Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: AZrLpmu3Em0FQHnc69NN8NYleJ0vWmU3gJXxBaCvX0M=
Subject key identifier: DD:ED:0A:1B:D5:9F:EC:4E:45:0D:97:26:3C:9D:0B:9F:A9:FD:B8:37
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 0199FD341FB2F033E1E01A2F8DB6F4D9A9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 14F2
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: wPEe3i+YofOo61Xt5v6hjGGfrrSrRxsFCT1RrewnIMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1f:b2:f0:33:e1:e0:1a:2f:8d:b6:f4:d9:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=dded0a1bd59fec4e450d97263c9d0b9fa9fdb837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:2b:94:04:18:61:77:a7:ae:eb:3b:bf:c3:
a4:99:9b:0f:ac:ae:20:bc:4a:b5:86:84:a1:88:b4:
1c:4d:c6:c8:0f:ee:d9:fc:a9:de:53:59:d2:a2:c2:
21:48:2b:c3:5c:9e:bc:f6:9c:a6:9c:07:52:3d:0d:
fc:31:1f:cc:cf:60:05:66:d6:02:d6:a9:06:f8:c2:
e3:61:7c:e7:8f:8a:99:11:fd:74:7b:51:63:1a:08:
e5:fc:56:16:a6:f1:3a:5c:e3:b2:72:a9:46:28:ef:
03:f7:f6:62:f6:eb:35:d0:26:6c:ea:56:00:25:ea:
c9:b7:f9:41:99:a8:4d:5b:f8:7f:c3:9d:a1:e3:b6:
3c:b2:46:18:83:08:34:67:8b:7a:da:0f:2a:bf:2a:
0f:d4:7c:b4:a3:b7:5e:f8:7e:07:44:36:4d:b6:70:
4e:0f:43:38:c1:ae:16:a8:36:a3:a0:0f:3f:2d:99:
a7:6a:19:eb:fc:f6:fb:4f:dc:f9:b2:ab:93:0a:5a:
78:e9:a0:5f:9e:61:33:40:a8:ab:c2:28:34:c0:f0:
b0:dd:6e:35:37:52:3c:6e:60:2d:9e:23:14:78:6a:
97:f4:67:21:6d:85:7a:dc:f1:74:e9:15:15:be:9d:
08:31:dc:24:c9:cf:47:a7:23:32:3b:06:ce:ad:e4:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:0A:1B:D5:9F:EC:4E:45:0D:97:26:3C:9D:0B:9F:A9:FD:B8:37
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:87:8c:f2:bc:88:6e:c1:db:cd:f1:cd:5a:b2:03:2f:d9:26:
00:d5:71:bd:f0:7c:4a:11:32:f3:4b:f5:4f:a8:bd:01:a2:85:
c4:f2:2c:d0:f3:e8:5d:3e:93:3c:1e:fc:4a:2a:5c:d8:72:ae:
b1:cd:07:2f:85:ab:c6:67:e8:ca:25:6d:31:16:1c:8b:5d:e9:
2b:74:d6:38:62:ad:6b:02:4d:2f:00:49:4d:69:eb:19:0b:e7:
37:c9:bf:e8:09:f9:25:b1:e5:61:3f:42:b6:c5:60:cd:14:9a:
71:76:59:76:a9:05:e1:4a:32:e8:49:b0:5d:77:44:7a:15:21:
b7:79:ca:52:2f:80:7a:6c:82:4c:47:56:88:94:cc:07:38:60:
f8:f0:c7:47:1b:ad:2c:35:1e:43:36:0a:20:b2:27:9c:6f:12:
9d:91:5a:12:80:75:a4:83:23:26:b4:9c:63:8c:56:f7:d8:11:
e3:23:f0:71:c7:b2:28:27:65:82:6e:44:f3:f9:d0:ef:2f:b9:
46:d9:b7:d2:c5:7d:8c:80:25:90:f1:7c:34:a6:87:28:9a:95:
73:c6:aa:91:66:3d:f4:27:19:4f:82:6b:39:1d:42:bd:f0:e4:
be:39:b4:63:9b:17:50:a3:66:f4:f1:d3:85:db:3f:fe:40:91:
a4:55:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:39 2025 by rpki-client