Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: RXlzK9VuUmja+A8kjX1zoHWB8xIMrwlIcEzKshoWsDY=
Subject key identifier: 82:50:2E:D0:61:DA:01:F5:56:EC:0F:7D:3D:88:8A:52:45:7D:4D:AF
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 0199FDD9A3FC184A4F09E7B1220872955C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 0279
Signing time: Sun 19 Oct 2025 19:02:02 +0000
Manifest this update: Sun 19 Oct 2025 19:02:02 +0000
Manifest next update: Mon 20 Oct 2025 19:02:02 +0000
Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: gVTZV3AfwUk9twtW87+bxfv6zFZF/FY22iVnfJRVLic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a3:fc:18:4a:4f:09:e7:b1:22:08:72:95:5c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Oct 19 19:02:02 2025 GMT
Not After : Oct 20 19:02:02 2025 GMT
Subject: CN=82502ed061da01f556ec0f7d3d888a52457d4daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:a8:93:75:56:8a:96:bb:f6:8d:8a:4b:64:
0f:9f:f8:f6:26:46:52:ed:9b:fe:b2:61:6b:cc:45:
06:52:96:c6:50:4d:13:3d:aa:0d:c3:66:d9:9b:d5:
36:db:e5:38:d5:6a:ad:8c:68:18:9b:41:80:a5:36:
6e:67:c5:87:69:d9:07:52:12:9e:fc:1b:61:d9:cb:
8d:f5:80:5a:4c:1a:8e:8b:8a:58:82:ef:7b:81:2a:
28:bb:bb:49:6d:fb:46:87:26:ad:be:4b:e3:6a:12:
38:8a:db:97:31:ac:2a:3c:9b:21:15:1f:05:27:96:
e3:48:9c:fe:75:4e:3b:09:a6:f4:c3:c1:97:a0:38:
78:98:65:fb:cb:0e:94:08:9b:a0:b4:f1:d7:19:17:
0e:bf:8b:42:f8:49:0c:dd:f4:02:d7:47:df:12:8c:
62:52:6b:fd:98:b6:58:31:31:fc:bf:ce:80:db:57:
fb:85:b9:c5:8d:79:6e:47:7d:08:20:16:f7:6a:f8:
c0:c3:28:82:13:40:7e:fb:d2:02:ec:0f:ed:bf:85:
94:3a:20:a0:45:87:f3:93:1b:3a:5b:da:cd:66:d9:
9a:06:7a:c5:a4:b2:52:79:bf:7b:6a:e8:68:3d:35:
c1:75:5a:72:b6:04:0d:a9:d7:f8:4b:61:7a:b1:6e:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:2E:D0:61:DA:01:F5:56:EC:0F:7D:3D:88:8A:52:45:7D:4D:AF
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:ff:a8:ff:78:f8:15:88:7a:ef:1c:52:24:c7:29:77:60:
9e:1c:d8:10:45:b5:c3:0f:e6:4c:93:95:ea:54:28:6a:9d:20:
b8:f8:2f:f6:ba:9b:5c:e2:b5:96:b7:e5:b2:9d:1d:b7:64:da:
1b:dc:40:26:09:12:d8:d0:d0:5a:41:9d:04:07:23:19:d0:b0:
eb:af:70:73:4b:56:e9:6e:9a:22:ff:4c:fb:48:94:2b:07:f7:
1d:1e:2b:39:be:d5:5c:fd:83:0c:e8:3a:ae:53:63:9a:d5:94:
4d:3e:56:9e:c4:20:52:7a:a4:b9:c0:90:01:9c:0a:8e:87:8b:
60:a5:3e:51:20:b5:46:8f:de:df:1e:9d:7a:3e:d2:d5:23:99:
cf:e5:46:bc:5e:9d:aa:7f:a6:ab:48:bf:1e:ad:ad:78:88:58:
3b:5a:7b:5e:1b:4e:7b:0b:84:ce:14:f9:99:9a:74:36:80:56:
42:bc:b7:ba:8c:01:52:bf:20:10:84:72:3a:df:c7:9b:f7:cd:
d4:9b:f4:1f:5e:a3:49:04:5d:f0:f7:59:a3:c7:8b:0c:9a:fe:
f4:07:82:d9:3c:56:59:17:65:af:65:c6:39:88:77:b6:1e:27:
2c:a4:b7:ea:a7:9f:86:25:62:38:3e:9c:4b:95:47:28:af:f1:
7f:cc:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:44 2025 by rpki-client