Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: AMfKKutv6bTa3OZfB0/hUkzs+NYyVE2ufnuJrs+ko+M=
Subject key identifier: 70:B1:65:36:11:57:9E:94:65:56:F2:25:C5:30:77:2C:6A:81:F1:F4
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 019A1F51CDC605D5569573FD0559E2D301CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 07:00:46 +0000
Manifest this update: Sun 26 Oct 2025 07:00:46 +0000
Manifest next update: Mon 27 Oct 2025 07:00:46 +0000
Files and hashes: 1: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (hash: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=)
2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: E9v8W5yLdLfHM8z/UdqEmzgzJ55t1xM8rm3u9JiwPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:cd:c6:05:d5:56:95:73:fd:05:59:e2:d3:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Oct 26 07:00:46 2025 GMT
Not After : Oct 27 07:00:46 2025 GMT
Subject: CN=70b1653611579e946556f225c530772c6a81f1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:a8:de:73:2d:d0:4c:a0:15:ca:e8:99:cf:
70:ac:3c:7e:bf:4e:15:c5:97:66:d9:0b:5e:7d:ae:
6a:04:a4:f2:d2:29:de:c3:20:d7:1c:de:59:7f:e3:
b3:40:a2:d1:8b:18:32:9f:31:da:f0:4f:9a:06:9d:
93:ed:92:c5:21:8c:d0:e8:a3:c5:be:75:ba:ae:3e:
5c:de:52:b2:a7:4f:5b:56:1d:4d:3d:cc:bc:be:25:
47:ff:df:fe:00:af:ca:dd:cb:5e:8a:c2:2e:ac:ab:
17:b5:b2:16:1e:7d:b0:ce:51:f1:9d:3e:14:96:ee:
79:f6:66:db:39:79:e2:aa:95:a6:f2:5b:d4:2f:d3:
da:35:dc:b3:8e:9e:05:a9:31:f9:ff:68:54:8f:e8:
e4:31:1c:d3:70:c6:8b:18:f0:30:83:55:85:91:08:
65:88:d8:8c:50:cb:a5:13:28:45:57:de:47:4b:7d:
ef:5b:26:cb:66:3a:2b:26:af:7f:eb:b3:aa:45:2f:
5a:f0:13:d2:9e:7e:0e:60:fc:b3:9d:c2:69:61:69:
77:0f:08:8d:70:14:f5:e2:95:ad:65:4e:97:80:e3:
8d:58:ad:d2:a9:7a:dd:18:f6:a8:11:77:7f:a1:15:
38:1e:8f:a1:35:53:a0:8f:73:d0:f3:e6:72:00:1c:
74:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:65:36:11:57:9E:94:65:56:F2:25:C5:30:77:2C:6A:81:F1:F4
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1a:01:7b:e1:9f:94:1d:98:5a:3b:44:02:9e:55:6f:1d:6d:
52:d5:33:f3:b5:e2:66:5d:8d:a9:04:a0:07:76:0d:26:6e:64:
a2:0c:e4:8b:8b:7f:ed:fb:23:9d:3d:8e:bd:13:5d:b1:be:21:
3a:80:b5:d3:10:3a:2b:ee:a5:14:6c:7b:6b:eb:6f:82:24:46:
c0:97:e7:37:c1:3a:a0:42:31:8a:3d:45:5a:7a:b8:e0:5a:c1:
a0:6f:6c:62:ab:d2:14:f8:c8:c1:27:d0:1d:a6:a3:d5:02:d5:
36:73:23:68:02:06:63:09:28:7c:ee:6b:16:88:e0:41:76:8e:
63:2f:4b:9a:d2:9d:6a:69:e5:cb:c5:ca:82:1c:8b:0c:80:99:
85:6c:8f:f9:e8:56:81:79:81:56:68:f2:8c:e3:f1:5c:a9:a1:
9d:7a:73:eb:49:4c:1a:51:2d:65:5e:01:62:b4:2a:1f:0f:1c:
2a:91:3f:0a:91:6c:a8:6b:c2:94:d4:03:55:80:d6:89:44:ad:
4f:aa:4d:a5:5d:94:04:ab:4b:3f:81:c6:e7:14:d8:81:76:8a:
a7:a7:6a:4e:91:cd:70:75:b6:2e:69:a7:0d:91:13:a8:aa:07:
6e:f8:6a:e9:7d:de:16:4a:69:34:13:7a:e1:9f:e2:0e:be:d2:
88:ed:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:26:04 2025 by rpki-client