
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: bF7AccYve3bsTMJV55q1cQoqxM+LBSGpTyJBiMyiJnA=
Subject key identifier: 3E:B5:C8:0A:3A:AE:2F:EC:E9:0A:65:3E:D2:64:E4:AA:54:AB:80:71
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 0199FE46FA7F582D6DA0CBEE990072CD8838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 21:01:28 +0000
Manifest this update: Sun 19 Oct 2025 21:01:28 +0000
Manifest next update: Mon 20 Oct 2025 21:01:28 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: 0mLHyBYKh4a8kXgv3vGtHyzVqjFtqvm1Q127ZnRI40g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:fa:7f:58:2d:6d:a0:cb:ee:99:00:72:cd:88:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Oct 19 21:01:28 2025 GMT
Not After : Oct 20 21:01:28 2025 GMT
Subject: CN=3eb5c80a3aae2fece90a653ed264e4aa54ab8071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:9d:24:61:08:5e:b8:d7:74:00:5f:71:ae:
56:36:18:e5:25:cd:18:0b:50:34:df:03:66:fc:d5:
67:8d:25:d5:8e:47:48:10:1f:2f:ee:c4:d2:aa:01:
95:84:d1:50:19:76:57:eb:ca:53:41:c6:be:f9:09:
01:df:09:5e:b3:18:5a:31:96:b4:33:72:0e:8a:81:
f6:fb:aa:1e:4f:65:b5:8d:23:7e:f6:98:a6:b2:74:
11:0e:a3:5e:f9:15:2a:4f:2c:2b:82:8f:19:0d:62:
c0:d0:53:80:1c:25:17:3d:ce:56:3d:76:b5:d4:b6:
6f:57:8c:9a:6f:22:f7:63:70:2c:3d:78:75:5d:af:
79:ae:8f:5e:61:72:1d:a2:8e:14:3c:1c:45:79:fa:
de:92:9b:b5:51:9d:69:e6:bb:a8:52:01:3e:95:93:
4d:e0:35:df:44:eb:65:4d:d5:1d:4d:07:b4:ef:50:
e7:fc:eb:4b:d8:cb:00:59:76:10:a4:ad:89:f6:de:
0f:32:86:38:10:5d:c7:f9:ba:16:c0:1f:3a:9d:9a:
8d:35:f2:f2:09:e3:50:12:08:4e:96:ad:77:e8:af:
90:2f:92:f1:32:73:b5:37:f1:87:81:98:37:94:d8:
69:f9:20:a3:2f:d8:1d:4a:f7:47:36:25:58:4c:70:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:C8:0A:3A:AE:2F:EC:E9:0A:65:3E:D2:64:E4:AA:54:AB:80:71
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5c:b2:07:d8:cf:c3:08:4b:35:a1:66:ce:b6:89:64:4d:45:
73:30:19:f7:09:5d:27:fb:d8:23:74:b9:e0:0f:25:37:c9:31:
e9:63:6d:2a:0e:51:8c:d0:af:ed:06:e5:54:16:77:b0:85:ea:
52:e5:af:3f:8f:9e:71:a8:65:3d:73:16:22:fd:24:0d:44:77:
5d:78:45:03:5b:7b:78:c3:50:3f:a1:1b:de:97:2a:47:6c:46:
1d:2a:d6:23:03:9e:40:1b:9c:57:6d:38:6c:a5:2b:ef:8b:b9:
df:eb:1e:8e:69:b2:26:5f:14:2e:92:dc:b7:9b:6f:10:a5:ae:
cd:4e:47:e8:6c:58:af:bc:8d:bd:70:dc:f3:cf:2e:50:f2:e2:
65:de:90:da:df:6e:34:87:52:9a:af:35:2e:6a:1b:1b:20:ae:
78:3d:fa:47:c4:1d:eb:b9:d1:84:88:3d:91:40:92:0a:a1:2f:
2f:46:34:c6:6c:15:bc:1e:9a:4e:ea:6f:71:71:1a:b3:a0:f3:
37:37:60:b6:f8:9a:f9:53:83:0b:8f:09:61:db:fc:12:6f:9f:
51:40:22:5d:d4:0f:81:2a:21:df:f8:a3:d4:4b:2c:11:bf:53:
54:36:16:fc:97:52:e5:72:ec:07:eb:41:df:53:f6:ba:f6:90:
b6:40:11:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:16 2025 by rpki-client