Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
File: Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft (raw, json)
Hash identifier: S7rMG2VpfNmls0fOYzDuJbNssB9IBwQdzAypXLUj31M=
Subject key identifier: 33:EB:A7:56:5B:10:6A:48:67:F4:EE:1F:0B:EB:60:60:DA:52:B0:BB
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 0199FF22865ADE4745E8948003708B8C45CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 01:01:16 +0000
Manifest this update: Mon 20 Oct 2025 01:01:16 +0000
Manifest next update: Tue 21 Oct 2025 01:01:16 +0000
Files and hashes: 1: A6mU_fy2dvWAW9y9y6qPym3VUYU.roa (hash: B8MQ+q91TtenzRFP6rUUzrDHFdogGVA1RdvfKnJNkfY=)
2: CEH26SsbgBXa-XRDjPR4dutITU8.roa (hash: 45+vY3NG1v7bfBUPDZYQRwEM4pvEI9SIrsWhw3tfGJE=)
3: GCgFGIXy9ORAgY5JZtgQnYO84po.roa (hash: uiQ3pF8ZQYiS46PnIMk3tsXyihLlgICHZ4OO1bUgWLU=)
4: Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl (hash: GwCxjQ5xlSn1wz7pujgOqao9KItYrcpZkQ1HN6vBliU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:86:5a:de:47:45:e8:94:80:03:70:8b:8c:45:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Oct 20 01:01:16 2025 GMT
Not After : Oct 21 01:01:16 2025 GMT
Subject: CN=33eba7565b106a4867f4ee1f0beb6060da52b0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:55:5d:9b:90:45:7e:79:b2:61:0e:c0:2e:
71:d5:45:a4:7f:b8:2b:30:09:a6:98:4e:e5:5a:b8:
8f:5b:97:05:9c:05:2d:ff:ab:be:42:57:08:3b:84:
2e:12:f3:aa:53:b3:ef:60:7c:c4:8a:d0:37:3e:91:
13:27:dc:15:29:2c:51:c6:60:2a:4f:da:d1:7a:39:
92:c3:7d:dc:4e:45:92:45:fa:1e:69:1c:c5:94:79:
95:04:e0:96:af:d1:da:f1:ac:0f:60:50:9e:d4:52:
de:2f:69:ec:51:e0:40:3c:53:c5:a0:20:dc:05:5d:
46:16:c8:d5:c0:28:73:f0:de:ca:fe:65:e1:3e:66:
18:90:e8:dd:41:38:5b:68:9b:ba:56:7f:5a:88:1e:
de:41:33:78:d6:07:3b:3a:e2:04:c7:c5:af:be:73:
13:58:e0:37:ce:9c:f1:e1:81:bd:ee:38:1b:ae:45:
f8:20:86:0a:22:76:03:1f:7a:e7:16:2d:64:20:01:
46:2a:9c:b0:c3:0c:03:a1:ac:72:b2:37:21:75:de:
ef:8e:1f:fb:ad:94:ad:15:a6:5b:e5:59:6d:6a:84:
5b:3c:9a:b2:97:1e:2f:06:03:70:36:04:40:90:a6:
1f:7d:d9:8d:71:44:d3:9d:63:ce:01:0b:8b:c5:bb:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:A7:56:5B:10:6A:48:67:F4:EE:1F:0B:EB:60:60:DA:52:B0:BB
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:07:da:e0:87:56:58:ad:15:39:87:8b:37:e9:cf:6b:14:8b:
dc:1c:f5:d8:f7:ba:a4:2c:ac:97:59:2d:e7:5d:1b:19:ba:62:
bd:88:4e:62:15:d7:51:a2:4d:79:eb:be:5a:22:29:b5:5e:c3:
c1:41:40:96:9f:20:de:16:d6:cc:27:39:d8:61:dc:bb:82:6c:
e0:a3:92:9a:c6:78:29:f9:9c:21:7a:2d:5c:3e:32:58:3e:0b:
57:28:1c:8b:c1:8e:16:c1:dd:23:c9:4a:77:08:af:f3:2d:f4:
8b:44:6f:9e:33:aa:32:e5:07:ff:4e:a1:10:25:0b:c8:25:bd:
66:36:d1:ed:a0:5c:ab:12:fc:ce:8d:e1:9b:d0:70:4d:46:b5:
5b:05:99:95:7c:23:72:65:62:dc:38:ad:af:57:bb:2d:ab:c3:
ec:ed:73:7f:55:15:ae:3d:cd:cd:bb:bd:0f:80:d9:c0:0b:11:
aa:be:8b:d1:e2:86:f2:6c:e7:58:7a:13:c1:c5:28:75:f4:66:
cb:5e:a6:5c:b6:56:f1:8a:42:51:b4:38:fb:8c:50:d3:b8:10:
d7:cd:06:7c:fe:4b:c7:02:b0:11:56:a9:9e:a8:ce:cf:ed:a5:
41:2e:f3:a4:d4:87:72:b9:eb:ba:8a:d3:69:5e:b0:f2:86:fc:
75:38:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:54:59 2025 by rpki-client