Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: +HgFOErvFsbGnFAhz0QCfOqz0JMoO28bcIuu+prZdPc=
Subject key identifier: 6A:7F:00:80:A9:7F:A3:BC:D9:EA:55:33:BE:07:54:6A:B9:AB:0A:B9
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 019A0D4B97E3C459677E6B5C7835692C60D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0DAD
Signing time: Wed 22 Oct 2025 19:00:49 +0000
Manifest this update: Wed 22 Oct 2025 19:00:49 +0000
Manifest next update: Thu 23 Oct 2025 19:00:49 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: +w9PBjT/77P5iBLpUvpPjQQhs9OKv2SLWD7laEXWD9A=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:97:e3:c4:59:67:7e:6b:5c:78:35:69:2c:60:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Oct 22 19:00:49 2025 GMT
Not After : Oct 23 19:00:49 2025 GMT
Subject: CN=6a7f0080a97fa3bcd9ea5533be07546ab9ab0ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:9c:2d:4e:69:f2:76:76:97:bb:cb:4f:63:
5a:16:c9:4f:ad:03:c4:41:54:7b:b7:d3:42:38:9a:
d1:c8:af:2f:e9:eb:3b:ac:0d:01:93:5e:7d:45:4a:
be:eb:99:75:be:90:52:66:74:02:55:f5:95:02:21:
ca:79:00:b5:70:34:04:44:1c:fc:f9:f8:86:f9:f7:
f5:d2:6c:02:37:8a:a4:62:2e:48:69:c3:c7:0e:ec:
95:7f:80:87:a0:d5:3d:88:64:59:b3:06:d0:e4:4b:
c0:84:d0:68:3e:89:21:40:82:c3:4c:16:e6:3c:38:
c3:07:32:ad:59:29:5b:ca:59:89:0b:0f:1c:db:42:
54:c2:4d:1a:17:9c:75:6e:59:11:35:2f:e3:b3:6c:
04:c3:b0:a7:b0:0c:56:e6:50:81:77:b3:13:a7:21:
fb:b8:a1:b3:58:7f:0a:94:3f:c1:5c:bd:43:a5:5a:
60:e9:43:32:a7:49:68:6a:c7:45:35:28:70:b0:1e:
c7:a6:5b:90:da:f7:55:7c:b2:b7:54:73:25:d2:4d:
16:8a:2d:2e:4d:f4:d6:05:0e:d6:0a:f8:e5:66:2b:
3b:cd:f5:ef:8c:db:13:92:44:d3:d2:97:e3:d5:6c:
18:0d:df:2a:08:3c:e4:5e:0e:6f:ca:17:3e:1a:40:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7F:00:80:A9:7F:A3:BC:D9:EA:55:33:BE:07:54:6A:B9:AB:0A:B9
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b2:1a:53:c7:10:67:af:b3:64:8b:5b:f4:76:41:f5:b0:bb:
68:8a:a9:1b:43:17:71:26:ad:b0:bd:3a:10:3a:4c:77:6d:bc:
12:a6:2c:15:6c:01:4d:82:c1:88:f2:e1:cc:8d:a5:64:01:72:
96:f8:c5:3a:a3:98:4b:83:9c:75:2b:6b:f9:b6:73:2e:29:b5:
fe:80:c3:92:13:15:75:01:84:9d:e9:db:9e:cc:f0:82:7a:5c:
f8:fd:67:43:c4:a3:03:5f:15:bb:da:d2:b9:1d:a2:76:45:3f:
3e:9b:1b:dd:a3:99:6f:d8:18:36:43:02:36:3d:c7:36:3f:09:
32:16:9a:02:8c:f7:32:60:a9:63:f0:18:b6:3f:27:93:37:72:
8b:4d:63:49:8e:d5:9e:a3:cc:00:56:69:3e:79:9e:99:15:d0:
25:73:38:fc:7c:e5:c0:6a:17:27:3b:3b:72:ed:51:1f:48:ff:
ce:9c:33:fd:ce:37:6c:0e:2f:3f:b8:a5:3b:a7:ac:61:a7:65:
cc:97:9b:a9:0f:63:44:07:d5:b9:e6:01:a0:0e:fc:43:b6:87:
a6:0e:5d:11:b1:c6:00:c7:2d:ca:f4:d0:06:5c:17:d2:8c:5e:
45:32:bb:20:39:bc:f7:b9:df:28:35:5c:c0:2f:22:34:6a:6e:
df:ba:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 03:27:03 2025 by rpki-client