Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: fE7mL2jTmOevmtrjP7HSbNDXEYwVQErSTFi3yivz6GQ=
Subject key identifier: EE:B8:7B:48:B3:A3:7F:6A:A0:0D:14:67:BF:F8:F4:AC:B6:BC:0F:15
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019A1EAC7E1A106774B52BB243ABD8DE1396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 0F8C
Signing time: Sun 26 Oct 2025 04:00:12 +0000
Manifest this update: Sun 26 Oct 2025 04:00:12 +0000
Manifest next update: Mon 27 Oct 2025 04:00:12 +0000
Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: OrpUEKNuFrJOMVBmxA/rj28QbgWYZ8YpLa5u37gFDNk=)
2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:7e:1a:10:67:74:b5:2b:b2:43:ab:d8:de:13:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Oct 26 04:00:12 2025 GMT
Not After : Oct 27 04:00:12 2025 GMT
Subject: CN=eeb87b48b3a37f6aa00d1467bff8f4acb6bc0f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:5e:9e:ff:49:5f:e5:08:d4:69:8a:46:87:
1b:58:d2:63:c9:8a:bb:be:38:a4:00:88:20:d7:86:
7b:d7:8a:f0:59:4e:9b:7f:fc:7c:e6:96:43:ab:55:
60:10:57:af:56:a3:a8:8b:ad:f6:1d:3d:57:9f:00:
8a:39:c6:ef:39:36:fe:96:cf:19:c7:07:95:fe:e5:
47:d2:70:57:4b:2d:f5:54:77:de:4a:a6:11:ff:6c:
3f:87:21:71:8c:ae:e0:85:5c:db:a0:f4:e8:0f:2e:
20:cd:43:61:72:ae:18:de:cd:a4:6b:8c:9b:a5:bc:
87:08:4a:60:b8:a6:6b:e9:a0:97:ac:eb:d7:b7:4f:
d3:a5:f4:6a:2c:e5:f1:90:76:19:8a:60:89:0f:b9:
9a:0f:f0:10:9a:6a:29:0a:63:3b:0d:b7:74:96:66:
b5:95:12:74:1a:18:52:71:6a:98:6c:72:cc:eb:e3:
ef:4d:50:0c:b5:92:de:a3:d5:34:9e:20:62:ff:08:
91:34:a3:2c:8c:fa:84:76:fa:31:8b:d0:fd:51:97:
24:c7:df:ac:22:58:6b:39:99:7a:ba:68:4f:5b:eb:
10:3d:4e:77:31:cf:ee:5a:e9:a3:6b:0b:5a:b9:bd:
21:89:f1:9f:00:60:c7:e2:90:30:b0:3a:80:e9:0b:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:7B:48:B3:A3:7F:6A:A0:0D:14:67:BF:F8:F4:AC:B6:BC:0F:15
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a3:b1:bc:fc:16:99:da:91:50:18:1b:b9:0b:3b:98:47:22:
da:f8:35:d3:59:83:8a:39:85:81:f4:65:d2:85:64:01:2f:26:
47:67:53:9d:95:e8:61:f8:5d:56:cc:9d:0f:12:79:d9:a3:23:
8a:86:d4:5f:92:1b:6b:c6:fa:3b:19:cc:ce:28:af:03:f9:00:
e5:0f:62:d1:8b:04:4a:37:cb:f7:05:53:c8:ca:de:3b:e0:3d:
8b:9b:9a:a2:8a:1b:c7:51:f6:3b:a2:b4:42:b2:22:6e:b7:50:
db:a8:4f:f7:7f:bb:e8:06:48:3b:de:42:57:2d:38:e0:37:01:
e2:0b:09:8e:b5:e2:7b:e3:4a:03:7a:8f:52:f5:20:e5:d4:bb:
c6:fc:3a:38:b7:0a:67:51:32:16:0e:89:8a:78:bf:80:1b:dd:
0b:06:53:d4:8b:73:43:23:93:c7:7e:b2:83:82:10:98:0c:68:
15:25:cb:b8:3c:6f:76:51:ff:0f:65:bc:cb:59:c4:24:3d:a6:
f4:9b:64:36:08:62:f8:fd:d2:aa:6c:5b:78:3a:8c:7c:2d:70:
3a:72:53:59:dd:69:58:ec:c8:c8:5d:7a:8e:07:b7:75:b1:9a:
63:ab:76:21:07:6c:df:c6:0c:b7:c6:d0:02:71:22:bb:49:40:
3f:99:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:20:56 2025 by rpki-client