Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: PM+p5XQw2Mq5jqrUoul+fVJ/jfNPE6uVeEqkHRhkunw=
Subject key identifier: A8:88:B9:31:14:E6:58:EF:86:BB:D7:65:D9:1C:AC:CB:7F:DC:F8:09
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 0199FC587D213471D407DE773CF4BEFB11EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: QUivpxbRifwuB9zZOskaEbspfhz4jgwxF+K4R68qtyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7d:21:34:71:d4:07:de:77:3c:f4:be:fb:11:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=a888b93114e658ef86bbd765d91caccb7fdcf809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:78:55:56:e2:40:e0:4d:50:79:c2:cc:dd:
4b:23:70:57:73:23:4d:0f:90:85:b9:cd:5d:5f:90:
d5:65:bc:75:6b:fc:7c:e0:59:d0:d7:78:db:f7:34:
54:ec:c5:63:90:17:93:7f:17:3a:fc:ec:42:0d:6e:
cb:19:c6:94:cc:35:8e:f3:29:33:b9:41:64:5c:74:
cb:87:0b:b8:5e:fe:fa:ad:39:c8:99:bb:a6:85:9e:
d0:2c:66:2f:21:97:26:db:d0:ee:9a:62:c0:32:f7:
fa:92:9a:89:67:59:4f:1d:62:fb:ed:35:5d:3d:1d:
42:b6:7b:97:37:94:62:88:2e:62:a5:b4:fc:e1:02:
ef:80:1b:a2:b7:0b:61:a6:76:4a:f2:05:d9:e4:7e:
25:6d:ba:99:27:cc:9c:62:29:90:39:4b:cf:5b:7f:
ef:64:22:bf:e7:d3:ac:82:04:38:6c:20:88:64:1c:
68:90:b4:e0:82:96:35:52:9f:17:ef:0c:8d:ba:51:
9e:8b:d0:29:8e:e9:de:79:49:99:2c:53:a4:1a:a5:
73:68:19:86:29:70:9c:fe:39:9b:af:1b:87:52:79:
6c:bc:43:18:1a:24:f6:59:f5:01:91:ac:dd:e6:b8:
b5:17:a5:a8:2a:94:f7:48:d2:5f:c8:79:02:88:72:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:88:B9:31:14:E6:58:EF:86:BB:D7:65:D9:1C:AC:CB:7F:DC:F8:09
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f9:b9:07:e1:2a:45:03:37:35:ab:a0:b2:d9:b5:89:0b:84:
9c:e4:1a:2b:b6:3a:04:75:fd:54:a8:a0:8d:4c:09:f2:dd:73:
26:b6:62:87:2c:fd:5b:de:b8:8f:4d:b7:09:72:f6:b5:d6:fb:
12:2e:75:cb:3b:10:1e:91:22:4f:b5:01:11:b5:40:85:f2:b4:
86:0c:53:47:ef:38:a3:12:b4:27:dd:66:c7:9b:56:37:bd:94:
a1:ca:02:5d:02:05:b3:64:f6:09:35:c5:a2:76:dc:69:be:f5:
05:b1:f7:c8:4a:ca:5e:30:af:4f:d4:df:1b:cf:7e:53:74:fe:
d5:58:de:55:9d:03:25:14:87:cb:16:ab:13:67:40:c0:9b:46:
01:87:89:7d:64:f6:0e:6c:b2:66:7c:98:c7:1a:67:1a:b4:6d:
18:66:12:c2:c2:14:e3:58:eb:b9:c5:b1:ea:39:f0:42:83:06:
c7:7f:9b:c7:c7:22:0b:eb:4f:4b:e3:c6:c3:be:b0:d8:ed:9a:
29:b2:55:74:9f:2e:cf:5b:ae:83:7f:69:ed:25:ca:bc:50:99:
5b:c7:55:2b:b8:f9:3c:ea:d6:4a:5a:73:8b:a8:ad:29:e2:52:
f0:b0:17:4d:61:ec:96:35:87:ac:ea:e5:ee:3a:ca:b4:9b:5a:
44:a3:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:16 2025 by rpki-client