Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: r5kyVWioOGYlzl4U3NB4BE9HMHPWWdi9fVFk4/idvTQ=
Subject key identifier: A7:1B:E8:AE:CC:49:34:0A:AE:CF:27:08:EE:9A:5A:A5:2C:7C:88:ED
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 0199FEB4E7BD2B66A4C98EBFD7D598727263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 23:01:32 +0000
Manifest this update: Sun 19 Oct 2025 23:01:32 +0000
Manifest next update: Mon 20 Oct 2025 23:01:32 +0000
Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=)
2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: AdCRGdshoLPfbbznSiM3JABDKYjj3atDSVgWj2ZTbIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:e7:bd:2b:66:a4:c9:8e:bf:d7:d5:98:72:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Oct 19 23:01:32 2025 GMT
Not After : Oct 20 23:01:32 2025 GMT
Subject: CN=a71be8aecc49340aaecf2708ee9a5aa52c7c88ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:5b:53:ae:25:d7:b5:b7:e0:11:85:f4:48:
04:81:4b:2c:14:71:d6:af:64:95:20:21:41:62:07:
9b:29:f6:ca:92:3f:dc:ad:b7:af:b5:48:99:f5:83:
a9:5f:5c:c6:9d:fd:31:34:8a:3a:8d:53:1a:7b:36:
2b:48:fe:1e:d5:b4:e7:95:cd:05:71:fe:74:72:7d:
ff:3b:0d:63:12:d3:d6:fa:67:26:01:6b:aa:2f:11:
08:27:ef:2c:8e:c5:84:c9:3f:cc:bc:3b:b1:1c:bb:
9b:48:94:69:cb:e4:aa:0b:98:bb:f7:ea:a5:3a:9d:
3c:c7:6d:90:8c:b4:a4:98:31:51:c2:19:a8:c4:3c:
5d:60:27:55:69:77:5e:39:0e:8b:a3:b8:52:cf:52:
0e:1a:54:16:19:1e:ec:b1:ce:0a:18:1b:ba:d4:bf:
c6:ac:15:24:7b:69:e6:57:32:ca:66:d3:88:d8:3a:
48:10:10:92:6d:16:de:e4:74:30:91:86:ea:25:08:
60:9f:44:00:e0:05:16:9f:94:af:6a:15:87:77:a8:
aa:02:35:70:28:1a:e9:c3:a2:dc:ef:3c:f4:92:19:
b5:39:00:e6:50:5e:05:b0:8c:61:9c:cd:54:91:49:
9f:81:28:1d:7a:9c:78:43:f1:61:09:3e:0f:5f:2d:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:E8:AE:CC:49:34:0A:AE:CF:27:08:EE:9A:5A:A5:2C:7C:88:ED
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6e:5d:ef:c5:6e:10:86:3d:53:3b:cb:65:e5:96:12:c7:f9:
ac:83:6d:1d:24:54:ef:6b:72:29:23:b8:d7:99:0a:74:2c:a8:
38:dc:4a:af:51:1f:ab:18:09:30:8b:25:45:88:36:d5:75:d5:
ee:fe:94:5a:74:cd:ea:7c:f5:8c:47:a9:f0:cd:f4:da:2a:fa:
af:7c:1b:4a:e1:8a:98:f8:f4:7c:7e:e9:bb:9a:73:14:aa:eb:
6e:f9:46:e1:20:11:19:17:49:ac:76:e0:34:ba:71:05:ae:f1:
4e:9a:cb:d9:16:0f:da:da:a7:a4:f9:9a:93:56:4c:dc:6f:ab:
7d:da:08:69:be:a0:b8:81:de:e7:61:5d:c2:96:ed:ab:4b:86:
ee:d8:03:f3:29:de:4c:f9:c7:19:b5:1b:14:7f:d8:0e:5b:d9:
53:77:40:1e:8f:f8:9b:63:71:ec:28:6e:1b:cf:43:ba:c3:0c:
c7:8c:1f:ea:40:51:f5:ad:7a:c7:c7:29:a7:32:72:d3:d8:d5:
1b:f0:bd:f9:dd:8d:d5:d1:4a:f0:fd:49:cd:5b:fb:a6:65:4e:
90:c2:13:b5:0c:00:27:d9:c3:0e:00:cc:a0:38:15:67:34:24:
f3:52:a6:46:f9:d2:6a:e9:a0:cc:db:3a:74:bf:4b:35:10:91:
8b:76:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:24:00 2025 by rpki-client