Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
File: Z1Zd_fZrIS4XodmKf14rCzJkza4.mft (raw, json)
Hash identifier: enBXTZ7eksXEaovBNOW2P5FdJVoxwcRSKt4ex0PYiVQ=
Subject key identifier: 2A:7D:93:B0:37:3E:5B:19:24:61:FB:C3:52:2A:1C:62:56:E2:50:55
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial: 019A0C6F2FBEB8CD53E72B3E652CB0FFF4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 15:00:04 +0000
Manifest this update: Wed 22 Oct 2025 15:00:04 +0000
Manifest next update: Thu 23 Oct 2025 15:00:04 +0000
Files and hashes: 1: OmQLRQDa519JAOcRQ-0IoYAc07g.roa (hash: r2MtseM7TYgvO+fc3i4czAoe5mksWI3VGSC01KSdHT0=)
2: Z1Zd_fZrIS4XodmKf14rCzJkza4.crl (hash: P38cYloOI6O41wiwIppCSSqW2xjnJ3wlI5E/+k2i1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:6f:2f:be:b8:cd:53:e7:2b:3e:65:2c:b0:ff:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Validity
Not Before: Oct 22 15:00:04 2025 GMT
Not After : Oct 23 15:00:04 2025 GMT
Subject: CN=2a7d93b0373e5b192461fbc3522a1c6256e25055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e6:04:72:18:f9:74:9c:88:db:c0:85:e4:7a:
20:8a:c4:55:d7:24:c4:14:91:11:7b:a4:8f:52:4e:
92:b3:70:c6:cf:68:a6:8c:7a:40:27:b4:14:3a:03:
79:ad:62:3d:8f:9a:1c:fc:81:78:50:06:b4:43:3b:
38:7f:03:4d:95:9a:a5:1e:7c:2b:1a:55:c4:36:af:
8e:92:e3:3f:cb:85:d2:01:b7:57:a5:a1:eb:c9:36:
a2:af:65:1d:a2:36:79:77:39:1d:03:f0:79:7b:af:
aa:51:2e:da:a9:c7:7e:21:0d:88:a4:11:2e:39:93:
7a:79:05:90:bb:73:2f:3c:62:31:31:c5:a4:09:74:
19:28:82:86:cd:76:bd:38:b1:c3:90:e3:1b:17:3b:
a2:87:36:fc:26:33:71:82:88:8b:5c:68:d5:51:e0:
38:13:5c:f5:db:96:76:b4:6c:b6:df:49:bf:76:6b:
45:06:ab:c5:05:7b:72:2a:a2:bd:ab:27:f9:ce:fa:
02:22:7f:cd:cf:72:40:da:68:de:6a:4f:dd:fe:45:
73:7a:50:55:a6:6b:96:71:93:a3:c9:72:f3:d4:8d:
35:32:0f:8e:3a:d6:25:1e:39:87:f8:7e:68:59:dc:
4e:b0:31:85:17:72:5a:6c:28:13:e9:b0:7b:e5:0f:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:93:B0:37:3E:5B:19:24:61:FB:C3:52:2A:1C:62:56:E2:50:55
X509v3 Authority Key Identifier:
keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:45:be:ef:13:b3:0e:87:b0:58:5c:b1:c8:54:6a:da:d3:9c:
2b:96:57:a1:f2:ed:0b:21:4e:bc:3d:2e:15:1c:f0:d2:41:bd:
36:cd:16:f5:3f:93:8e:94:d7:92:0d:17:19:26:ab:2f:90:b7:
81:f3:37:f2:3b:a1:4f:06:4b:8f:e5:e7:d7:a5:e6:82:ef:ed:
6c:36:8e:63:8a:87:3e:a8:17:ef:37:95:23:c1:c7:d7:e0:80:
a5:d0:c5:15:93:e9:f1:ed:27:09:7e:a6:aa:c6:f7:c6:18:c0:
3c:10:56:68:9d:00:80:9c:af:cd:5d:f6:53:3f:49:60:de:23:
d5:63:00:82:78:90:70:c2:ed:d8:d7:c4:7d:99:bb:54:3d:19:
47:57:41:8d:12:fb:08:d6:14:1e:fc:86:31:77:bf:fc:01:bc:
69:0d:2e:ed:cf:7d:39:a9:7a:ed:99:0a:ee:27:b8:c0:3b:2f:
dc:5e:ee:ca:96:a6:d5:13:0c:78:74:eb:d8:30:3e:e1:85:c3:
93:5a:cf:22:76:9a:19:ae:80:f4:5d:55:2b:34:a6:2b:0c:ee:
47:8c:7c:29:2a:48:c9:45:8b:99:80:c8:9b:d4:5d:24:45:6d:
78:7d:af:3f:0d:f9:e1:0f:5a:df:1d:a7:6c:b7:e7:e6:4b:27:
6f:dc:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:38:31 2025 by rpki-client