b9:d5:39:65:5b:5e:3d:e6:
f5:99:6e:e6:a8:c8:80:c4:2a:d4:a6:e1:6c:2b:c3:1f:5f:a6:
2f:ab:2e:5e:07:66:be:3f:85:97:7a:08:e5:17:67:e2:2a:52:
be:5c:b4:d3:9f:ba:cd:4d:82:38:17:d4:4c:84:19:6d:1e:c5:
c7:17:d4:4a:eb:7d:ad:ff:ef:2e:13:3a:fb:dd:71:04:75:ef:
70:65:a8:a5:38:f9:79:86:de:9e:fa:1e:65:46:b6:1f:da:ed:
1d:98:28:b6:02:9f:93:69:ed:1d:a6:ac:24:b4:5d:47:2a:29:
1b:1d:7a:19:35:6d:a7:7f:71:78:e2:8e:87:ee:59:7c:6f:e4:
f2:a4:44:f5:91:fc:a0:25:6b:7f:59:72:ee:7d:fe:5a:dc:92:
5e:41:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:02 2025 by rpki-client