Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: 9bvwJa0bv6JLiQIqO9iNh6rPUgPjXwlQbsImJbnIvwA=
Subject key identifier: DF:5B:D1:C4:64:ED:F8:DB:E4:2A:2E:16:F7:0E:07:6D:6A:81:CE:8F
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 019A04487D599BE0A7CEF10D907ECB14D26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 01:00:50 +0000
Manifest this update: Tue 21 Oct 2025 01:00:50 +0000
Manifest next update: Wed 22 Oct 2025 01:00:50 +0000
Files and hashes: 1: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (hash: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=)
2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: 8uMTmi9Zdc6NBevSgAWQR1lstYebnppgezz+7xGy6Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:7d:59:9b:e0:a7:ce:f1:0d:90:7e:cb:14:d2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Oct 21 01:00:50 2025 GMT
Not After : Oct 22 01:00:50 2025 GMT
Subject: CN=df5bd1c464edf8dbe42a2e16f70e076d6a81ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:5a:ab:42:06:80:dd:e0:83:fb:ce:05:21:
38:d3:4d:f1:7e:1e:d0:78:12:73:39:c3:51:d2:e8:
ce:7b:94:40:17:e8:9d:18:ef:da:34:5f:d4:83:06:
a3:d9:28:c5:27:26:77:37:1c:f5:5b:ad:0b:e3:a7:
09:1c:17:75:6a:15:cc:c6:08:45:47:48:cf:09:83:
8f:8c:cd:7b:3f:91:14:66:1e:34:cc:a8:5b:df:1c:
ae:fb:fd:7c:90:65:eb:02:01:84:06:ca:9b:8e:57:
e8:5b:03:da:5c:da:ff:37:a5:e0:be:f3:11:f8:4c:
27:de:84:2b:c3:03:38:49:76:56:99:52:87:66:7d:
87:5b:5c:5d:d7:dd:e4:26:b4:cc:f3:4e:9a:0a:ea:
48:3b:68:e5:40:98:50:be:6a:09:9d:64:32:bc:b6:
bf:5b:b8:fb:68:66:a9:e3:b1:e1:6c:47:bf:9e:4f:
22:b5:81:a5:92:b5:88:84:43:63:93:f9:1e:00:45:
69:4d:bf:b2:ad:2f:b5:1d:9e:1b:2e:a8:38:ce:c7:
df:25:b2:75:42:e8:ed:18:81:78:0b:60:e7:4f:b4:
38:a9:ba:1e:1b:4e:37:5d:a1:0a:84:e6:10:30:65:
64:07:33:4e:af:c9:8b:22:18:40:23:8c:54:ff:6e:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:D1:C4:64:ED:F8:DB:E4:2A:2E:16:F7:0E:07:6D:6A:81:CE:8F
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e7:11:ab:10:3d:10:2f:57:c8:d7:16:a2:13:cc:f1:9f:8c:
95:19:0d:23:b3:98:b3:ee:b5:ab:7b:02:a4:5f:fd:70:aa:47:
16:0e:28:ee:29:06:8e:63:dd:04:ed:68:bd:3e:08:7b:e9:87:
fc:45:6e:eb:58:e3:9c:24:7d:c9:1c:ea:db:fc:32:27:62:6f:
f7:92:4b:c4:50:15:61:e7:a0:d9:9d:e3:73:cb:58:a7:87:36:
2b:a4:5f:67:bd:28:8f:d9:d9:fd:01:ef:2d:fc:4d:93:0e:94:
ab:95:9d:d8:9f:84:d2:2b:a3:02:5e:20:a7:b7:af:cf:bb:e5:
f4:e0:5c:2f:25:2b:bd:ac:b6:28:82:10:5b:65:32:d0:00:82:
61:56:ae:b6:b5:b8:8a:21:5c:65:08:2f:e1:77:f3:76:eb:11:
a6:61:ce:7b:b9:99:c6:e4:6e:c0:3a:99:bc:90:ee:c9:2b:b0:
b9:fd:9c:f3:37:31:11:70:fd:33:21:65:3d:fc:31:5f:0b:6a:
46:25:70:85:7c:21:d4:03:95:17:0f:c7:c4:94:ef:fd:71:4c:
7c:1e:f8:34:27:4c:44:2f:24:bd:ab:6d:39:5c:24:9d:e1:85:
38:06:2e:0b:69:a7:2c:42:36:0c:d0:00:5e:da:8e:fb:0a:09:
79:f4:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:49 2025 by rpki-client