Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: FAtppFxnKwtmLAKes0XghZ1dwVr6Biu0wXaAgrVbuN4=
Subject key identifier: 63:12:37:CB:46:14:F3:43:D3:C4:27:D7:37:5B:F2:24:2C:BA:48:B1
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 0199FB7CB731169FB6854696AFC0D33C0375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 16F5
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: lS+7RBWPm3C98KbU/co4KobU1bR87YsHWGRNEh1UALI=)
2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b7:31:16:9f:b6:85:46:96:af:c0:d3:3c:03:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=631237cb4614f343d3c427d7375bf2242cba48b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:d1:d3:64:37:71:dc:66:fa:27:b1:4c:b5:
a3:46:d9:4d:64:fb:3e:b3:1c:7e:a5:bd:a3:9d:00:
cf:2a:a8:c2:17:ca:17:00:80:db:6e:27:26:13:6a:
0e:44:35:95:f8:ee:da:a8:f6:ed:ab:92:ff:e7:64:
c9:23:eb:97:61:af:34:f8:1e:0b:46:78:82:53:52:
56:e4:f6:55:5f:87:b2:75:59:df:c5:2e:97:bf:1e:
ed:cb:ad:29:34:e0:06:8a:46:c2:f9:22:b1:2f:c7:
a0:e5:b9:ea:df:aa:a2:04:67:9a:c8:45:73:9d:50:
51:40:c8:1f:17:e7:d1:28:bd:ac:b2:bf:d0:ca:2d:
53:6b:a6:73:72:05:67:fc:80:da:9c:aa:99:e1:24:
c8:1f:cb:2d:1a:42:2b:35:84:93:51:8a:4c:e5:2e:
fa:da:97:13:1a:aa:49:64:b8:39:1d:92:17:21:15:
46:5c:65:dc:44:c8:8f:bf:6c:cb:38:be:a2:30:21:
67:67:05:e4:e3:86:23:5b:e4:38:47:a2:f3:f2:3b:
5e:1b:a6:50:dc:0d:7c:3b:b6:4d:ec:b4:55:a3:6d:
c0:2e:9c:44:59:6c:74:38:5b:1c:73:d4:d5:b9:9c:
85:67:64:c5:b3:39:81:4e:d2:24:e3:85:2b:22:8f:
d9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:12:37:CB:46:14:F3:43:D3:C4:27:D7:37:5B:F2:24:2C:BA:48:B1
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a9:2c:0f:f1:4a:85:85:db:02:d6:8e:27:9e:96:77:53:bf:
35:49:06:8c:89:1d:00:44:55:3c:e4:d0:99:24:d5:90:8c:de:
53:c9:79:bf:7f:46:7f:16:cc:df:66:37:e2:99:23:22:ec:77:
8f:b2:5a:e5:e4:bd:30:51:44:75:d7:b6:62:b0:93:1e:09:af:
f1:1a:6f:ce:cd:15:b9:8e:41:e7:23:f4:08:e3:72:9c:92:fe:
b4:08:5d:09:85:2c:11:30:58:90:86:d7:e2:5e:e3:a4:bd:84:
63:e7:db:f8:da:d7:a5:c9:3e:32:61:48:17:7b:fc:51:2c:18:
dd:9d:cb:e5:05:ba:da:b9:20:97:0f:29:f4:a6:35:ea:3d:70:
db:df:12:b2:6f:4b:35:66:16:ef:f5:f3:fd:9f:4e:d7:41:4c:
c7:8f:53:8a:51:6b:73:e6:48:7f:e2:90:03:12:6c:da:12:93:
20:92:f8:22:84:18:a6:c8:4a:fd:6b:2c:ed:af:44:6f:fa:5f:
a5:f1:c4:24:b9:93:b9:c2:09:fa:c9:6e:10:a5:e2:0a:e0:13:
cf:6a:bf:c1:3f:23:1d:4b:02:79:9c:85:ca:b6:44:75:4c:4a:
6e:e8:81:2e:d5:a8:e6:ca:6e:16:5d:94:5c:32:38:e7:7c:ed:
87:ee:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:29 2025 by rpki-client