Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: 70bZOX3LWPckPw8GLzH0D2FaVYgVj3fFu321hoF6dDc=
Subject key identifier: 66:E7:42:A8:11:B8:F8:86:53:A2:51:3C:B7:2B:55:96:5C:72:80:0C
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 0199FFC7DBB3187B69831F5184B0334CAD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0D71
Signing time: Mon 20 Oct 2025 04:01:51 +0000
Manifest this update: Mon 20 Oct 2025 04:01:51 +0000
Manifest next update: Tue 21 Oct 2025 04:01:51 +0000
Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: igT8ZQXUhDwDomRtqkyjZ3QMrHOb3ZMXOlJs7lkFHCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:db:b3:18:7b:69:83:1f:51:84:b0:33:4c:ad:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Oct 20 04:01:51 2025 GMT
Not After : Oct 21 04:01:51 2025 GMT
Subject: CN=66e742a811b8f88653a2513cb72b55965c72800c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:78:1d:68:73:8b:f2:4d:87:a4:8d:df:d9:
db:d3:5b:fc:71:7b:84:ea:88:1e:4e:59:53:87:40:
ac:09:37:dd:49:7d:20:e1:47:03:34:73:3b:31:2c:
46:ef:59:24:b5:e9:74:24:99:fa:9f:c8:5e:45:3e:
0c:72:df:06:59:0e:5c:f5:05:28:4e:36:a2:ce:21:
95:7f:cb:29:04:dd:98:d7:5a:24:c0:7b:54:f3:00:
92:9f:9d:de:79:9c:55:92:b7:7b:21:c8:52:4e:72:
40:ac:8f:9f:e1:21:2f:83:af:7c:de:18:74:98:2d:
ea:bf:8b:6c:35:0b:8d:45:ae:33:fa:63:67:dd:39:
5e:21:d9:24:0d:6d:70:79:63:ea:bf:8d:c8:5b:a5:
5e:bd:16:63:5f:ec:56:9d:24:a4:ca:2b:14:9d:9a:
4e:96:f4:7c:92:3a:16:8e:a7:ca:64:c6:fd:2e:59:
87:14:3c:95:07:0c:26:ba:c7:53:2d:c4:62:f1:c3:
4a:53:9a:d7:b6:cf:a7:34:92:e7:8a:8a:d8:ab:08:
f9:c4:b6:5c:e8:b6:96:8e:ea:4b:c0:0e:70:99:cf:
e5:65:13:83:d7:5a:d9:d6:1c:75:de:bc:31:03:02:
fe:9d:9b:fb:2c:55:00:ea:97:54:70:27:73:c1:e0:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:42:A8:11:B8:F8:86:53:A2:51:3C:B7:2B:55:96:5C:72:80:0C
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1a:02:4f:d3:d3:d6:dd:8b:9f:06:27:58:ed:3a:f0:98:19:
31:3b:1b:80:74:d9:c6:37:d0:51:f2:bf:2d:fd:51:bc:de:85:
a0:5e:35:94:0b:c3:cb:4c:cc:2b:df:c5:9e:d4:08:b7:10:82:
65:e3:a7:b9:e1:a1:0f:91:31:de:92:b9:5f:e1:e7:4b:92:f3:
61:c4:36:3f:3a:02:c3:2d:fc:26:f2:3a:7a:f9:43:2a:1e:79:
ef:03:7b:82:ee:e3:b2:57:e9:34:3d:5d:25:19:65:4b:78:e8:
50:12:4c:d6:72:c9:ee:fb:82:f0:f3:d0:10:69:5d:47:96:07:
d1:50:d9:0c:c1:35:60:3e:70:8b:86:1b:6c:c0:4e:84:d3:af:
5e:4c:ac:92:55:59:ab:ae:63:a5:b8:8d:1a:fb:ef:03:84:f5:
66:cc:1b:c1:98:53:a8:f6:e5:5a:57:44:bc:d0:5b:52:09:c5:
04:ab:74:a7:d1:20:96:8d:d2:2c:e1:c0:3f:50:04:5a:9b:4b:
df:d4:54:95:7e:f0:a5:c7:24:e6:a1:09:c4:6e:c0:32:0a:ce:
7b:cf:ae:63:35:2d:dd:20:51:99:84:58:df:2c:ff:e1:82:08:
bc:d9:6c:51:6d:d0:63:bb:b7:6b:9a:a1:6f:a7:ad:4e:ed:a6:
8f:fe:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:11 2025 by rpki-client