Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier: BDQg1le0fyPcnWxe038fN8NhBXevEczI7ppgqVPa++A=
Subject key identifier: 45:17:20:1E:F6:35:35:C4:EC:EC:7D:BD:1C:EF:0D:32:0A:15:91:A2
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 0199FC217F69925DD2E1182D11E09FD09DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: LuBbn7HeZ9XwuORgSt0N1asLW5zvmpIUAUPtHtS5XHc=)
2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7f:69:92:5d:d2:e1:18:2d:11:e0:9f:d0:9d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=4517201ef63535c4ecec7dbd1cef0d320a1591a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:70:47:ea:a1:0d:38:c1:4d:9f:3b:b7:88:
d1:37:61:94:92:4f:3e:57:72:bd:e5:bb:6b:09:ff:
a1:10:1c:5f:ec:aa:8c:66:6b:87:62:b9:02:65:4e:
33:65:7f:2b:ed:96:66:0a:14:c6:2e:73:58:42:28:
e5:f2:b5:6d:8d:a2:7f:f2:ed:d6:6b:67:6f:a2:9f:
94:ee:9c:a5:27:8b:d9:66:47:94:a7:fb:be:eb:3a:
ab:63:ba:1f:81:84:2f:66:c6:6c:25:1a:02:ed:aa:
2f:34:b2:36:94:c5:61:ad:93:45:46:6d:60:d8:c5:
39:63:4b:55:88:31:69:fd:92:38:3a:0c:eb:78:83:
d8:90:29:13:41:fc:48:16:92:fd:f9:df:45:d5:8f:
e9:95:1e:7b:a5:22:04:2b:c1:a9:66:9d:34:dc:e8:
f3:18:ed:2f:5e:3b:60:e0:e2:5c:7d:34:18:18:cc:
fa:ab:f0:66:e3:32:60:d9:ce:dd:d2:16:f7:90:21:
ac:98:1e:2e:03:f4:76:f1:48:18:3b:44:f4:70:2d:
01:16:02:3d:bf:cd:84:e2:74:3c:dc:03:a5:76:63:
cb:e6:5e:d3:dc:b1:be:fa:f2:0d:49:79:d0:6f:93:
40:a5:55:a1:83:54:f2:54:eb:04:7a:01:c1:6c:23:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:17:20:1E:F6:35:35:C4:EC:EC:7D:BD:1C:EF:0D:32:0A:15:91:A2
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c1:9f:b4:47:ee:c0:55:a7:00:19:fa:82:44:cc:0b:2c:95:
8d:cb:da:b2:59:2f:90:81:43:fe:32:5e:51:a0:e9:4e:8f:dd:
9f:ed:7a:5e:08:3d:0f:12:e4:18:54:45:86:82:44:07:aa:84:
5d:8f:d1:25:81:01:3d:c3:2f:7e:f0:0b:92:78:c7:7d:ba:46:
9c:fa:6f:97:3f:a4:22:a3:7a:52:36:10:ae:2e:38:4c:a2:7d:
b0:36:b1:11:c6:79:bb:d1:e2:c9:6f:94:68:b0:2f:f2:c8:a1:
50:14:cf:27:ba:25:e3:2c:e8:c2:2c:91:bd:a6:0e:ac:22:f4:
24:6b:41:a4:37:84:46:0d:be:3e:03:4f:18:20:5a:8e:94:0f:
a8:5b:24:9d:4e:0f:60:58:a2:20:49:22:b5:51:61:12:bf:30:
db:13:81:f2:78:84:1c:33:e0:52:ee:8a:42:ee:73:a0:60:32:
c8:86:34:3d:de:33:58:12:7f:83:cb:9a:5a:8c:3c:f5:38:38:
b1:cc:27:1b:fa:4a:8a:e8:56:89:5c:c1:55:1e:2e:27:9a:d6:
0c:d2:2a:52:8b:99:53:2a:f2:15:c3:a3:50:01:1e:b0:6e:08:
bc:d8:d6:57:ec:ad:51:fc:70:73:a9:9b:34:f2:4f:2c:05:ae:
83:86:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:08 2025 by rpki-client