Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: qo8mtV1zYn0JIb10PYdgPIZttJO/lo71M4YNcROXUMc=
Subject key identifier: B5:7F:A6:EE:9F:FA:B0:A4:2B:68:22:CF:12:67:7D:E2:6F:C2:50:38
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 0199FCC66A1683A6BF89521587F6D973804A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 05DD
Signing time: Sun 19 Oct 2025 14:01:25 +0000
Manifest this update: Sun 19 Oct 2025 14:01:25 +0000
Manifest next update: Mon 20 Oct 2025 14:01:25 +0000
Files and hashes: 1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: A4PFLctvuESu0M8VB/wLdBxYqnVtQUmE3zo5Hycfwbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6a:16:83:a6:bf:89:52:15:87:f6:d9:73:80:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Oct 19 14:01:25 2025 GMT
Not After : Oct 20 14:01:25 2025 GMT
Subject: CN=b57fa6ee9ffab0a42b6822cf12677de26fc25038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:e8:91:5c:70:49:fb:4b:2e:78:ea:a1:58:
84:8a:59:b8:f3:da:f3:3d:61:b0:8c:9e:2a:0a:77:
8b:fb:e6:2d:3e:d1:97:42:52:5d:59:62:b3:b4:e2:
bf:04:41:30:2c:19:a4:0a:79:6b:30:ad:b1:98:45:
19:42:c0:d6:c5:8a:6c:94:7b:d2:d0:77:b9:43:a2:
a4:4e:c8:36:63:6d:a0:65:3d:a5:7a:a5:0d:09:02:
2f:a4:48:10:47:05:1d:7d:a1:7c:73:80:7b:56:61:
07:a4:49:37:0d:a6:d4:76:9b:57:a0:84:8f:d1:a4:
cb:16:65:bb:b1:c5:06:d0:23:64:ea:36:62:e6:82:
dc:41:09:23:fa:24:33:d4:29:a1:9e:50:99:86:0a:
02:90:63:76:47:fd:83:34:19:f6:d4:2a:2c:af:05:
2e:5c:11:68:12:e8:ec:bc:92:45:ac:fc:ac:78:a3:
c8:2c:9e:94:99:0b:b2:31:a0:c4:92:ce:11:e8:41:
05:1a:91:96:bf:08:a8:ca:60:80:81:6f:8c:ef:d7:
ab:95:e2:87:3f:45:e0:e8:82:e6:4d:51:5a:ac:88:
c7:4e:d9:d3:17:03:4a:03:49:3a:a9:d3:f6:81:69:
ec:2e:2b:a8:6e:40:13:5b:38:cd:ce:1d:16:9e:b2:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7F:A6:EE:9F:FA:B0:A4:2B:68:22:CF:12:67:7D:E2:6F:C2:50:38
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e5:3d:98:05:ca:96:aa:d8:0d:4c:68:df:bf:84:82:ed:8b:
1c:01:9e:ff:b6:87:40:1e:df:5e:f0:6e:4a:5b:dd:94:7c:c4:
c9:4f:0a:a1:98:34:4b:b8:1c:77:5e:01:52:84:fd:6b:6d:6c:
2a:36:53:04:0c:db:b1:55:03:37:32:a3:0b:e2:d9:34:bd:f7:
12:9a:96:df:42:14:33:40:6c:48:7d:f8:6f:72:0f:fd:f1:b6:
e7:db:38:2e:da:48:6b:39:7d:0b:4a:0a:e3:42:38:f8:b6:84:
f9:d4:2b:f6:62:bc:11:0d:e2:de:98:60:24:e9:32:d0:b1:f4:
6c:e2:92:cf:7b:06:d5:39:7e:fd:4e:b4:bc:c5:fb:5f:c3:e9:
75:74:52:56:7e:76:d2:17:0a:eb:3e:8f:33:2f:82:e5:30:2a:
14:6a:ac:60:9a:5d:97:6b:8d:1f:07:91:ad:41:37:83:ca:99:
e2:43:c2:1b:ed:fb:a8:bd:f7:06:da:a0:e5:97:a9:72:17:9d:
fb:70:84:31:35:ab:f7:f0:dc:30:cb:24:c1:f7:4c:97:1f:9e:
ac:bd:31:4f:f3:53:70:b3:e4:35:a0:d6:6d:3d:17:95:82:02:
42:11:33:30:7e:ff:d0:d3:30:07:38:df:a8:4d:2f:c5:17:e0:
a1:c0:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:44 2025 by rpki-client