Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: FYg1606CM6rugGrlIu99DgwF2JcTZujB4oEmjgF/aEw=
Subject key identifier: 4F:DB:17:40:E2:96:8D:4E:71:83:A0:29:A6:D2:0F:48:56:A2:B1:E3
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 0199FBEBE1DDADACF561B97B9272C705BF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 11ED
Signing time: Sun 19 Oct 2025 10:02:43 +0000
Manifest this update: Sun 19 Oct 2025 10:02:43 +0000
Manifest next update: Mon 20 Oct 2025 10:02:43 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: mpIHlWlJC5AKR12SHDnlFlf7UJe6pCM9xP4+z/15DM4=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e1:dd:ad:ac:f5:61:b9:7b:92:72:c7:05:bf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Oct 19 10:02:43 2025 GMT
Not After : Oct 20 10:02:43 2025 GMT
Subject: CN=4fdb1740e2968d4e7183a029a6d20f4856a2b1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:30:05:0a:39:57:cf:a1:bc:df:a3:c1:b2:
a5:a9:49:45:60:90:57:90:ba:a1:be:ce:27:d0:82:
c0:ef:dd:1c:7e:23:f5:e8:85:57:f7:ed:b8:71:1b:
26:39:b6:ee:cf:ea:d5:40:59:64:68:73:10:93:11:
1d:8d:50:ec:f7:0f:a5:98:3f:c0:26:3f:6a:89:2e:
30:d8:77:fa:11:74:9b:a1:54:db:22:7f:4b:25:1f:
06:80:68:9f:65:28:2c:f1:ba:9e:6a:bc:98:b7:c8:
d3:e8:a6:a7:0a:0b:90:5b:ec:ad:05:f5:cc:dd:6a:
81:ad:51:d3:51:68:79:40:09:ce:85:bd:51:57:35:
24:0b:25:53:86:e9:c2:98:aa:43:0e:4e:6f:e0:d4:
22:22:fa:78:b7:04:81:a1:e1:78:01:2b:cb:54:1a:
fb:97:42:f6:2d:66:3b:88:c7:f4:97:5b:90:3c:6e:
93:68:13:01:a8:81:d0:08:bb:27:ca:39:db:fd:85:
3b:22:47:38:f2:9f:30:ab:a0:77:64:59:e8:e8:84:
03:19:12:64:44:3b:93:06:60:0c:c8:a6:8d:82:db:
6c:c4:48:fa:91:bd:3d:0a:1c:1b:02:c4:8a:55:6e:
7c:b4:0b:e5:3e:07:b5:1b:69:d0:c1:92:1d:7e:b1:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DB:17:40:E2:96:8D:4E:71:83:A0:29:A6:D2:0F:48:56:A2:B1:E3
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f7:65:77:07:91:42:4f:12:27:22:f5:79:64:b2:cf:1a:de:
31:69:79:35:18:f4:dd:14:4f:95:79:08:ce:e7:1f:79:6e:69:
ae:83:03:1d:7b:3a:bc:8b:82:b3:38:cc:40:b3:12:0c:bf:1c:
8a:55:15:39:9d:ad:53:c3:ad:d8:d4:24:a8:b8:7a:e5:91:2b:
5f:f7:89:60:54:6d:1e:af:24:ba:ce:3f:54:f9:c2:69:57:8e:
95:81:f5:e2:3b:48:68:a1:2d:1d:3c:d9:26:c2:59:8f:ac:f6:
2b:48:b7:e8:b5:fc:4c:02:4b:9b:f8:d3:6d:92:7b:5a:c5:9a:
43:55:b9:fd:8f:7a:10:ff:73:92:fc:a7:e3:e7:26:e2:a9:4a:
77:37:37:74:5a:65:2d:4f:57:e0:4d:0f:d6:15:da:3f:1e:17:
9d:6b:fd:fd:53:3a:0a:5a:fa:ed:3a:55:5c:64:30:7a:ce:17:
4f:94:05:7c:12:0d:12:41:50:04:3f:28:a6:0b:01:ff:80:6e:
78:51:e1:85:33:23:a5:59:49:0c:d3:a2:49:e9:c6:47:81:4f:
57:07:ca:70:b6:16:ed:1d:1d:1e:9e:b0:cd:d7:71:2a:26:92:
73:b9:31:0e:a1:4d:dc:0a:52:df:de:29:5c:c9:c2:21:02:9c:
df:73:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:45 2025 by rpki-client