Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: Ca4urgwb4EYX2UiOar8GREbr3jTWNxUMIOYeHxxuOTg=
Subject key identifier: BA:6A:6C:81:44:E6:46:F2:7E:12:85:FF:4A:14:5E:2A:A4:D9:BC:DD
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019A0035D6F78D49CCFAECAF18F27CDFC17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 05BA
Signing time: Mon 20 Oct 2025 06:01:59 +0000
Manifest this update: Mon 20 Oct 2025 06:01:59 +0000
Manifest next update: Tue 21 Oct 2025 06:01:59 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: DXwB2i2IOkM2UGMtkxUAFwFqYn6BRWrFyn7ZbYLDGkQ=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:d6:f7:8d:49:cc:fa:ec:af:18:f2:7c:df:c1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Oct 20 06:01:59 2025 GMT
Not After : Oct 21 06:01:59 2025 GMT
Subject: CN=ba6a6c8144e646f27e1285ff4a145e2aa4d9bcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:12:a1:da:a5:77:85:95:c5:17:32:09:a9:
e4:ad:2a:60:f7:67:37:1c:72:70:27:db:f8:53:af:
2f:67:89:c9:ae:f7:ce:f4:9e:d6:68:e2:df:7c:b1:
9b:73:73:b5:dd:60:27:cf:f6:3b:4d:a0:7f:f2:ea:
d4:3a:ce:e2:76:56:38:c0:74:98:d6:01:28:97:96:
2b:2b:27:fb:67:25:90:d4:3f:29:45:27:3b:73:b0:
42:e5:14:59:e7:38:c7:ae:b7:60:00:62:2c:ed:86:
ea:31:ba:bc:ae:ba:24:23:40:87:12:43:bb:9e:a2:
ec:9b:0e:77:c9:92:48:8d:2c:98:1b:a0:ca:6c:94:
7d:6f:7e:da:7c:be:67:4f:a4:1c:2b:37:28:ed:dc:
e2:55:6d:5d:5a:10:6c:bc:c3:ce:e2:f5:52:4b:ae:
b4:f9:9c:9b:c4:85:3f:ae:f8:16:8f:68:e1:9a:83:
b9:0b:b9:0d:06:a5:b6:a7:5b:60:99:ae:e9:32:b5:
d3:81:66:e3:f0:e5:6a:5b:ae:d0:f4:58:89:40:a7:
2c:b5:c3:c0:8b:e0:55:75:bc:1a:0d:3e:bc:db:32:
aa:97:ee:65:aa:3a:f3:6b:05:f6:21:1e:45:12:90:
15:8c:4b:4e:29:45:17:4e:58:6a:00:27:55:a4:ba:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:6C:81:44:E6:46:F2:7E:12:85:FF:4A:14:5E:2A:A4:D9:BC:DD
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ba:4b:89:d1:69:4c:93:00:3b:47:d2:d9:7e:d9:2b:96:41:
90:3c:67:26:ff:2b:7a:60:0b:1f:d6:53:cc:30:2b:de:78:10:
b1:9e:78:bc:f2:71:24:6b:5d:b6:e9:6e:07:c2:4b:6d:f2:30:
5e:7c:36:ad:d4:97:73:54:7d:bd:cc:78:e2:eb:14:0d:82:7c:
e7:a0:c5:7f:62:96:70:cb:64:c7:ca:f3:4e:76:c5:1c:08:81:
37:58:87:ff:32:f9:95:81:d5:30:88:b3:dd:f7:6d:34:38:64:
42:fa:38:c6:35:ec:ab:7d:d2:c0:2d:7c:c3:d7:65:04:c2:1b:
3c:69:ca:5a:ab:59:e6:ef:e2:0f:50:ff:dd:f7:f7:58:52:b4:
08:46:ed:77:29:14:12:41:35:6e:79:a6:75:b2:32:12:75:ab:
b0:f9:d9:2f:f5:1f:e2:22:a9:f4:c7:8e:8d:1c:41:5a:45:12:
21:5f:6c:11:40:53:c3:4f:a8:39:63:86:df:7f:2d:70:e6:21:
ba:f4:df:0c:42:2a:89:6c:c2:43:65:62:4d:9f:ae:c1:83:37:
47:f1:62:95:23:f3:ff:0c:aa:ef:7d:a0:01:07:27:b0:9c:9b:
c6:19:3c:a5:d8:8c:84:8e:78:69:cc:4e:05:6e:ef:08:d0:80:
9d:cb:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:00 2025 by rpki-client