Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: 0Y8WzkzpDBSKJ9IDA+AD42ZGEr7WHfqQoalP2haAJVI=
Subject key identifier: 98:3E:4B:5D:81:CE:2A:2A:63:58:9F:B4:43:F6:8E:3A:B5:C7:72:D7
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 019A288B364C4B251596458F42B7992B183C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 02C4
Signing time: Tue 28 Oct 2025 02:00:03 +0000
Manifest this update: Tue 28 Oct 2025 02:00:03 +0000
Manifest next update: Wed 29 Oct 2025 02:00:03 +0000
Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=)
2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: xA6gG093cdgRO0l8fU+G4gTosOrmvlZKaQrEzg/uc8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:36:4c:4b:25:15:96:45:8f:42:b7:99:2b:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Oct 28 02:00:03 2025 GMT
Not After : Oct 29 02:00:03 2025 GMT
Subject: CN=983e4b5d81ce2a2a63589fb443f68e3ab5c772d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:c5:c3:eb:b8:46:aa:57:98:09:8f:cf:3b:
db:d1:a1:62:a3:a1:fb:c0:d4:56:cd:48:b4:13:47:
d2:e7:83:0a:54:c3:cd:cd:c6:0e:f6:f2:d4:20:a8:
41:2e:84:67:79:db:72:00:c6:dc:7c:fd:dd:67:71:
67:12:96:ee:e1:4c:fa:68:d7:6a:4e:73:0e:46:2a:
86:a2:e4:da:17:41:af:ee:90:b1:06:27:f8:17:59:
58:da:cd:af:8f:fd:9c:bd:25:9d:7b:a3:94:6b:05:
15:21:88:39:9d:77:b4:b5:4a:2e:1d:35:68:fb:5e:
44:65:2e:aa:41:3b:48:8d:1b:c1:9a:19:50:c7:99:
59:29:2c:63:7c:df:45:49:a7:19:02:68:10:8b:4f:
9c:3d:54:25:f6:53:8a:49:3a:92:3a:6b:9d:08:f2:
2d:de:63:61:ad:33:99:5b:c6:f2:74:4c:ad:0e:09:
b4:a7:0c:03:b9:b1:5d:7b:20:d1:82:23:9e:4c:0c:
6d:1d:6d:b0:48:ba:6d:8c:fa:60:d8:95:62:8c:f1:
b1:42:ba:06:88:8a:1e:b8:35:77:bc:38:1e:ff:28:
2e:c7:84:fa:65:0d:2a:0e:92:e0:0a:78:47:e0:bc:
7e:34:f5:7d:8d:c8:fb:a2:48:64:bf:07:1f:7c:3f:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:4B:5D:81:CE:2A:2A:63:58:9F:B4:43:F6:8E:3A:B5:C7:72:D7
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:62:c0:20:11:6a:75:8a:70:5c:2c:86:77:10:ad:0d:8c:aa:
98:6d:4f:18:57:82:f6:96:07:90:a9:97:a8:a6:3a:c8:ec:99:
73:2c:e2:47:74:78:aa:17:8d:09:87:61:ca:d0:26:76:73:40:
f1:c7:42:99:62:b7:2b:c4:d2:d9:58:79:e8:43:2a:e6:9a:5e:
fc:b7:b8:32:26:2c:19:50:3b:97:12:f7:2f:59:e3:d5:ec:3a:
75:40:c1:f8:b4:2e:4a:0a:56:20:08:45:af:2a:6a:c6:1e:16:
aa:b5:f1:c1:a1:e9:ce:8d:f5:77:b0:31:97:a7:52:27:8e:04:
57:7b:d2:bc:b7:e5:07:ca:35:d8:d8:dc:01:2f:1a:eb:74:03:
9e:d7:b6:c8:7e:ec:c1:88:ba:8d:13:d9:e7:0d:b7:2b:34:7f:
a5:84:dc:58:c4:c1:2a:ee:88:97:af:d2:e7:07:71:b7:9a:36:
0e:52:10:55:2e:18:31:ee:7e:79:92:7d:98:48:db:92:75:48:
53:30:4e:81:a0:b5:d9:12:1f:f7:98:8f:84:22:55:ee:fd:70:
db:37:a8:bf:af:d8:d6:f4:74:f6:65:21:ff:bb:0f:d8:31:7a:
52:ba:b7:c4:97:6d:0c:92:b6:e1:d8:7c:7b:6a:26:d8:09:a0:
d8:38:13:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:37:07 2025 by rpki-client