Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: DikSgMyBdqC3Vfqd5yKf9hoQKMrD2xRn/vvSvnTcUtg=
Subject key identifier: BD:F0:FD:4F:14:B0:C2:42:D3:CE:34:AD:C2:19:42:CE:8E:70:95:DE
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 0199FC8FAB07200AA9A3B5A5CFDD8022E31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0DD8
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: kvml5gyzNQ9XHLDpmQQiAmpkKQT2eB7hRiDzZcVZf6Q=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ab:07:20:0a:a9:a3:b5:a5:cf:dd:80:22:e3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=bdf0fd4f14b0c242d3ce34adc21942ce8e7095de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:37:cd:b5:66:f5:25:e0:11:b3:d0:eb:4a:18:
fa:23:5a:91:93:ba:bd:b5:09:21:33:78:5c:f0:75:
f5:26:7b:dd:c4:c4:3b:86:e5:ad:b4:00:64:d1:26:
57:a6:fc:f8:49:b6:16:09:7f:c8:0e:4b:00:95:ce:
27:db:3f:80:46:37:da:9f:2b:7e:82:54:bf:d9:22:
95:23:ed:17:99:b5:b8:da:cb:41:7d:62:2b:97:b1:
fd:ae:76:65:76:62:21:d8:ae:32:4f:f7:a4:64:8d:
22:73:27:cf:cd:d9:c0:96:99:2c:44:8f:07:ad:11:
3d:79:4e:8f:21:70:1f:a5:93:99:c9:e0:0e:4f:ca:
4a:ec:c4:3f:cd:26:cd:82:72:3f:41:ad:e1:48:d4:
81:dd:e1:2a:c2:86:3b:7d:a0:13:bf:4a:9f:fb:9d:
25:f7:f0:fc:60:fb:23:8d:d0:e0:94:72:37:b9:ae:
f1:87:65:d2:c3:48:b6:51:5a:48:38:b2:16:08:eb:
58:63:80:13:a0:f4:d9:fd:57:79:62:96:39:3f:ab:
6c:5b:30:14:26:42:c9:21:7a:21:b8:27:b4:eb:58:
85:2d:c8:5d:82:d5:a7:e7:4c:cd:a4:94:96:ef:b4:
67:71:70:84:12:98:6e:c1:81:ef:86:a1:42:1e:e5:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F0:FD:4F:14:B0:C2:42:D3:CE:34:AD:C2:19:42:CE:8E:70:95:DE
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1e:88:88:0f:d4:cd:aa:9d:36:74:6b:8d:98:ef:f8:5c:3e:
58:7a:bb:7c:ed:32:19:e3:fd:bc:aa:5c:da:4e:b1:27:21:0a:
41:97:58:44:37:36:ee:6d:da:82:28:61:48:50:c0:0a:80:f5:
5f:a5:f8:41:1a:aa:61:20:24:91:fc:76:96:d6:4d:aa:e0:e3:
1b:5c:e2:32:c9:fa:e4:56:7a:aa:e9:86:f8:ae:d5:14:07:5f:
07:f3:8b:5e:57:80:04:b5:10:33:b3:c6:25:1a:dc:0a:16:2e:
f4:25:13:58:e9:53:40:60:db:67:6c:81:e7:6a:b5:8c:45:0c:
0b:f6:48:66:e9:3d:0e:05:b1:d6:68:4b:56:1a:9f:c2:df:7f:
f0:8d:49:6b:48:82:08:7e:41:66:97:67:1e:11:4b:df:16:9c:
ef:a4:ba:90:e9:18:ba:79:53:fa:39:2c:05:8a:35:b2:5f:78:
61:21:52:2d:f5:48:99:27:1a:6f:28:39:fb:b9:16:8d:47:40:
14:f3:b8:f3:49:36:69:b5:2a:40:64:d1:a1:a7:e1:65:5d:21:
e7:94:1c:e2:36:a8:f9:34:a0:03:33:47:9a:82:cf:ca:01:7d:
f8:d3:79:c4:54:01:c0:74:31:e1:58:28:82:1d:55:b7:e2:8b:
ac:ca:8b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:57 2025 by rpki-client