Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: VHu7IcFi8GXcnuo2QV11zQTsRXEHX+dNZC0+zyf/65c=
Subject key identifier: 03:59:DE:EE:2D:9F:38:CE:22:8E:32:D1:7D:09:C0:9B:AC:FB:51:F3
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 0199FC217A21B853C50EDA25E554E644E0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 02AD
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=)
2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: 6AWJOveKTAJtyDIzlpPNqGBJT0ORGtiKh6D0S2eoHdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7a:21:b8:53:c5:0e:da:25:e5:54:e6:44:e0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=0359deee2d9f38ce228e32d17d09c09bacfb51f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:e5:02:bc:08:05:83:70:e6:8c:e1:0f:03:
6c:df:70:c7:7c:f6:b6:b7:e9:bf:e5:b5:e2:32:d5:
30:73:fa:0d:98:54:57:70:83:e3:bc:85:7e:4e:53:
08:7f:45:91:04:60:c0:93:52:93:62:db:a3:d8:0f:
1d:1d:06:d1:19:c7:c3:c4:63:03:be:09:e8:7b:1f:
ab:8a:bc:ef:0a:29:58:89:e9:01:4a:f2:7e:a8:85:
f4:15:6f:5b:14:5f:e9:e3:41:93:59:13:3b:2e:30:
2d:8a:cf:b3:6e:f9:72:51:3d:65:cc:5c:c3:8f:4e:
68:08:5b:29:6e:60:4c:b1:c0:22:a9:71:20:da:61:
24:2f:59:68:5e:6f:32:3e:1c:4b:c0:ff:fe:50:84:
6b:6c:b0:73:95:7d:8f:84:13:79:ec:39:71:5c:23:
cb:06:dd:a5:03:67:8b:ea:da:cf:a0:86:eb:d3:45:
c5:8a:89:39:ee:ca:87:a5:a5:f0:79:f8:5c:a4:9d:
c0:26:93:9b:56:51:75:fb:32:00:bf:1c:82:26:ec:
64:6b:ab:4c:13:ee:b9:1c:58:ca:d7:b1:5e:c2:6c:
cf:43:e6:6d:90:33:70:6f:9f:8f:21:38:28:1c:2d:
15:57:be:48:fe:41:41:e9:37:f0:b9:52:ee:e1:0d:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:59:DE:EE:2D:9F:38:CE:22:8E:32:D1:7D:09:C0:9B:AC:FB:51:F3
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f4:5f:15:88:4a:86:0c:5f:25:de:70:45:25:9b:45:cc:64:
07:3b:81:25:ac:bf:73:e8:75:e3:08:e7:42:84:ee:59:f3:36:
b0:1d:e4:f6:57:f1:36:84:17:06:3a:f5:42:95:a5:c4:84:cd:
9a:04:b8:e1:d6:b1:fe:a2:c9:b6:27:fa:81:4f:c3:b1:1e:42:
51:b5:e9:34:ce:bb:13:30:b4:ba:a5:19:d1:fd:f4:22:97:a4:
7f:1b:97:a6:d9:cb:c8:59:21:85:c4:52:6c:fd:e5:8d:5e:1e:
01:a4:36:8d:62:c5:67:d8:b9:42:c8:a7:7a:c4:41:80:cc:a5:
94:51:1a:15:fb:d3:e9:d0:e8:3c:cd:10:55:3d:ed:ac:ed:51:
73:00:f2:f8:df:d0:bb:a2:fb:03:31:09:4e:3d:ba:29:45:df:
9e:64:f0:b8:3f:a3:b6:50:a3:bb:8f:63:2a:fa:34:88:2d:3a:
4d:b5:b1:e7:0c:5e:c8:d3:7d:aa:cc:16:8a:1f:ee:f7:aa:c8:
19:de:85:d4:7b:87:9a:17:9e:18:d0:a9:e0:9d:12:03:be:6d:
ce:ab:8f:d5:6b:6b:7c:3a:60:1f:ed:9f:d8:53:f6:35:6f:3b:
32:17:92:a2:98:89:d5:95:67:dc:05:0b:d7:4a:1a:20:ae:c8:
01:b7:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:55 2025 by rpki-client