Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: eS1l17SFCVCRVLe1jnvx6FZHX8bP62YlN1GaSDr0vrk=
Subject key identifier: F6:C6:26:6D:8D:84:E6:58:A6:B7:EC:D1:6A:30:69:BA:A8:BF:54:F4
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019A16F35BEA99DBAC829DAF961A33B0E251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0231
Signing time: Fri 24 Oct 2025 16:00:38 +0000
Manifest this update: Fri 24 Oct 2025 16:00:38 +0000
Manifest next update: Sat 25 Oct 2025 16:00:38 +0000
Files and hashes: 1: 9yysPrsTvaDRMls4-pX0957dwiw.roa (hash: aqJVPhU1WTAEqvaL619sknSOiWwAlubUTNbFFjISOrQ=)
2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=)
3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: iTmfp6/uOVwMrSF91rURRWO9Xxc0ZMoNY6bJ3w5N6bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f3:5b:ea:99:db:ac:82:9d:af:96:1a:33:b0:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Oct 24 16:00:38 2025 GMT
Not After : Oct 25 16:00:38 2025 GMT
Subject: CN=f6c6266d8d84e658a6b7ecd16a3069baa8bf54f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:ec:f5:ff:95:84:75:94:d7:39:1d:08:06:
f0:ba:43:cf:b3:66:8e:65:7f:68:34:55:24:8d:39:
7b:90:39:ab:a4:b8:7c:7e:ca:13:63:58:a8:aa:8a:
7f:c6:f4:16:cb:36:b0:bf:37:b3:5d:24:3c:61:e7:
0b:6f:91:d6:80:16:fa:8b:28:9a:48:3a:d9:0a:0c:
12:a1:b7:5c:9b:6a:a3:a3:0b:53:27:fa:0a:b2:9b:
7b:b8:d2:bf:07:f5:c3:8b:06:5e:b5:e0:1d:2b:92:
77:8c:7a:d1:4a:13:6a:02:46:45:11:d7:a5:95:c4:
43:d6:90:4f:56:8e:d5:f6:54:0c:83:5b:a3:c8:20:
d8:c2:15:c3:07:8d:34:6e:d7:3a:bf:48:71:be:3e:
b4:bc:dc:30:4a:92:8c:e6:2d:8b:a5:ba:57:9c:54:
29:a7:7b:1c:a9:b6:ee:2f:0a:e8:9c:48:03:ab:8e:
ef:69:0b:55:54:a1:2b:de:33:32:17:b2:f6:c1:86:
34:47:a8:8f:0f:84:fe:11:d7:3a:fa:20:09:ce:bd:
14:c6:de:9b:b6:7b:42:0a:b6:74:49:54:80:47:ed:
d6:d0:ae:0d:8a:a0:87:e3:73:4f:46:1b:d5:46:af:
9e:62:6d:c8:f3:7b:96:d8:08:62:51:0e:75:80:ea:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C6:26:6D:8D:84:E6:58:A6:B7:EC:D1:6A:30:69:BA:A8:BF:54:F4
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ed:cf:ed:fd:f8:7f:06:44:ef:cf:3b:7c:fa:1e:20:fc:b5:
30:d4:98:d2:09:ae:29:44:1d:78:6f:c8:eb:e9:fd:35:02:13:
6a:a9:84:f3:72:d4:0b:df:3a:69:e3:f3:05:70:9c:e4:b6:cd:
85:09:f1:ef:80:fe:44:cc:1c:ea:d9:a0:15:ce:79:a4:03:e4:
9d:b7:00:56:39:10:19:3a:a1:e0:bf:c0:6c:6d:54:2d:34:7b:
24:b3:63:9d:31:7f:c0:48:9b:fa:2a:cc:1e:bd:5e:87:d4:17:
43:1e:ae:26:38:17:6e:bc:e3:c9:5f:61:e6:c2:71:44:3f:64:
cc:92:58:4d:14:59:8d:7c:41:58:79:8d:78:db:74:c2:c6:f1:
77:5f:81:1c:5a:0b:07:f1:10:f8:e3:26:e5:ac:92:a1:d0:97:
a8:83:41:76:e4:62:e7:67:a4:da:1c:c8:ad:e7:2a:0b:eb:87:
9b:4e:90:1a:29:92:67:c8:3a:09:ce:4a:eb:cf:59:ba:9a:6b:
ab:03:fe:49:19:49:2e:c4:6c:8f:8d:c2:cf:55:cc:f4:54:c9:
92:0c:55:7e:23:b7:dc:d0:d2:bf:27:2a:3c:19:45:1e:f3:25:
63:ea:b9:d7:1f:78:4a:cf:20:e4:ce:62:7c:73:41:6d:b3:d3:
0a:90:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:45:12 2025 by rpki-client