Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier: aeGL/m16b8nePjJr0O9OKZlt4YG7E5Vs/tIS7vBOv/s=
Subject key identifier: 32:AC:06:C1:60:D3:BF:87:CC:EF:78:66:78:5F:97:1E:F7:A8:69:98
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 019A209C8E0E11249F265B9D1C09B5A4EF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 13:02:02 +0000
Manifest this update: Sun 26 Oct 2025 13:02:02 +0000
Manifest next update: Mon 27 Oct 2025 13:02:02 +0000
Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=)
2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: 3iuHHMj//ZgQypP4YeVeTaaELuRU8zdu/YxZ6f8q1bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:8e:0e:11:24:9f:26:5b:9d:1c:09:b5:a4:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Oct 26 13:02:02 2025 GMT
Not After : Oct 27 13:02:02 2025 GMT
Subject: CN=32ac06c160d3bf87ccef7866785f971ef7a86998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:da:75:eb:24:15:52:89:a9:a1:64:6b:d5:
85:c1:88:9c:07:c8:94:26:4a:6d:25:d3:e7:4a:76:
bd:de:22:ff:05:6d:a9:f0:50:1f:ef:d7:90:e0:54:
63:cc:70:18:b1:1f:b1:f7:4e:b3:05:0b:a8:5a:ea:
de:cf:65:29:2e:74:00:98:c7:09:85:ae:87:99:f0:
93:5b:0a:a3:1a:1e:5a:31:3c:df:89:c6:98:e7:59:
14:e7:2c:5e:6d:b2:a7:41:64:d0:17:f6:d2:3a:b9:
4b:d8:32:74:d5:c7:07:4b:d3:b6:55:2d:78:15:fc:
ae:6e:68:c9:a1:2b:1e:ca:93:39:9e:c7:a1:86:ff:
0c:ca:89:58:03:6b:e8:7f:f6:9c:f1:82:a5:bf:2b:
d0:6c:2a:82:0e:84:c7:98:3f:4b:e8:d8:fa:cd:6c:
8d:05:67:d4:63:7a:9b:da:88:64:d1:0d:e8:5b:24:
9c:93:e9:ba:13:f5:e9:1d:aa:b3:4f:a2:76:dc:7b:
88:f6:35:fe:e2:59:9c:b5:18:a3:59:5a:59:df:d6:
f9:0e:1c:b4:c5:d6:97:d3:a3:f9:9c:29:34:8c:96:
01:8d:fc:2c:7b:74:8f:7e:70:ae:16:ab:ac:57:13:
53:69:e3:c1:34:9c:16:05:d2:64:b4:d8:f2:a7:a5:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AC:06:C1:60:D3:BF:87:CC:EF:78:66:78:5F:97:1E:F7:A8:69:98
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fe:78:04:84:ae:f6:6e:31:8e:25:89:1e:a0:b7:ce:5d:39:
34:83:9a:83:67:50:0c:ff:85:a4:47:51:5b:52:0e:2d:8a:7c:
ff:a2:f2:80:c5:c9:60:c7:57:38:c9:f2:f6:d3:c5:5b:da:81:
67:29:27:4b:11:e0:16:8f:9f:f0:65:4b:d1:79:97:6d:c1:53:
38:0c:81:07:1b:44:2c:3b:15:6a:80:2f:33:54:69:f2:2d:8f:
bc:ba:45:52:73:67:ee:d9:7e:be:f0:0e:7f:dc:52:44:bb:cb:
70:77:60:f8:a5:ed:f3:33:3f:b8:bc:4e:a0:f5:f0:ff:2c:c5:
27:29:48:ed:25:74:1c:36:ab:22:0e:80:de:ba:6d:ae:89:fb:
9a:50:6d:e5:3e:78:44:3c:27:af:ab:c6:06:3f:f5:2e:d9:ef:
90:6a:96:f9:f8:c7:1b:05:ca:b8:4b:e0:1e:1d:0b:bc:25:dd:
15:0d:24:58:83:fa:ae:30:aa:6f:15:d5:b3:da:ab:0b:57:c8:
02:d9:4f:a7:d9:8f:b3:b4:ba:3a:ce:80:cc:cc:c8:d2:a0:12:
40:b3:29:4b:53:9d:7a:ef:17:a8:29:5d:e7:94:97:76:d9:80:
b7:05:05:06:83:e7:51:c6:b0:a7:17:6b:28:96:42:a8:f2:a5:
73:bd:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:46:17 2025 by rpki-client