Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier: 1hmhJM3UYaf9OyP5YXWdVXRAGWzIZq2cC2+/lPjiWDE=
Subject key identifier: 8D:45:1B:90:13:15:B7:68:87:DC:21:63:AF:62:8F:10:36:E4:18:6E
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial: 0199FEB53C2307C4A787C801C2C90F1F164B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 23:01:54 +0000
Manifest this update: Sun 19 Oct 2025 23:01:54 +0000
Manifest next update: Mon 20 Oct 2025 23:01:54 +0000
Files and hashes: 1: LT0qB-gBAbq5frFGXTq1GqnXCfI.roa (hash: K2tXP/3iE8TclQjWefb7tiAmYpuF8VMrt60W/dO45lU=)
2: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: 3I85Gppdj5u5gyABRrhvlIjXKG4Jcqza9DaCKGt51HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:3c:23:07:c4:a7:87:c8:01:c2:c9:0f:1f:16:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Validity
Not Before: Oct 19 23:01:54 2025 GMT
Not After : Oct 20 23:01:54 2025 GMT
Subject: CN=8d451b901315b76887dc2163af628f1036e4186e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:d4:e7:8f:b3:33:4a:01:94:21:2f:b2:86:
1c:86:5e:f1:69:4a:78:4f:68:16:10:ce:d6:6c:25:
79:a6:f9:b1:02:25:a0:bc:7d:27:2b:ed:81:62:3c:
69:f3:7b:31:3a:7e:dc:50:82:9f:a4:55:0b:73:27:
70:b5:e5:4c:0d:50:ad:57:a6:6b:82:08:a1:39:52:
29:17:9f:bf:1a:22:a4:53:86:6d:cc:71:81:31:db:
1a:71:c2:42:f5:41:0f:a1:9a:a8:e7:86:73:6e:82:
41:ab:60:0b:49:79:dd:77:c5:ae:23:31:9e:22:9d:
f4:9a:0a:d4:38:95:2c:e0:be:c4:ca:31:18:f2:e6:
b7:74:c3:af:47:c1:97:ee:ea:73:47:d4:95:62:72:
3c:4c:61:a8:dd:61:4b:1d:95:96:00:4d:56:00:12:
74:6a:0e:7f:ef:7f:44:12:bf:e9:f1:e4:c2:6c:40:
d1:74:3e:45:c8:0a:b7:e1:eb:28:c6:df:44:15:0b:
2c:b6:cf:d8:aa:2e:e3:b6:43:42:e5:b7:b1:90:98:
b2:e3:26:dc:1d:06:d1:10:5c:35:cf:3a:d4:53:82:
42:00:0b:ef:54:8e:11:85:c3:e0:dc:e3:2b:65:f6:
f2:4b:82:47:ac:8f:55:41:98:9e:e8:1a:e2:ec:b9:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:45:1B:90:13:15:B7:68:87:DC:21:63:AF:62:8F:10:36:E4:18:6E
X509v3 Authority Key Identifier:
keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cc:d5:b7:30:4b:7d:57:b9:83:e2:0a:85:dd:5d:a0:66:d7:
b9:4e:a9:a1:e7:bc:3c:b9:fe:4a:85:0e:27:07:1a:5b:e9:86:
47:83:2d:59:51:bc:ea:4c:fa:6f:22:14:e3:e7:71:38:4d:10:
61:7f:61:69:ab:09:04:22:06:34:ee:ec:96:9f:74:29:b9:8b:
6b:a3:ef:64:7b:bb:a8:35:7f:40:b0:e6:09:90:b9:c7:27:64:
db:8e:e5:3b:f8:97:18:19:77:c5:4c:0d:f8:87:3c:17:64:53:
9e:a7:bd:10:9b:1c:ee:64:38:c1:d8:04:50:41:4b:d7:71:df:
77:ed:ee:7d:bf:37:2e:d3:d3:70:d1:b6:1e:3b:4a:c3:d9:8f:
7b:ab:b2:c0:f6:f1:7f:e1:76:cb:36:80:24:04:96:be:c3:21:
2a:08:33:39:b3:2b:38:95:1e:61:6c:b7:6a:55:df:ec:b0:6b:
30:38:ae:0d:4b:90:b1:bc:77:c0:2e:87:e5:44:0f:33:95:fb:
19:21:24:54:60:d8:3d:1c:d6:08:f3:84:57:10:6f:e2:84:29:
bd:0e:f8:e6:a5:4a:ba:9e:c9:6d:58:fd:a9:74:f1:2c:32:0e:
f1:0a:ab:24:28:e3:6b:12:aa:3d:35:d6:d0:45:83:3a:3c:d5:
9c:73:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:47 2025 by rpki-client