Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: jmdhddGVfU7PDZv/FccaxITCakdgYdSUN3FhlRZb3RQ=
Subject key identifier: 6E:ED:BA:C9:82:4D:3B:8D:22:9A:6C:6F:58:1B:07:5B:65:49:C6:40
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 0199FE46BEDAEC6F6E7C1695599F63F5294C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:01:13 +0000
Manifest this update: Sun 19 Oct 2025 21:01:13 +0000
Manifest next update: Mon 20 Oct 2025 21:01:13 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: 65g5UZ0NfXzveAkLHPx+jEKHOKdf797bhbeQbCULOY0=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:be:da:ec:6f:6e:7c:16:95:59:9f:63:f5:29:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Oct 19 21:01:13 2025 GMT
Not After : Oct 20 21:01:13 2025 GMT
Subject: CN=6eedbac9824d3b8d229a6c6f581b075b6549c640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:9f:5e:88:ca:ff:6f:23:37:fb:23:be:a5:
c8:33:76:15:00:7f:a1:df:5b:84:b3:57:f1:85:38:
54:80:ea:0d:b5:78:a4:64:d7:27:81:5e:4d:8b:61:
52:85:d0:65:71:a4:a9:e1:08:62:d1:15:90:34:f9:
9a:29:61:fc:f7:14:22:e2:c0:53:71:96:42:3f:85:
9c:ee:52:d1:91:59:0e:7e:f0:f5:48:98:6a:14:78:
d0:95:c8:dd:26:7f:10:a5:bf:29:b4:b1:68:2f:46:
f6:58:0b:58:1a:af:8e:c2:44:36:38:17:da:1f:ca:
ed:50:71:ba:46:69:b3:fc:9f:a8:7a:87:4f:4e:77:
ba:48:73:bb:43:a3:b3:f1:f9:96:2b:0e:57:d0:a5:
9c:5c:9e:e5:2d:51:45:03:ae:27:43:df:24:4f:44:
07:40:69:51:28:31:11:79:94:75:ad:04:c5:ad:6d:
d9:12:7e:72:92:96:fe:f6:c3:29:c5:b8:df:25:03:
f6:56:92:54:54:43:5c:0f:b1:3b:8d:c1:28:0d:d6:
65:d9:9c:70:9b:a9:5a:9c:6a:f4:3b:6e:e2:92:fd:
5d:71:fa:df:d5:57:cc:b0:59:36:3d:df:0c:c5:fc:
1a:0e:66:12:1b:d5:35:75:6c:bd:6c:f0:c8:d8:12:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:ED:BA:C9:82:4D:3B:8D:22:9A:6C:6F:58:1B:07:5B:65:49:C6:40
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:05:1d:6c:0e:3e:66:49:ec:b0:ec:64:50:06:28:83:e5:b3:
0f:e4:f2:8f:81:97:f7:5b:bc:45:36:24:96:ec:1d:36:5a:2d:
f1:fa:ab:9b:1c:bc:8b:1e:2a:75:25:44:58:cc:be:8f:2e:9c:
5c:4a:dc:60:23:a0:c7:20:b5:6c:9b:d4:29:e9:f7:bb:0b:25:
02:28:d4:f9:6a:f8:21:10:f1:f2:25:65:7c:1d:15:19:7a:0d:
0f:e8:e2:3a:3d:fa:7b:43:c4:0b:e2:88:01:60:f9:b0:ef:d0:
4c:71:80:47:a1:fc:08:1a:46:a5:7f:e4:68:10:79:9e:2d:dd:
24:8c:3c:29:d9:85:6b:68:91:df:84:63:c1:55:44:8f:56:d3:
4e:5f:17:d8:da:5c:1e:95:c6:6a:56:c5:b0:25:eb:d3:a0:80:
1c:32:d6:c6:e7:26:00:bb:74:c3:ba:94:57:97:b3:60:f9:f8:
64:c5:02:72:64:fd:bd:d9:3b:91:37:cf:77:fa:79:6a:8a:20:
c9:57:50:24:5b:94:8f:78:d9:88:2d:35:5c:95:b5:a6:2e:cd:
20:1b:66:4f:da:33:97:f2:93:18:55:5c:1d:e5:3e:55:ec:36:
9b:e5:37:77:c7:65:25:1d:9e:01:c3:0f:ed:ce:aa:0f:2d:5f:
fe:ba:db:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:00 2025 by rpki-client