Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: YpKzuANRbV2uAV7ZW49x5ThwXK1aySLTsAvRxo0a2Cc=
Subject key identifier: 3B:7F:83:08:84:59:44:8A:00:38:60:4F:12:3D:B5:94:59:44:B5:CC
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019A0035923BB9B9F639C6194077684A2660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 06:01:42 +0000
Manifest this update: Mon 20 Oct 2025 06:01:42 +0000
Manifest next update: Tue 21 Oct 2025 06:01:42 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: CEN3o9Z9G2FRY3Oyfd9JWU38qMxeVxVZclJdl/prcek=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:92:3b:b9:b9:f6:39:c6:19:40:77:68:4a:26:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Oct 20 06:01:42 2025 GMT
Not After : Oct 21 06:01:42 2025 GMT
Subject: CN=3b7f83088459448a0038604f123db5945944b5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a5:a2:ac:03:5a:bc:23:6c:02:97:f7:84:96:
a1:c7:26:a3:21:db:8b:ca:03:03:48:25:d7:9b:77:
cd:8e:ba:a3:50:4f:9b:78:8b:0f:e9:8a:dd:f9:ce:
11:0c:c5:f1:63:e2:27:00:31:62:44:4b:a9:a9:a9:
01:16:28:3e:1f:04:36:85:dd:0c:b7:59:02:39:ba:
20:d0:ca:e1:e3:c9:3b:8a:23:13:f2:67:f4:8c:f1:
19:3a:31:a8:da:7a:cc:6a:2b:5f:ac:9d:5d:90:53:
dd:c4:b2:c1:fc:d7:c7:69:67:d4:3b:ec:7d:3a:a2:
78:be:3b:d9:ca:55:e6:c0:d8:ce:51:6a:49:1d:3e:
fe:4e:fb:53:d5:db:85:8b:ec:31:c8:66:11:d7:68:
ea:03:83:83:ef:e6:b2:2b:42:b3:7f:e2:99:6a:49:
c5:1d:0c:5f:97:f9:54:69:ae:3b:07:5c:0b:af:2f:
37:ae:10:88:1c:f7:a5:64:21:be:57:70:5a:56:ef:
e4:67:e6:cb:df:24:98:a1:72:35:80:df:40:96:5b:
fb:38:93:eb:4c:69:bb:e9:2c:12:8b:e9:73:65:1f:
e8:83:6e:a5:cb:29:e2:e4:1c:03:4a:35:57:55:68:
de:61:17:86:74:7f:c4:cd:e3:7c:06:c8:6a:4c:99:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7F:83:08:84:59:44:8A:00:38:60:4F:12:3D:B5:94:59:44:B5:CC
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:dc:c2:52:05:2c:48:6c:c3:be:64:75:c3:c5:4c:64:1a:59:
78:03:63:28:a6:2b:e6:12:ae:86:58:ec:9a:70:87:65:e7:ee:
a2:fa:e1:b3:f0:04:37:de:da:f5:1a:5f:25:bd:b0:53:86:9e:
42:87:1b:ed:e6:16:7b:e2:fa:ca:eb:7a:b9:8f:b2:73:5c:ef:
50:1a:73:92:35:57:e9:28:73:b0:14:0d:c8:b6:96:2b:d6:82:
72:4f:a3:f0:73:83:14:8a:83:18:68:b8:22:80:dc:1c:7a:72:
64:52:e2:30:6d:68:cd:c3:18:a3:2f:c1:e9:f7:bd:f5:50:cc:
33:38:e4:3a:6c:23:9d:33:7c:11:ab:37:46:0a:a1:b2:42:91:
62:93:5c:c9:ab:bb:9c:01:81:58:37:12:74:7e:83:fc:32:f2:
2c:91:37:14:2f:b4:a7:e6:b8:db:51:d2:97:4d:5d:07:58:99:
73:cc:dc:5b:28:24:52:c5:c4:ea:27:aa:74:0b:65:2e:0d:91:
ca:48:16:71:49:3e:bb:1b:d2:fb:0a:5c:18:f9:89:d7:38:63:
e2:24:ca:55:65:65:ed:cf:ed:1b:f7:23:e1:dd:af:2d:47:7a:
55:2a:6d:90:2c:c0:7e:87:bd:06:0b:a8:37:c7:a7:c7:8c:51:
1a:5c:df:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:46 2025 by rpki-client