Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: 59wiivnUby5in8aiml4w5mJD2De7D+jdeCfZv9kFRNU=
Subject key identifier: 18:1B:5A:15:69:A2:7E:34:0E:25:19:7E:FF:79:76:5E:9C:4B:D2:15
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 0199FCFD5371BE73D2FE01BD9F806A0D986B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=)
2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: FbKXds6vrUB4kHkhIywPR2+sqkKRuh76FrqBnaR6VvQ=)
3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:53:71:be:73:d2:fe:01:bd:9f:80:6a:0d:98:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=181b5a1569a27e340e25197eff79765e9c4bd215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:9b:38:cc:d8:89:b6:b9:ab:3e:9c:b0:d5:
e9:91:29:f4:b4:56:e9:99:e3:a6:25:6a:8d:3e:23:
1b:cb:e0:ac:bb:eb:dd:2b:e4:da:a1:44:a2:00:56:
88:63:30:a4:77:57:ac:80:21:67:9c:32:c7:4a:10:
8d:4f:a9:d9:72:f9:94:a7:e7:6e:76:43:d9:9b:66:
be:21:b1:dc:74:a4:f7:82:70:09:2a:c9:76:07:10:
2b:59:6c:67:8f:c5:5b:02:ca:19:cd:a9:44:68:dd:
1c:d7:d6:fb:b7:3f:01:d1:0c:49:4d:01:54:f3:10:
e2:36:5e:71:26:30:91:2f:d6:21:47:2a:ce:cf:bd:
ea:71:9a:06:f8:c8:a8:fb:a6:77:f6:68:ae:0b:67:
8e:08:3a:4d:6e:79:3a:4d:52:be:31:9d:9e:14:a0:
2b:9c:f5:7f:63:a6:ec:01:58:b9:18:c8:7c:eb:8d:
38:c7:07:1f:d6:99:4c:a0:27:1e:6c:54:7a:69:a6:
bc:5a:de:c7:f7:e7:10:9d:76:33:34:e9:92:a8:df:
71:8f:04:cf:90:b9:c6:b7:72:f7:80:ab:b9:02:4b:
e8:8b:07:0c:a5:c6:9b:95:4b:5c:06:5c:6a:c3:c7:
9e:22:7d:70:42:e3:64:95:97:9f:8b:5f:7e:06:1b:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:5A:15:69:A2:7E:34:0E:25:19:7E:FF:79:76:5E:9C:4B:D2:15
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3c:5e:8a:ad:b8:28:e1:19:bb:f5:2a:3a:34:c0:e9:09:2d:
7d:8b:c8:b7:6c:fa:2d:ce:30:3d:26:b5:1e:1f:61:ad:63:94:
21:1c:97:08:69:93:41:72:13:b6:9b:9f:ba:34:99:c9:10:3b:
2c:1c:07:e4:6f:c0:15:a4:43:40:6a:c6:3b:ed:b2:e7:d3:32:
da:8b:3e:3a:8c:98:72:64:80:88:28:5a:f6:ee:36:f3:5f:b0:
7d:cc:60:c1:58:58:9e:3b:cc:c3:84:e8:56:02:06:3a:99:99:
c6:87:26:5d:96:8b:99:3d:04:a6:18:cd:f6:9b:39:68:fe:23:
a4:a0:c6:21:41:a6:8a:36:8a:ff:ea:22:e0:b8:9d:01:26:60:
49:64:b0:1f:dd:fc:ff:ad:33:ed:1f:44:a5:68:8c:52:7e:d0:
e4:85:6b:fb:13:69:06:83:43:a8:84:0e:b6:e0:e2:e2:3b:fa:
02:fe:d6:bf:9d:1d:6c:ac:63:22:e2:4f:86:90:59:88:93:e8:
ac:b9:9e:07:e0:36:0b:0d:31:0f:66:90:8c:ac:f7:09:2e:49:
75:53:ff:3e:fe:b7:b6:33:da:04:83:49:a9:69:97:df:71:f9:
73:7e:14:c3:c8:6a:7c:bd:db:49:77:1a:f8:8c:c7:32:fb:26:
c5:03:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:29 2025 by rpki-client