Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: ihRS+fXQ4ynmorveDYlMboO933DUjy/aq/EaXbYMtMo=
Subject key identifier: E0:55:01:7E:12:7B:9D:2B:8F:A2:DC:5A:10:30:28:45:11:E0:E4:27
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 019A00A390C95356A3D83A3E567A77ADD93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 03F2
Signing time: Mon 20 Oct 2025 08:01:50 +0000
Manifest this update: Mon 20 Oct 2025 08:01:50 +0000
Manifest next update: Tue 21 Oct 2025 08:01:50 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: Zj/oX+UGIV3p4Kel2COxzGZ8iDXQr4W8ofaTaCLUhZs=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:90:c9:53:56:a3:d8:3a:3e:56:7a:77:ad:d9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Oct 20 08:01:50 2025 GMT
Not After : Oct 21 08:01:50 2025 GMT
Subject: CN=e055017e127b9d2b8fa2dc5a1030284511e0e427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:a8:59:67:0d:a2:3f:67:51:aa:1f:df:b4:
5b:26:6d:92:30:6a:81:de:f6:5a:8d:32:7a:db:e5:
e7:66:30:e2:da:03:f7:56:86:b3:44:ef:8d:9d:7f:
3d:17:91:a4:57:fe:d9:b0:5a:08:bf:98:44:e2:ea:
24:23:af:4b:d5:ea:e2:5a:cf:58:a5:03:35:e8:9d:
4f:49:64:16:86:ff:26:ad:b4:12:6a:19:76:b9:d9:
d5:f5:4f:07:fd:6c:d4:97:41:37:20:87:a0:9b:df:
b6:7b:56:75:f5:29:9f:38:31:a6:74:b7:37:80:41:
f8:46:27:b4:02:dd:3f:56:cc:72:53:69:17:5a:04:
f4:0f:81:22:b8:ef:f6:23:e4:81:1d:ab:10:7a:5c:
e7:7e:3a:3c:49:48:ea:93:8a:54:0e:c7:24:51:67:
0d:f5:56:10:f0:87:0e:ef:29:7f:fd:08:72:83:c8:
a9:22:4f:2e:01:1c:0f:65:4e:7e:dc:73:67:ae:27:
d4:af:60:af:71:84:54:10:ed:dc:6a:f2:ba:df:7f:
e7:30:6d:0e:e7:85:45:31:e2:6d:51:5f:cb:04:f0:
4d:f0:b8:a8:0d:fa:27:0e:40:51:47:d6:08:47:98:
b7:9b:ae:2c:3e:60:7e:21:92:1e:0c:17:2e:d0:3a:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:55:01:7E:12:7B:9D:2B:8F:A2:DC:5A:10:30:28:45:11:E0:E4:27
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:9f:11:74:22:ae:94:16:61:82:05:ae:58:8f:fa:13:83:45:
56:12:89:4c:9e:47:ce:0d:cc:97:79:75:4b:e5:f2:97:7a:e6:
be:90:bc:2b:5f:21:09:12:40:87:e2:cb:8f:71:1a:7e:61:d5:
3f:d6:fd:4a:fc:d6:13:a9:12:cd:78:2d:24:fb:bb:a8:51:24:
0c:29:55:af:d6:69:02:6c:6e:e9:58:8c:2b:62:e0:0e:ad:a7:
be:87:4c:fb:f2:d8:b2:45:22:da:d7:be:c4:69:57:54:63:fc:
d1:f2:ec:32:27:89:20:35:d3:f1:79:e9:63:57:1e:1e:e6:5c:
21:88:3f:d9:a8:9e:ba:f1:00:b3:fc:2d:d3:7f:d3:20:de:f8:
36:38:36:95:f4:3d:38:07:ca:29:dc:4f:62:69:89:0f:de:e4:
2a:f1:d6:d7:5a:58:e2:43:e7:2b:2c:09:5e:26:ad:f1:f6:5d:
7c:59:32:2f:54:0f:74:99:6f:21:95:7d:be:ee:e6:9c:be:a8:
ce:cd:66:db:6a:cc:66:81:8e:fd:3a:5b:f8:8b:ea:14:fb:96:
d7:b5:c1:c3:2b:92:60:11:80:58:ed:67:6e:1f:c7:36:39:d8:
d3:ac:9d:78:f3:bb:6d:7a:af:ee:ce:23:84:4d:73:2a:c8:20:
7f:4b:9b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:40 2025 by rpki-client