Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: SGY0+/voSjmB0TwW+59BuKdv5IBgne317fVkMWxyBX0=
Subject key identifier: A5:3B:CF:60:B8:35:38:6F:DB:42:F4:F9:64:99:70:F9:00:46:3E:26
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 0199FEEBB6F0F607C781EC64F32BA420A86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 0666
Signing time: Mon 20 Oct 2025 00:01:24 +0000
Manifest this update: Mon 20 Oct 2025 00:01:24 +0000
Manifest next update: Tue 21 Oct 2025 00:01:24 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: vyqz1+zUVscJCNs5VenxRv67tZB08in3GRBrJ3cnmN8=)
2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b6:f0:f6:07:c7:81:ec:64:f3:2b:a4:20:a8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Oct 20 00:01:24 2025 GMT
Not After : Oct 21 00:01:24 2025 GMT
Subject: CN=a53bcf60b835386fdb42f4f9649970f900463e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:71:36:f7:10:f0:9e:67:f0:83:85:ff:ae:
77:2a:c3:88:97:0f:fa:cb:a4:7c:5f:6a:c9:a5:68:
a8:4b:12:a7:88:44:df:ba:8a:1d:cb:d2:48:bd:30:
36:4f:39:60:96:32:c4:c2:89:21:21:d2:7e:0b:1e:
8a:be:f2:6f:20:e0:f7:26:ae:66:69:2b:a3:8a:b7:
86:31:4a:35:c0:7e:43:e7:dc:db:e0:9a:e0:38:0f:
ae:3a:f6:d1:de:bf:f6:b0:82:dd:7c:52:ec:f4:53:
41:1d:d0:4e:81:93:e5:cd:e2:3e:d3:4b:c7:35:09:
0d:34:a7:98:a8:7c:ab:4d:bf:45:3d:6f:25:2b:9d:
76:12:db:cc:3c:40:60:b6:3f:51:85:35:5f:7d:63:
7a:98:65:7f:d2:0b:e7:e4:95:0c:ea:10:57:47:7a:
f5:ab:a1:6c:12:a3:5f:9e:c7:f9:ca:0b:d2:00:00:
0b:cd:b9:1c:3a:9b:3b:7e:81:f3:17:db:77:45:34:
29:a6:de:b9:2d:d5:d0:34:30:a7:65:a4:52:77:c1:
5b:d9:dd:d7:72:bc:7c:81:6e:98:04:d4:92:d8:b9:
34:b0:68:5d:8e:8c:91:f4:03:de:84:c1:c9:60:c0:
19:22:23:72:18:bf:f3:1b:f8:58:2d:fc:a8:46:75:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3B:CF:60:B8:35:38:6F:DB:42:F4:F9:64:99:70:F9:00:46:3E:26
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:43:36:1c:e5:fe:4d:ff:c2:ef:7e:7d:80:6a:39:65:22:71:
a5:9c:5a:b1:a5:fa:36:ff:ac:28:2a:68:af:7b:ab:dc:f8:55:
39:4f:69:9d:f7:b6:ac:5c:15:0b:30:e1:41:f8:ec:63:c7:c4:
d5:70:f5:25:3f:34:9b:f7:a1:95:d0:e3:0c:4d:cb:38:ea:d2:
c4:b9:53:ef:df:3c:90:10:ed:ac:96:ad:62:0b:5b:13:fa:78:
6d:36:3a:a9:a2:04:47:a7:18:c6:93:32:d7:69:08:57:25:c5:
8e:b0:c1:61:0a:7d:28:2e:fe:75:4c:74:23:b3:5e:c0:09:8a:
16:50:75:0e:4a:a8:b8:0c:0e:91:d1:71:2a:3f:89:62:6d:c9:
a3:d9:86:9c:1a:d7:b8:30:5a:8b:86:d3:96:2b:35:b2:83:6d:
0e:0b:1d:40:66:bc:ae:01:16:47:0e:fb:1b:3a:d9:27:fc:1d:
d0:f7:63:b8:de:c6:88:b0:31:7f:6b:77:ca:c8:55:71:0c:19:
12:df:ea:e3:f1:7d:6b:6a:43:da:c5:d7:c6:8e:fc:62:f4:08:
a4:78:b9:3f:56:12:9c:02:11:bd:0a:be:79:f4:a4:91:ae:df:
e0:b5:1a:ba:fb:bf:fe:32:3c:fb:d7:0c:b2:5f:36:a8:da:92:
aa:2e:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:58:51 2025 by rpki-client