Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: aVwRvNdYGy8tNf9pRhpAie9VyVHaMxWWOHAIuP08Gpw=
Subject key identifier: D8:8C:ED:EB:ED:15:11:00:2A:64:C5:A8:21:4E:FF:3B:DD:3C:14:D9
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 0199FCC6E37EA7468930FF8AD98B5DF56857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0CF7
Signing time: Sun 19 Oct 2025 14:01:56 +0000
Manifest this update: Sun 19 Oct 2025 14:01:56 +0000
Manifest next update: Mon 20 Oct 2025 14:01:56 +0000
Files and hashes: 1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: f6klfDP5S9CF7l6XQQg655Z7uZx3GtCKjLH81XsQp1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:e3:7e:a7:46:89:30:ff:8a:d9:8b:5d:f5:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Oct 19 14:01:56 2025 GMT
Not After : Oct 20 14:01:56 2025 GMT
Subject: CN=d88cedebed1511002a64c5a8214eff3bdd3c14d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:81:c2:a6:42:04:75:be:95:e0:0c:78:8b:
25:4a:fa:e3:00:6b:e9:71:3e:29:55:20:08:af:ea:
1b:94:0b:95:78:45:d9:dd:e1:fe:71:ce:8c:50:33:
21:14:7e:a4:0a:1f:6e:ae:83:d0:7b:43:ff:6f:fc:
21:47:2e:04:01:0d:16:6e:d0:84:d1:52:52:da:65:
34:6e:31:df:28:21:b1:b4:e3:a1:0f:68:e3:0f:44:
35:ad:8c:29:51:9b:ef:76:6c:63:4f:bb:ab:2c:d1:
af:96:4b:1b:e2:d5:dd:e8:fa:dc:81:0d:bb:e9:ab:
38:06:31:b5:eb:f1:04:42:83:60:79:ce:68:f7:88:
39:14:1c:49:64:61:9b:7c:48:ef:b0:e5:cd:59:9f:
65:09:25:fb:8f:7a:38:71:43:1a:eb:9f:c8:a2:62:
3d:43:fb:ff:c4:4c:07:b1:a4:d2:b1:c1:c9:ba:a1:
25:d3:35:4f:b5:fc:7a:d1:af:ad:65:11:32:3e:28:
a5:f1:be:92:db:07:3c:bd:70:4b:43:17:33:6f:c9:
5c:dc:95:c7:c5:03:3a:63:e5:a8:a3:79:fd:4d:31:
2d:17:d6:94:10:45:9a:1a:8d:83:38:93:f9:c3:8c:
44:c9:bb:0e:c9:57:73:7d:8f:c5:93:89:db:44:86:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8C:ED:EB:ED:15:11:00:2A:64:C5:A8:21:4E:FF:3B:DD:3C:14:D9
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fb:34:ff:5c:9d:49:ef:f2:51:84:a8:0b:53:bc:30:97:4b:
97:dc:9b:bf:05:1e:f4:4d:0b:75:b9:0c:ad:2d:4e:2a:3c:44:
6d:58:b6:82:3d:2f:34:a4:bf:3b:c0:35:7c:3b:5f:4a:dd:06:
38:be:d4:b2:d2:4d:5f:34:b5:b1:4f:ca:0f:60:8e:a4:3d:d8:
46:c8:e1:87:8c:6a:48:30:a1:fe:be:2c:5f:9d:6a:e9:45:2d:
6e:c9:c6:87:fd:c6:f9:16:44:41:56:49:bd:e6:ae:a1:7f:16:
63:14:32:97:1b:c2:f5:15:bd:98:03:ab:99:7e:c4:87:06:c9:
2b:f9:60:24:b8:80:1b:64:28:d4:e8:eb:c4:ac:34:4f:35:3b:
4d:f9:d6:c6:12:b3:97:b0:ac:d9:c0:a5:28:f2:9d:f6:23:a4:
69:5e:15:06:1f:4b:1a:9b:b6:58:8c:03:d0:4a:35:03:bc:92:
46:82:5a:25:1a:c1:38:ce:ac:ee:c2:cf:7f:44:ec:92:86:1c:
86:b2:6e:fe:48:54:a9:01:6e:7d:f5:f2:f8:85:70:26:5c:01:
c1:97:57:42:94:96:56:c0:0b:a8:68:c5:26:0f:58:7b:c4:d2:
70:fe:aa:5a:8b:1b:2e:51:a2:e1:3f:b2:3c:f0:10:2f:4d:76:
56:a6:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:06 2025 by rpki-client