Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: M2VA28qVlgvejkNPLrReqQWLLIcr+YQfBzxP9EXTq5g=
Subject key identifier: 54:49:C8:7E:53:77:29:F4:9E:B6:4F:6B:85:D6:7D:2D:20:C0:BE:36
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 0199FC8FC3B9E075685EB921733A6F009EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 074B
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: LTXb9wTluo52H6edqWfYzVg92BnOZKciQexce0vP9lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c3:b9:e0:75:68:5e:b9:21:73:3a:6f:00:9e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=5449c87e537729f49eb64f6b85d67d2d20c0be36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:34:65:f1:e4:32:2e:b1:cb:a8:39:76:7d:
00:64:54:61:af:32:d8:67:a2:1b:3c:05:87:71:88:
dd:13:09:89:a6:25:2b:5e:e4:9a:db:cc:3e:b9:d2:
51:05:ce:0e:4d:c2:0f:ff:66:0a:03:e5:3c:7c:af:
b6:10:57:69:5f:88:29:e7:f6:07:33:e5:0f:0d:71:
d7:5f:89:f8:1d:d4:05:1c:84:7a:dd:c9:41:e0:1f:
2b:64:b1:92:b5:a3:73:f8:84:27:f3:e9:41:af:85:
51:ed:f4:42:28:6c:26:04:08:f4:4b:46:b1:33:89:
01:36:16:5e:dd:6a:a7:7c:57:55:01:e7:5c:6d:ea:
7c:db:4d:8d:ac:32:d4:66:cb:85:a9:a9:77:f9:e3:
70:c3:f3:bf:46:9f:c3:ef:69:62:a3:43:90:01:68:
06:d9:15:55:0c:d5:4d:3c:43:34:1c:59:ea:c3:62:
dc:34:3d:68:f3:10:68:a8:76:31:8f:04:e8:c8:d5:
c0:eb:82:f9:1f:15:f1:15:85:24:5e:49:59:30:28:
ba:51:e0:a8:2c:55:4e:92:a3:88:13:1a:38:72:c2:
01:b3:71:22:6a:fc:80:98:42:98:52:a5:42:6d:fe:
81:22:2b:36:32:5d:92:bc:5e:74:58:2c:cb:28:45:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:C8:7E:53:77:29:F4:9E:B6:4F:6B:85:D6:7D:2D:20:C0:BE:36
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:25:0f:ad:a3:3c:db:c2:fe:e3:bb:4a:ab:7c:c9:4a:91:
8e:93:a2:9c:b4:33:04:71:c5:87:49:4f:d9:51:b7:46:d8:cb:
5e:5c:12:97:a2:84:b4:6c:4f:e8:77:09:e5:af:b8:49:49:e1:
b2:58:01:77:1c:60:a8:7f:5f:5a:be:1b:85:53:fd:16:5e:c7:
a6:6d:5f:52:ee:65:d3:70:e7:b2:84:6a:bc:2b:b9:ea:75:84:
61:58:b1:25:d9:5d:21:d3:d2:c7:de:a7:5e:b0:f7:d3:90:b9:
65:04:eb:98:48:f7:e5:71:94:cf:83:86:02:26:86:60:be:4a:
8a:7c:8c:b3:cc:d3:ed:f5:4b:a5:f6:b7:87:cc:f0:27:6b:11:
71:78:de:e4:f4:d6:27:ba:e7:98:97:cf:ea:92:30:b0:05:21:
29:72:48:24:f1:44:68:34:34:de:d1:4c:b4:a5:a5:a3:9e:d2:
63:6c:c9:38:c5:fe:2e:b3:dc:1e:b3:c6:ff:cf:11:1e:fa:e5:
49:62:7d:d0:39:49:eb:dd:14:10:a9:a8:29:92:65:f5:8c:38:
7f:3c:98:7f:83:07:3a:2d:2f:08:33:00:bf:d6:31:1e:56:fd:
6f:ac:f6:58:eb:a4:6a:f6:34:24:56:92:cd:14:c8:d1:96:ac:
2d:e2:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:15 2025 by rpki-client