Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: POLqIUS3DnrD1oy4CSOmYGH7rDB60UxgJG20vuAbmIs=
Subject key identifier: CC:4C:CC:B5:2D:6E:F4:6B:6E:6A:72:E1:7D:D1:B5:AD:6D:30:BC:50
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 019A24AED7368A5F964C0AD2FC341AEF2427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 1607
Signing time: Mon 27 Oct 2025 08:00:29 +0000
Manifest this update: Mon 27 Oct 2025 08:00:29 +0000
Manifest next update: Tue 28 Oct 2025 08:00:29 +0000
Files and hashes: 1: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: 5Nayjkl1iM2Yb/AHbleAOd3qkp9R+x30Fim3CRs9Ozs=)
2: lHo6E8O3jVZPWE_3CSGUh-yWmns.roa (hash: EcydcckC44FXLMG0RzB+bDpZsk7fNTw0ZBUYetuTeMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:d7:36:8a:5f:96:4c:0a:d2:fc:34:1a:ef:24:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Oct 27 08:00:29 2025 GMT
Not After : Oct 28 08:00:29 2025 GMT
Subject: CN=cc4cccb52d6ef46b6e6a72e17dd1b5ad6d30bc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:84:4c:0e:db:c4:e4:d7:6a:54:e9:10:4b:
ca:b6:fd:a2:ff:a7:3a:6c:f8:79:f5:6d:5e:85:5b:
e6:25:f1:b4:90:a7:b4:a4:5a:7f:f8:c6:f0:d3:fb:
a8:b1:54:52:15:e6:f1:88:1e:30:78:3a:87:49:a2:
96:d7:5b:d4:87:48:ac:3b:d3:d1:9b:4d:a2:87:6d:
f2:06:6b:91:d8:79:be:24:79:a9:2b:d0:f6:28:3d:
d0:8e:b6:3b:ff:94:92:d2:a8:cd:39:a3:1d:07:27:
54:66:65:8f:1c:7f:f1:5a:42:5e:7d:0d:43:95:07:
69:5f:2b:b0:dd:ec:d8:08:58:55:40:65:37:0e:eb:
55:1d:1c:de:ed:d4:aa:2a:19:40:89:e4:27:d0:4f:
17:73:7b:e3:00:cb:7e:2e:71:d1:85:ec:b4:06:21:
08:dd:e6:bb:28:6a:93:f0:87:eb:8e:c0:9f:12:ee:
1d:6c:ca:73:79:0c:24:cb:f0:fd:56:9d:4d:4e:57:
fc:4c:86:b0:61:13:a4:83:02:12:b0:6d:16:b4:2c:
14:b6:7a:38:3c:77:77:46:53:dd:d9:63:1c:41:32:
8f:29:b4:c6:16:01:25:9a:4a:0f:3a:8b:86:dd:62:
1f:b3:5a:bf:76:2b:6d:6f:5c:5a:a1:94:1d:bb:85:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4C:CC:B5:2D:6E:F4:6B:6E:6A:72:E1:7D:D1:B5:AD:6D:30:BC:50
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ac:76:f8:14:ee:4e:8d:39:74:aa:2e:14:a1:2e:dd:31:c0:
b4:a8:af:9c:97:5c:c1:ce:71:18:26:b9:4f:d3:0c:8d:4c:36:
98:b8:41:16:35:3b:85:5d:a1:cc:c4:06:d2:69:7f:19:a4:39:
d1:6c:cf:91:8e:ba:33:20:17:5c:65:c8:4f:9b:f5:b7:0d:f9:
f2:e8:83:0c:a7:ae:c4:43:08:75:62:6a:96:84:eb:39:70:11:
0e:62:dc:ed:f4:a6:7a:c5:c3:9d:3a:79:84:8d:33:3f:a0:2a:
66:aa:ca:b0:ea:ab:4e:70:2c:ca:11:06:50:12:c7:07:0e:dc:
0e:5a:97:f5:74:e5:20:46:a7:e3:77:58:a6:0b:98:3f:64:be:
0f:83:c3:a5:a5:40:51:b3:64:8e:aa:c9:ac:0e:2d:12:b3:63:
ef:da:32:0d:a6:ae:82:6e:44:8e:e5:d8:c9:ec:b5:44:97:44:
7c:ee:d1:60:ec:81:f0:60:54:84:a7:36:f0:e0:db:58:06:4a:
4e:29:74:07:26:cf:31:31:40:09:ce:2d:59:a9:76:7b:af:87:
12:54:9e:65:3d:be:62:b4:a8:93:0c:a1:ef:7b:5e:15:b9:bf:
60:b4:f2:7f:9e:1e:8a:f2:a4:0e:79:1a:9b:b1:6d:86:32:c2:
36:f9:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:43:06 2025 by rpki-client