Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: Q4oX1UvkF+KK0Q7jB3/ci3zNRGLkL7ILDXbnD3L2kU4=
Subject key identifier: D0:0E:63:BE:0F:ED:26:F1:15:A2:4D:41:D7:72:BB:67:AE:4F:13:10
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 0199FDD9BF7DAC6607E58EBA3EFC1AE1E112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 0BC6
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: o5oeuOS4QzzcUkM4eFTkOj/zcujsP4PeADcSE3r7aDA=)
2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bf:7d:ac:66:07:e5:8e:ba:3e:fc:1a:e1:e1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=d00e63be0fed26f115a24d41d772bb67ae4f1310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:95:66:da:a8:f6:03:81:d4:3e:cb:6d:71:
03:6f:0d:46:10:6e:05:16:e0:56:d4:99:1f:f4:5d:
e6:c5:c3:07:e3:52:19:77:3b:55:eb:69:2e:eb:f8:
6a:82:cb:0b:da:1e:f3:30:0b:69:0a:6d:60:59:e0:
bc:11:1c:b9:de:0b:83:fc:0e:d7:7c:d9:c5:1e:2d:
b6:ab:b7:d8:96:ca:72:b3:3d:b4:5e:27:4f:6e:34:
03:84:26:20:8f:b6:c4:c6:87:4e:74:84:f9:9d:bc:
53:a7:3a:8b:47:2e:85:4c:f0:75:d9:30:dc:a8:7a:
07:f2:15:38:fa:c7:ca:86:1a:ef:7a:ba:de:92:39:
c0:d3:9c:cd:25:79:b0:77:a0:43:12:18:68:ac:8d:
c2:ee:d3:71:70:4e:b8:5c:06:e0:a0:16:1a:a8:87:
e7:4d:c9:fd:46:1d:6c:2c:62:78:f7:a0:b9:6c:fe:
76:23:1d:91:45:ba:63:fc:25:1e:a9:39:5a:0c:16:
6b:1e:cf:f4:0d:e2:da:66:5e:db:2c:56:e1:f1:c1:
c9:68:d0:2d:b8:2b:61:37:df:19:84:eb:04:d3:4a:
d2:87:a7:19:e4:63:3f:2b:69:44:fe:f6:3a:55:f3:
9a:0b:8d:1b:45:c1:a8:01:5b:53:ea:77:ea:7e:27:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0E:63:BE:0F:ED:26:F1:15:A2:4D:41:D7:72:BB:67:AE:4F:13:10
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e7:60:e3:ed:06:43:5a:0d:ef:34:1f:60:4f:d4:c1:ee:b3:
52:44:70:65:58:41:f6:57:e3:c0:72:d0:97:94:5c:af:64:40:
24:fc:6d:5a:6b:e3:fd:9d:68:91:b6:43:48:94:95:72:a0:bf:
2a:aa:c7:54:1a:1e:01:7a:08:5e:67:b4:e8:0f:0b:e2:ed:5f:
fc:4c:0f:10:b4:95:fd:08:35:b4:41:b4:1a:84:d5:49:e2:4d:
12:1e:07:0f:79:25:fe:e7:14:1d:4b:e2:75:79:a9:5b:aa:f1:
cd:34:33:a8:5f:95:54:31:ff:1d:27:81:b7:fb:89:87:91:b5:
f3:e8:82:79:c1:24:2e:44:91:a4:19:20:1a:5a:11:da:cb:76:
b6:81:ed:de:85:c3:38:b3:dd:53:96:a9:d6:dd:f3:5b:35:12:
22:07:72:f8:8c:1d:04:94:62:fe:7a:69:77:bc:82:28:13:7e:
e9:1b:4d:83:8b:81:69:c8:74:73:71:90:22:6d:e5:c6:fe:11:
03:01:e3:2f:16:c7:5e:58:e8:67:8c:d6:1b:71:55:e0:7e:32:
8f:b0:b0:b2:c9:df:6f:bb:07:87:9b:9c:1f:44:82:aa:46:96:
f2:e1:3b:b8:eb:bc:2d:7d:60:01:2c:1d:32:71:b1:1d:d8:15:
d4:c3:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:41 2025 by rpki-client