Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier: kjbnNqsD+5c1sa/95AfYfVdvEOwAhK7XmvecqaAbCVU=
Subject key identifier: 43:10:B5:F6:E8:73:32:38:95:EC:53:4D:1F:29:A3:FF:70:E4:C1:A0
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial: 0199FF597D5170BA035AB0BFA39526854FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 02:01:18 +0000
Manifest this update: Mon 20 Oct 2025 02:01:18 +0000
Manifest next update: Tue 21 Oct 2025 02:01:18 +0000
Files and hashes: 1: Rn5W7oiVYRufZC2Cc9HQB686zNI.roa (hash: r6LX/rQ2IMQ0lnqajopwaJaJ6RgScSLx/FlgSbqRLTc=)
2: XHUUpmsTIvK_KTF6Ns7MAyI399w.roa (hash: Hd7LpYgtsmwvaWEwTnrD15eJzW3l7MahPrkz65fNT1U=)
3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: wYeMP/2FgQAZu4ND9ljGDKWfHEvsd3Tt8vK0JnIPHJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7d:51:70:ba:03:5a:b0:bf:a3:95:26:85:4f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Validity
Not Before: Oct 20 02:01:18 2025 GMT
Not After : Oct 21 02:01:18 2025 GMT
Subject: CN=4310b5f6e873323895ec534d1f29a3ff70e4c1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:8c:0c:2d:93:e3:e5:9a:8a:1e:6c:a0:ac:
41:82:4c:92:c3:14:86:1b:7e:52:b5:f0:f0:b8:a2:
e3:a1:fc:45:8c:14:63:9d:18:11:9f:9a:7d:20:c9:
6e:f1:0a:1c:66:69:5e:cb:ff:61:17:b5:8c:6d:9f:
15:9e:9c:75:2b:d5:e7:02:13:14:ab:e4:50:3e:fa:
88:3b:23:68:14:da:12:5d:60:0b:3a:96:34:90:81:
d6:63:ac:63:a4:a9:75:2d:2d:32:78:da:01:a8:6f:
42:10:f8:a5:da:07:5d:05:a7:11:7f:df:0f:62:31:
89:0f:95:d1:8d:4a:13:41:28:0c:2e:24:19:c8:75:
5e:d5:82:7b:50:9a:33:3a:35:a7:69:6b:40:e9:17:
8a:9f:d6:46:3b:fb:10:e6:32:ae:86:43:9a:24:96:
6c:e7:4f:69:4d:af:f8:b4:fc:27:cf:04:e6:bc:24:
16:88:2a:58:7b:a6:66:0d:2f:0c:06:4d:90:41:1f:
1d:87:7d:d7:71:75:65:c6:f0:50:b4:15:ef:d3:ba:
68:e4:43:2a:90:63:81:8d:af:27:2c:21:54:88:fe:
da:3b:3f:b6:83:b4:15:49:f0:64:b6:59:d4:05:e2:
18:54:8b:09:c1:6b:a2:a5:c1:18:ae:35:66:39:29:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:B5:F6:E8:73:32:38:95:EC:53:4D:1F:29:A3:FF:70:E4:C1:A0
X509v3 Authority Key Identifier:
keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:03:6d:a3:cf:73:0c:b9:4a:c8:96:f1:ac:a3:6b:f9:e4:99:
d7:dc:b6:1d:27:b0:33:e2:e4:9e:d1:92:e6:83:ff:4a:17:b6:
78:83:f1:f1:d2:04:a4:12:f4:28:7c:86:be:1f:d5:b0:e3:ad:
3a:af:f2:97:38:ce:f6:e7:ba:58:b5:52:1e:3a:8c:b6:d4:4d:
db:3d:50:33:03:3d:73:81:47:63:41:2d:32:4a:d2:e1:10:26:
4d:ee:ec:f1:c3:64:03:dd:ef:86:dc:3b:6a:e8:66:99:f3:45:
f8:03:1d:c4:e8:07:14:1b:0c:42:9a:ca:cf:a5:db:5e:da:ae:
3a:08:72:24:d9:ca:9d:4e:9a:33:c3:36:10:da:54:62:82:2a:
96:49:b2:29:55:ac:19:84:86:63:89:2e:35:1c:14:26:b1:03:
7d:50:c8:5f:1c:9e:44:6a:9e:62:0f:46:64:3b:d3:75:5a:e2:
3b:a3:58:e4:39:40:9b:0d:c6:9b:e4:6c:da:40:50:ab:72:0a:
b2:72:d2:f6:86:6f:07:e1:f1:db:ab:0e:76:7d:1c:6e:a0:d6:
70:86:4c:a6:49:f3:96:5a:e2:86:b4:95:6e:1d:54:e0:c3:b7:
6e:08:58:f2:02:c4:8b:84:73:63:60:e0:cd:10:30:01:d0:70:
d1:bf:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:43 2025 by rpki-client