
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: Ma8k3qcB0GMeajE6vijbzJQYXdH16Q28mX52tK3HV3c=
Subject key identifier: 72:86:D5:32:FA:97:D1:10:C3:24:5C:53:96:1F:E1:73:8D:1B:15:11
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 0199FD34110ADC66F3859C0570DAFE42DB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0BA4
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: 7dkF2PjjAyYNXpKvgBeYVYL5AcZqb29/4+yOlwMJk9c=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:11:0a:dc:66:f3:85:9c:05:70:da:fe:42:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=7286d532fa97d110c3245c53961fe1738d1b1511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:3a:c5:d1:aa:1c:2b:0d:df:7c:25:33:c9:
b5:8b:24:37:05:d5:4f:93:08:95:e4:e8:27:1e:a3:
13:10:c1:4f:7e:92:bb:92:6d:24:cc:16:6f:90:af:
a1:08:24:f7:65:b7:f1:d7:fc:54:0c:b7:99:6c:13:
a9:d2:e9:51:c3:08:5f:26:e7:1e:6c:cc:58:c6:3f:
23:de:bf:c7:11:ef:3f:e6:93:87:18:9c:13:b2:0d:
76:c3:63:78:8f:46:3f:19:fb:79:8b:8b:f0:6b:12:
1b:06:2d:b8:a9:bd:3c:00:f9:b4:c6:11:72:30:a9:
77:5b:8b:d6:c9:5c:83:f2:98:53:64:7d:c9:2c:0c:
0f:f0:e8:74:5b:80:dc:7f:e9:ef:8e:a2:29:4c:94:
74:e8:71:d3:ae:1a:27:5b:35:26:ae:7f:5f:5d:e1:
3b:f2:1b:47:ef:f7:ee:6a:17:ad:53:a8:b3:38:4d:
6b:ed:c0:a5:01:6d:d4:f4:ed:43:e7:1c:f2:06:9f:
e8:fa:4c:94:84:0b:50:86:70:44:ee:c3:b9:73:fb:
ce:01:87:3e:c9:3d:0d:16:ef:c0:46:06:cc:bd:d4:
b4:f9:19:c1:dc:c4:9b:99:32:0f:8b:88:98:2e:67:
ed:aa:22:c3:ef:2a:52:92:9a:5e:f8:51:3e:0a:1c:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:D5:32:FA:97:D1:10:C3:24:5C:53:96:1F:E1:73:8D:1B:15:11
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:32:7e:e4:e8:7b:f5:b5:f1:2a:45:60:31:ff:10:b8:af:98:
ba:72:c2:6d:4d:ae:43:b1:46:f1:af:e6:08:52:c4:32:d0:fe:
94:61:a7:13:6c:fd:d7:58:9a:51:7e:9e:48:8b:64:95:89:cc:
49:77:6b:fa:a6:79:90:55:a8:8c:50:57:cf:b6:e6:fc:2c:34:
22:9f:16:98:9e:6c:1f:12:44:24:d4:ab:4c:5e:20:de:26:03:
a4:ff:d9:12:25:43:9e:f9:6d:bd:64:20:83:37:8f:8e:03:40:
64:98:8d:57:83:49:87:57:5d:b3:04:a0:2f:ee:a3:00:4b:88:
ab:e4:d4:04:15:66:36:74:31:c3:9a:41:64:a6:a4:b2:92:36:
d3:27:94:b9:37:83:96:4a:cd:45:c8:cf:ba:83:38:ba:dd:e6:
0d:09:bf:a5:e3:76:00:64:73:5e:7d:3c:d2:65:8b:88:5e:2f:
6c:0b:d7:a0:0b:12:56:a4:bb:b6:f7:7c:82:5f:a4:7a:99:36:
e0:07:94:33:e9:03:5f:85:9f:3c:c8:12:71:15:c7:cc:93:24:
c0:8f:00:2d:00:75:68:46:d9:8b:dc:dc:88:27:6f:2c:36:0d:
13:8d:45:6b:9a:f1:1f:3b:af:c6:4d:05:04:11:df:28:93:5e:
b1:dc:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:09 2025 by rpki-client