Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: ZLmc+Y2AdodqZiGVtf9XrmOJl5jqNh2beB9/vHXigCo=
Subject key identifier: 30:8A:AB:22:91:DC:77:D7:FA:CD:23:90:85:A0:4E:94:AB:16:28:28
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 0199FBEAEEECF619A49E071B3C46EF7DA844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0D1F
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: GVUeOB4dXXqj9XML1jN57j3Df5M.roa (hash: Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: zuACWr0td+sAjQcgUO19nT4U4/0YUXLmS5lvTYKbZaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ee:ec:f6:19:a4:9e:07:1b:3c:46:ef:7d:a8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=308aab2291dc77d7facd239085a04e94ab162828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:5a:de:cf:5b:08:5d:5d:5c:35:3f:6f:fc:
aa:44:9e:6c:6a:8b:61:19:ce:af:06:da:0e:22:df:
66:d2:16:3d:f8:24:c8:d2:e7:d0:fb:e7:a3:18:23:
43:b0:30:87:05:ba:8e:d4:45:67:e8:3b:90:b4:ae:
88:83:02:3d:ab:1b:56:50:17:91:d0:94:2d:4f:68:
58:2b:d4:7e:52:a3:f4:50:26:e5:1d:54:b4:e7:32:
97:ff:bf:b9:90:f9:b3:4b:94:52:90:c7:79:5d:93:
c3:7f:8e:fe:e7:71:0d:f6:46:b2:22:33:5e:db:19:
d1:8e:62:22:a3:c9:1d:5b:b4:ad:00:3f:6b:b1:ee:
42:1e:75:df:d0:d8:a1:57:1e:68:67:c1:0b:05:39:
be:1f:f4:55:75:f8:6e:a4:d7:2a:0b:3d:2a:56:f0:
61:eb:8c:32:6c:eb:49:86:43:ba:41:bb:73:aa:06:
aa:85:32:af:e2:ac:ab:d4:e1:56:ae:44:6b:41:d8:
f0:0b:b9:52:ed:19:f7:88:00:a9:73:07:95:5f:4e:
d4:36:ee:c0:bc:37:d0:68:4a:d3:c4:b9:b5:85:b2:
0b:6c:36:b2:0b:00:91:fe:ed:1b:c0:af:9e:b3:1c:
48:11:d3:66:9f:1b:d2:65:9b:38:c6:01:44:2e:e5:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8A:AB:22:91:DC:77:D7:FA:CD:23:90:85:A0:4E:94:AB:16:28:28
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dc:c3:e7:92:9d:da:f8:6c:80:bd:45:0f:14:49:06:27:c8:
40:84:e4:b3:f2:21:48:2d:b0:05:24:4c:fa:19:71:8f:57:28:
bb:ce:6c:fe:54:8a:c5:59:77:40:09:b9:1b:8c:55:18:8c:89:
d3:7b:2c:7a:5d:d0:f0:cf:f7:21:44:d9:0c:26:84:de:bc:3c:
d8:ce:ce:59:c6:d4:17:3c:71:90:ef:e8:eb:4b:42:d6:11:52:
1e:0b:86:cc:26:c2:e1:79:d3:5d:f6:a4:73:ec:1a:9a:d6:ce:
68:04:06:9a:d5:25:ab:7f:3f:49:c1:56:dc:3c:ce:e9:eb:9f:
49:39:dd:c9:5b:54:96:14:90:b5:c5:5e:53:0c:8d:8b:ef:53:
83:be:d7:de:03:d9:87:8d:76:45:6f:70:9c:ee:87:b4:10:d3:
ea:55:7e:33:19:84:d4:b0:a5:2c:6e:7d:45:af:fe:a4:15:d5:
9f:48:63:4e:dc:25:56:4c:21:95:b4:17:b6:73:e3:21:0e:d3:
79:59:11:cc:dc:b1:e8:06:5f:df:d7:39:72:84:27:27:07:62:
87:a1:b8:75:60:39:41:bd:18:7b:74:cb:c4:4f:6f:b3:df:96:
1f:ed:80:d5:ca:ae:b4:01:92:01:6a:53:54:08:08:ec:d3:ba:
49:49:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:23 2025 by rpki-client