Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: Vaj/jkaety/VafAWHBUesOIvh7f3MQgVGnV4b0FlrJs=
Subject key identifier: 18:4F:EC:2C:A5:14:E3:FC:D3:33:74:75:A2:03:A7:6A:9C:4B:BD:2B
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 0199FC21BACA69B6D7635437213EAD1A56DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0BF1
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: U3s+4QQyFtcQrU9PbdZ6RHRgcWVVKti/Vi5GP0zEdlQ=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ba:ca:69:b6:d7:63:54:37:21:3e:ad:1a:56:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=184fec2ca514e3fcd3337475a203a76a9c4bbd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:17:b4:d8:96:da:be:f1:dc:38:6c:fa:f2:4d:
3f:ad:a3:5a:ea:9c:04:7d:71:e7:c4:eb:c8:08:cd:
e5:06:a1:71:bf:92:38:f2:fc:a8:11:c6:49:72:61:
4d:5b:3e:8f:68:cc:df:2e:6b:69:31:69:52:f3:e1:
85:c9:57:cc:3e:ef:1c:a8:4b:c9:9b:32:28:a5:81:
52:bb:71:8c:16:89:19:50:f0:a2:58:3d:08:cd:06:
ef:6a:fd:77:11:89:c9:fb:f1:52:98:67:1d:cc:62:
97:c7:7e:f3:40:1e:af:46:67:24:39:61:a6:47:06:
ec:16:98:0c:ea:2f:9b:e1:99:7e:b1:ee:dc:bc:49:
84:d4:23:fc:aa:3b:4d:ec:3d:14:64:a6:29:34:86:
e2:84:62:18:35:6b:1e:5c:58:87:29:41:7f:08:a7:
53:2b:9f:74:b8:f8:16:d6:1b:a3:bb:d1:e9:14:fc:
e0:57:0c:71:b4:c2:bc:39:de:49:3f:94:ee:96:8c:
f7:80:50:bc:a0:0e:b2:2e:d5:0a:5b:b7:e8:fc:61:
08:5d:5d:30:54:7b:6e:89:62:87:54:d5:29:e1:30:
14:2b:86:0c:c7:25:fd:6a:7b:57:f2:05:19:52:fa:
7f:5d:38:62:aa:23:8e:b8:1f:23:96:bc:11:b6:6d:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:EC:2C:A5:14:E3:FC:D3:33:74:75:A2:03:A7:6A:9C:4B:BD:2B
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:a2:15:02:a5:07:8a:8c:bf:3b:19:c3:e5:a7:38:26:4d:
eb:78:7a:b7:c6:fa:28:5e:38:34:0a:68:75:5d:f8:d3:fa:f2:
99:38:c2:61:a7:ca:4e:3f:03:ed:c4:63:12:f3:91:e9:52:f8:
c1:e5:64:02:d3:c0:b9:ff:4e:3a:cb:bd:f5:2e:a7:aa:d3:30:
8d:78:92:3e:b8:e7:0b:d0:05:3f:9a:ac:b6:b2:c6:2f:fc:32:
1b:07:60:33:cd:f0:03:39:9a:23:0b:1f:d8:24:94:1a:78:ce:
df:b4:30:c5:c4:9d:6f:6c:ef:20:16:b1:5d:b5:d0:87:28:b8:
04:09:c7:66:51:35:1e:1a:e4:69:9c:93:f4:4a:73:be:9c:da:
19:94:1f:c0:f3:a7:9c:2f:04:4e:aa:ee:fa:68:eb:52:f4:4e:
77:a7:0a:9c:f1:08:48:b7:fb:11:13:d5:b7:5f:d1:42:3e:6e:
53:0f:64:c4:b9:22:45:34:9d:8e:8d:12:12:4d:43:eb:85:c7:
66:dd:48:81:0b:3d:10:c8:af:0c:1d:52:7e:a6:db:2b:1d:74:
13:b9:3f:1f:c0:92:b5:9d:04:ee:11:41:08:ba:75:b6:6a:c8:
42:2b:66:1b:b7:d6:42:88:bb:82:f7:16:21:7e:f0:fa:d1:6d:
e5:30:36:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:16 2025 by rpki-client