Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: nSwwoDE/tcgNxoyu2rOXDTX80L91S/6JLcn55y+FUQ0=
Subject key identifier: 95:F4:F0:07:4E:1B:0C:78:3E:46:50:52:35:F8:F6:DE:2B:5A:BD:BA
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 0199FFC72C2CED20C0D1512500D15B7CBF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0DA6
Signing time: Mon 20 Oct 2025 04:01:06 +0000
Manifest this update: Mon 20 Oct 2025 04:01:06 +0000
Manifest next update: Tue 21 Oct 2025 04:01:06 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: Mvz1lI3yQD8TikXVZJFmCumE6fspXHbfM2VHYcP/lb8=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:2c:2c:ed:20:c0:d1:51:25:00:d1:5b:7c:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Oct 20 04:01:06 2025 GMT
Not After : Oct 21 04:01:06 2025 GMT
Subject: CN=95f4f0074e1b0c783e46505235f8f6de2b5abdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:d5:c8:5e:72:2f:eb:7b:33:64:5d:09:98:
97:d8:06:fb:ec:ec:d7:70:42:73:3b:bb:ae:61:02:
65:c7:21:17:25:aa:42:92:b6:72:f8:47:01:f0:45:
b5:2c:55:35:8d:6c:3f:47:8e:94:fa:94:2f:93:06:
07:0b:0d:cd:c2:de:7b:1a:f5:fd:e7:e2:f1:51:13:
bb:85:e1:2d:68:c2:1a:da:9c:f0:86:d7:d5:e6:bd:
0a:1a:c7:ed:16:6c:b0:32:8d:fa:3d:ac:74:13:4f:
ea:95:9b:cf:16:d5:f4:3e:1e:0d:4a:c1:92:44:33:
55:61:f5:29:37:07:55:46:22:af:d5:ff:e5:a7:7a:
77:90:51:63:ff:1d:26:6a:87:b7:f6:53:69:f4:1e:
a2:44:43:5f:c8:60:00:d0:73:1a:80:56:96:6f:ca:
49:12:ae:05:07:83:fb:a5:a6:81:ec:4c:8a:b9:99:
40:55:1e:ce:c4:78:07:ee:e5:9b:f3:bf:36:a1:ee:
55:a8:b7:32:63:3d:d0:2d:85:d1:39:fb:a7:7d:c3:
33:6f:9b:e0:90:2c:f8:f2:eb:3c:ab:f1:84:1b:13:
95:77:85:4c:d0:95:39:18:63:e4:57:4c:f0:9e:60:
18:44:72:74:72:0e:25:34:07:95:4c:92:d8:ec:02:
40:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F4:F0:07:4E:1B:0C:78:3E:46:50:52:35:F8:F6:DE:2B:5A:BD:BA
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e6:bb:0f:52:de:cc:5a:71:43:d8:18:c2:bb:95:e9:69:c3:
b9:68:c8:21:b7:7e:62:33:9d:d8:dc:73:fd:03:74:a8:08:82:
35:eb:36:47:cd:88:f6:4f:69:9d:5b:0e:53:63:3c:ca:7e:63:
be:e9:06:21:47:53:23:33:cf:4e:d1:a1:75:b8:d7:f1:d7:16:
2d:3d:93:5c:7c:53:7f:a2:08:ce:48:17:91:43:43:5e:6d:79:
74:22:13:b7:a6:db:33:20:a3:9e:cb:0d:fe:1f:6b:9a:a0:3c:
91:d3:66:3c:1f:fc:f6:ed:13:11:17:fe:cf:67:e6:9e:7b:2b:
2f:28:c9:b6:5c:9b:c3:ea:12:95:5a:81:b8:b7:b1:22:e5:a7:
f3:86:79:09:ca:5c:75:ca:7b:c1:71:c2:64:e9:4c:e1:55:43:
48:79:9c:2b:ed:43:52:47:49:24:59:05:f7:26:20:c5:19:68:
87:7d:50:e8:49:a5:0f:cf:75:c6:6f:61:5f:d4:ed:cf:24:00:
1d:5f:57:6f:dc:04:e9:9d:20:6c:60:cb:da:3f:3f:7c:ce:c9:
bc:14:90:5e:16:2a:0f:9d:91:ce:fd:f7:55:d4:93:b9:24:35:
64:00:79:8e:fc:25:b9:38:27:68:f8:92:59:9c:fa:a2:54:83:
b6:4d:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:14 2025 by rpki-client