Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier: YTaqtgP6EPJ8+pRQSPom+aYIyfq2px69N8Ira2PGqAI=
Subject key identifier: 66:07:82:13:B1:1D:BB:35:10:E8:8E:66:88:14:22:B7:4C:BA:3C:1A
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 0199FDD996C04C62BC109B5EB8116C8496EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number: 071F
Signing time: Sun 19 Oct 2025 19:01:59 +0000
Manifest this update: Sun 19 Oct 2025 19:01:59 +0000
Manifest next update: Mon 20 Oct 2025 19:01:59 +0000
Files and hashes: 1: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: 95fqhMoTVxRxmMHFEy02HW4Grj5vEorl8DohT/E0kvw=)
2: z_g_oyYscLU1IVMsubV8om2IHIM.roa (hash: TMMjkM/DLDsCF3bsXeBPNo5kbzaCJniVgP9Feba83Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:96:c0:4c:62:bc:10:9b:5e:b8:11:6c:84:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Oct 19 19:01:59 2025 GMT
Not After : Oct 20 19:01:59 2025 GMT
Subject: CN=66078213b11dbb3510e88e66881422b74cba3c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:70:a6:be:8a:17:10:0d:b3:7f:3f:7c:f2:
81:36:f3:a3:4d:09:57:42:7d:f9:9f:95:18:ad:fc:
fe:61:5c:3a:4f:9b:99:92:12:c6:bb:68:94:a5:3b:
10:b5:9e:05:4d:e0:bc:bb:b2:03:3d:7a:87:0a:0c:
21:6c:06:82:cc:d5:60:fe:e8:4f:e4:05:76:bd:78:
fa:06:75:36:62:15:43:e9:ce:e0:36:d2:b8:a3:e9:
2e:76:8f:12:d8:68:06:74:32:d1:a1:46:0b:cb:23:
d8:e3:3d:f4:fa:80:81:cf:d3:8f:65:a3:11:29:d9:
3d:45:ee:cf:07:a5:2e:ea:7f:93:0d:7e:50:e4:45:
70:1c:13:09:ac:8d:e4:11:80:78:bb:3f:5f:b4:05:
69:7a:b9:c6:5d:d4:f8:1f:d5:33:c7:6b:76:1b:29:
d2:f8:f0:ef:88:15:c1:c5:56:56:ae:33:5a:b0:74:
49:3a:e2:0b:fd:76:1d:dc:20:47:1e:17:e2:24:f5:
55:af:5d:33:65:e2:d2:53:5f:f9:5d:0b:91:fa:2a:
e6:cf:cd:58:4c:2e:d7:8e:3e:88:dc:af:33:4c:81:
b4:0d:86:1c:af:39:7f:04:b0:99:2d:9b:b7:13:e1:
a5:df:01:17:4d:05:c2:b2:9d:d2:5e:1a:2a:68:02:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:82:13:B1:1D:BB:35:10:E8:8E:66:88:14:22:B7:4C:BA:3C:1A
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5e:1f:df:4f:d0:56:0c:73:31:8d:91:50:ce:37:50:de:71:
a5:37:5f:a2:80:c8:b4:ae:da:c6:56:21:e3:27:82:20:82:0d:
ad:ab:45:91:c9:af:7d:91:22:97:5e:56:b2:9d:bd:2b:b4:d4:
b1:0f:3a:73:b9:9a:60:0b:88:c8:f4:5e:cf:15:06:c0:8b:60:
9b:e3:0d:11:4e:aa:e7:b5:d5:4c:4a:73:cc:a3:d7:b2:05:69:
4c:68:6f:d5:18:f5:e5:7f:35:c1:d2:10:59:38:51:db:2b:b7:
4d:b4:db:f0:74:7b:67:05:3e:6c:87:8c:2a:89:64:b1:4a:56:
a9:35:05:31:08:8b:b1:3b:9b:92:b7:41:b4:20:5d:c0:b6:4b:
2e:e0:17:bf:d9:7a:f6:b1:84:a8:4c:ae:05:e2:13:ab:17:4a:
a7:a5:da:02:0d:9e:56:bd:15:31:08:10:88:b2:13:1a:b1:d8:
aa:1a:f2:4a:45:ab:3b:71:68:d8:73:fc:5a:91:31:7c:db:21:
38:88:03:c5:2d:0a:f0:02:b9:d0:f8:d8:05:49:e9:3c:64:72:
64:e5:c0:61:2d:f9:ab:cd:e3:e4:8e:ef:8a:91:8e:b0:58:2e:
53:fd:82:13:57:84:13:04:cc:f9:8d:12:a8:a1:43:56:b1:34:
f9:da:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:07 2025 by rpki-client