Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: Y9wK0ZLog3GNlrkcad/La227cL3YXOnnO9ccUy9nf28=
Subject key identifier: 68:B9:F1:80:BC:DE:F0:1B:0C:6B:48:82:BC:12:2E:CE:C3:94:F1:67
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 0199FB7C75B6C47FF98D0E1B12847A68C257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: Z2S57soliueMTVEyGovf75orajw.crl (hash: 94LxJL9ZNULlhU1uyQDpPqaUugHPuSfRy+diTX/SdEA=)
2: uWdsuK3hAe7Dl7tiOo0NecGrcUU.roa (hash: qdhSzKYW9JqHooGrxdO5XlVsGBK8AcDq8ZkhxAah40A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:75:b6:c4:7f:f9:8d:0e:1b:12:84:7a:68:c2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=68b9f180bcdef01b0c6b4882bc122ecec394f167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:8a:13:ab:e6:cf:96:49:8d:15:30:41:8d:
a1:48:10:98:48:c7:7a:37:16:9d:c7:79:89:a1:35:
53:bd:5e:a8:3e:18:07:f8:67:5c:34:9d:7e:8f:8e:
9d:dc:89:9d:ae:54:ee:b5:52:87:ea:2b:ae:83:b7:
f3:bb:ec:df:1b:13:1f:fc:40:ef:b5:86:e6:0f:d0:
51:7f:8a:fa:4a:64:19:87:ec:77:33:2b:8b:45:11:
4e:9f:ea:8a:5f:31:f9:02:d9:7d:1b:41:0d:f0:21:
0f:e5:f1:ec:af:8f:98:f5:89:e9:35:21:af:24:3c:
2f:66:39:0c:c5:37:68:4a:04:93:bc:fc:75:68:b8:
e8:14:30:d9:ea:af:c2:df:cb:12:40:72:8d:32:e9:
4b:93:49:d7:98:46:2a:96:5d:1b:85:7d:fc:99:20:
dd:4a:04:e1:37:37:cb:89:dd:74:7d:b9:3c:ad:be:
c1:37:88:c6:6a:7c:54:57:a5:fa:96:3b:47:87:84:
fa:31:22:98:9a:88:fb:3d:a3:b3:3a:53:42:ff:93:
ed:98:f2:ba:de:77:be:ce:67:d7:94:5b:99:35:8f:
cf:7e:b5:e0:58:e6:e0:c2:51:8f:31:f9:b5:97:8a:
48:2e:3e:35:51:20:b7:24:8f:d6:6c:a4:2f:49:fd:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:F1:80:BC:DE:F0:1B:0C:6B:48:82:BC:12:2E:CE:C3:94:F1:67
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:81:0f:53:54:ea:2f:16:6f:72:4c:90:db:d4:ea:41:14:f0:
a4:45:eb:c1:42:61:0a:8e:26:71:3e:1e:0c:92:a1:28:e7:fe:
73:eb:f8:46:d1:7b:d5:89:6a:ea:99:dc:e5:22:74:a8:c4:ea:
a3:4a:62:81:0a:85:ba:db:ef:c4:0c:a0:08:31:de:4e:8f:dd:
3e:e0:d3:28:2f:9e:7d:ed:b9:50:ee:ba:27:a9:95:e2:80:8e:
3e:d7:a5:4b:c4:96:9b:7a:d0:9a:c9:af:a9:c3:63:71:72:6e:
f6:5b:01:5c:c7:1b:01:fa:ad:c4:92:c1:06:3b:5e:f5:05:d6:
a3:91:64:14:6b:4f:30:a0:dc:63:34:9f:16:f6:90:02:38:6a:
33:70:ac:bb:2b:c3:9e:e5:cb:b3:c4:e8:df:07:bd:3c:1d:1b:
c4:04:f0:f5:1f:d4:85:ea:8a:8a:77:9f:e9:d1:17:eb:ff:05:
80:1f:68:81:78:19:e0:cc:7f:f8:4b:22:16:c5:6a:7d:e5:a1:
9f:41:17:65:4e:47:98:b0:ca:ee:4c:fb:62:f0:f8:85:00:bf:
cd:86:32:d0:1e:68:23:41:12:f5:46:1a:d2:e7:fe:1e:1e:68:
5d:b8:1d:10:95:45:6a:2a:a7:3b:7a:60:22:64:90:ae:94:95:
de:3d:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:03 2025 by rpki-client