Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: 2R7ADbxK2WmevbTKgN+Wp4hrMjEZaJHRlvujYMVDgVI=
Subject key identifier: BE:57:6A:E6:F6:DE:E6:A4:6E:81:68:07:C8:37:56:D1:D8:AD:D2:8E
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 019A0A813B7B8D4F89678A57C4175B975EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 167C
Signing time: Wed 22 Oct 2025 06:00:32 +0000
Manifest this update: Wed 22 Oct 2025 06:00:32 +0000
Manifest next update: Thu 23 Oct 2025 06:00:32 +0000
Files and hashes: 1: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: Wcu4sFn7ukvrPYuemVPonUhx+QthL81S7RQRz6Dc5/k=)
2: vICAXNaVi9WpUOInUKGa4x8kVzo.roa (hash: wwadTuvBpX7uW9J+Oei6uXdC+2oxhi7N3s69AlGUoYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:3b:7b:8d:4f:89:67:8a:57:c4:17:5b:97:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Oct 22 06:00:32 2025 GMT
Not After : Oct 23 06:00:32 2025 GMT
Subject: CN=be576ae6f6dee6a46e816807c83756d1d8add28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:92:4c:0a:87:3c:c4:72:34:8f:15:36:60:
57:e9:2d:89:54:7c:0f:27:56:ca:5a:a4:78:29:32:
20:69:fb:43:14:4a:d6:e3:9c:9b:bd:75:76:24:75:
6b:f3:bf:e6:e4:d5:27:5a:bb:ab:2f:0a:dd:38:3b:
a1:db:d8:5d:a0:dd:5e:fa:62:72:da:4c:f7:36:12:
1a:d4:cc:02:6b:53:24:b7:72:7d:41:80:63:8d:2f:
a6:68:0c:4c:df:9e:81:ef:3b:ff:00:7b:b1:02:c4:
a5:3a:8a:bc:05:b5:a0:50:3b:a3:00:e2:1d:de:42:
01:f1:b9:4c:f9:87:e1:aa:3d:2a:1a:90:68:bd:32:
70:ae:96:8d:ac:49:12:34:e4:9e:4e:41:8f:ab:ba:
bd:27:d2:53:9b:5a:99:5e:52:af:70:8f:c3:93:d6:
fa:3b:8a:87:56:96:e0:d2:2f:40:3f:e2:34:a5:0e:
05:64:a3:59:27:1e:86:20:85:8f:78:94:5d:eb:e1:
17:65:10:97:86:9a:04:68:f5:7c:85:dc:45:8d:15:
33:74:28:84:9d:c9:e7:0a:56:a4:e6:07:f2:d2:c5:
e1:b5:a0:d1:85:02:22:d6:32:c6:5c:fd:0b:a1:46:
c2:dd:9b:79:e5:f5:c0:ec:b1:8a:17:c9:53:93:b9:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:6A:E6:F6:DE:E6:A4:6E:81:68:07:C8:37:56:D1:D8:AD:D2:8E
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d2:e6:73:33:5d:0b:fb:dd:a7:31:41:10:9d:24:b9:cc:de:
23:fd:85:17:59:4d:93:e7:92:16:8b:f2:d3:b2:02:38:c7:13:
ec:33:67:9d:5b:56:85:ba:af:a1:ff:d4:30:29:5c:07:8f:2f:
f5:b8:72:b1:a6:d2:54:7c:b9:f4:39:4e:cd:50:58:f8:eb:ad:
c6:67:52:4d:eb:d5:b3:ed:3b:8a:1c:c0:76:d8:45:39:34:ab:
35:12:8e:a6:9b:ae:f4:5e:d2:d9:1e:0f:4b:00:ea:97:a9:82:
d0:ea:54:50:2c:ec:af:e8:4c:fa:06:31:a0:aa:43:1b:24:c5:
c7:9d:22:1d:af:9a:44:5d:c0:14:9d:37:95:cf:9c:64:0d:a0:
08:36:a1:6b:48:fe:b4:80:8b:31:13:8d:56:bc:d8:8a:e3:11:
9f:4e:9b:e6:93:87:d1:5c:53:ae:50:44:05:fe:14:8c:70:30:
33:1b:8f:b3:b5:f6:5b:d1:4f:93:6e:db:8a:21:42:af:ba:d6:
a5:10:d3:8e:56:07:ff:ee:bf:82:7b:96:68:2c:95:3f:db:34:
e3:af:90:22:03:de:2d:ed:a7:e7:d7:89:85:ab:34:3a:c4:09:
38:d2:6f:d1:93:90:e2:78:98:ff:82:6b:73:ec:97:64:1b:6d:
22:07:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:22:20 2025 by rpki-client