Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json)
Hash identifier: O9bpOxjyLrix8hMt45ylZGTyhgXoAd2YVEZotTN8ROk=
Subject key identifier: BE:D1:65:3B:B7:2A:2A:D1:40:9D:7B:BF:02:C8:89:1D:17:D0:B5:7D
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 0199FAA12D60B57431CA9E532328FADB0018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 04:01:30 +0000
Manifest this update: Sun 19 Oct 2025 04:01:30 +0000
Manifest next update: Mon 20 Oct 2025 04:01:30 +0000
Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: vuwDygM6IR6pMO9lCyujvpiYRgnJ/Zb99kciTm167Uw=)
2: azO-aDRzdJeZXPnkpaxb8BBtrU8.roa (hash: z6om+JaM7Y2eklhyA3h/kaXOgcnoTRDFx+JOSlMYz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:2d:60:b5:74:31:ca:9e:53:23:28:fa:db:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Oct 19 04:01:30 2025 GMT
Not After : Oct 20 04:01:30 2025 GMT
Subject: CN=bed1653bb72a2ad1409d7bbf02c8891d17d0b57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:17:af:67:c6:02:a7:46:0e:31:fd:cf:6c:6c:
38:03:ec:cb:17:c0:63:7e:13:d5:f4:f9:63:29:bf:
a5:33:81:88:15:b5:fd:53:1a:89:53:c9:0b:25:eb:
ef:a3:fd:98:42:46:ac:c2:64:87:25:c2:9f:dd:b6:
04:da:52:8f:09:7f:76:53:56:a7:b9:25:2c:72:f1:
32:b4:48:22:f5:58:45:59:6e:ec:fc:32:6a:8c:7c:
0d:18:17:1d:38:69:1b:3b:e7:e2:d6:cf:46:7c:31:
04:57:ed:68:71:4d:ae:14:76:c5:4a:93:ae:30:3b:
69:6b:2c:6d:3f:75:cd:d7:8e:3d:d8:03:35:bd:0f:
25:10:13:96:b0:32:b6:b1:98:07:75:0e:f1:76:26:
6a:52:c7:4c:c4:8e:cd:49:34:9c:14:aa:3b:2e:7c:
86:85:4f:81:94:d9:5b:26:a3:3e:cc:c3:fd:5c:de:
5d:20:f7:7f:ce:6c:75:69:f1:a0:1c:9a:6b:a5:27:
fc:a8:f8:84:06:c6:a0:28:4e:7b:d8:be:40:e5:6d:
ba:c2:31:33:89:b0:a0:d9:9d:a5:69:33:c4:a6:91:
fe:4c:45:52:67:a6:a2:37:f9:07:26:31:c3:0e:aa:
ea:79:cb:88:81:d5:9e:6a:69:bb:3f:63:c2:83:ab:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D1:65:3B:B7:2A:2A:D1:40:9D:7B:BF:02:C8:89:1D:17:D0:B5:7D
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2d:26:5d:12:26:91:d3:c8:43:13:44:42:bc:ff:bb:fd:27:
38:95:65:3b:20:3a:64:02:b0:9e:5f:13:84:a1:5e:20:86:70:
fe:0f:8c:9a:ae:dc:cb:5d:5c:e4:a5:9c:d3:6f:71:c0:94:77:
c8:67:c5:d7:58:43:3f:43:2c:d1:cf:ea:7b:7a:3f:8b:d1:fa:
48:08:ae:d6:c9:ed:24:b5:7a:58:59:13:ff:25:02:9a:8d:b6:
d1:b1:38:19:97:f3:29:ac:d3:04:15:e2:48:3d:d6:a6:e4:08:
50:50:01:e9:3c:e1:1c:78:ba:33:44:07:87:ba:2d:37:d6:45:
ea:0c:f1:84:bd:7d:b2:0e:5e:d8:c7:b4:23:29:11:6c:e1:d0:
14:a3:99:99:de:c6:1f:65:9a:91:ca:f3:76:f3:89:6b:70:ee:
9d:8e:59:d7:54:c6:9b:39:45:59:a6:7d:5c:39:00:35:ef:39:
24:bf:28:e8:8c:29:09:43:7f:10:48:f5:69:eb:6d:cf:49:8c:
9a:4d:5f:72:75:44:d6:2c:58:5f:59:f4:e8:84:9e:b4:d6:a9:
ca:4c:8f:a6:d5:c4:b4:b0:17:b7:ca:47:9c:56:69:24:b4:3c:
5d:5a:2a:c7:86:06:cc:7d:29:91:45:c7:c0:24:5e:83:ff:f4:
bd:ea:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:01 2025 by rpki-client