Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: txLLnNQJs+KFLhXPUURuGWo1z/1YjRDXLLx0umCFGzI=
Subject key identifier: 48:85:D0:2D:C1:35:60:B1:33:6B:12:3B:46:C2:65:EC:F7:AF:23:FE
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 019A725CDDE2D4B0AA5FC9A42B3AF3294445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0E15
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: GN0+QVQRDhUMmmy8tcU3K7wf+CwdgEAB4WR03YoMiK0=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:dd:e2:d4:b0:aa:5f:c9:a4:2b:3a:f3:29:44:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=4885d02dc13560b1336b123b46c265ecf7af23fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:94:8b:db:26:4d:aa:bb:c0:de:0e:35:52:d9:
7e:8a:98:c7:3a:92:51:31:38:7e:94:d8:87:8a:5f:
fd:5b:2d:c1:a5:d0:dd:d0:45:0b:2a:8a:75:6f:b2:
4e:66:d6:52:b6:5f:30:1d:8f:fb:86:c2:ae:09:43:
fa:4c:01:3b:4a:a2:8e:ad:0f:74:a1:18:fe:df:45:
52:d9:cf:99:07:e5:46:98:0d:67:33:fa:9c:72:6c:
2c:b9:24:8f:c3:79:bc:8a:cb:42:4c:93:30:dc:f3:
ca:60:a7:cf:ef:43:1d:c6:58:28:d7:bf:9e:df:79:
42:a2:fe:b2:26:dc:0e:5d:ea:25:f9:8b:e5:9e:54:
63:a4:a8:4d:a4:8a:fc:f5:b5:21:3a:67:7b:74:ef:
7d:46:9c:fc:d9:78:5a:9a:51:91:21:e1:96:7b:81:
bd:b6:9f:4e:b1:eb:16:2e:41:cb:3b:46:df:ef:68:
62:cb:ae:7e:91:f5:5e:75:01:72:12:b2:93:07:e4:
8f:fe:59:82:62:fa:38:59:b5:ab:c7:38:e9:dc:65:
de:15:0b:ce:24:ba:fd:6f:8b:4b:6d:02:be:a0:e4:
87:51:66:2d:9e:df:45:6f:d9:4a:ff:7c:0e:a8:ed:
f7:c3:55:37:37:08:00:f9:47:66:bc:43:82:a3:c8:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:D0:2D:C1:35:60:B1:33:6B:12:3B:46:C2:65:EC:F7:AF:23:FE
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ff:3a:7d:9d:3f:b1:ff:fc:69:be:3a:c9:59:67:1e:23:fb:
0c:31:80:b3:5b:41:dd:0f:8d:ad:e2:06:27:5c:b9:c1:c4:96:
10:ed:32:51:db:60:1b:cf:d2:a2:8a:1d:51:61:fe:55:18:45:
86:a9:64:35:a7:06:13:82:d0:8f:b3:5d:08:2e:70:68:03:3f:
9f:0f:ce:7d:4e:87:23:6a:78:cf:ec:3d:a0:76:45:bf:9b:dc:
cb:98:67:19:f4:67:88:ed:73:6e:bd:5a:5a:65:08:ac:1d:49:
e7:62:9f:3d:3a:af:ea:48:da:0f:86:0e:a1:9f:4a:5b:c8:c0:
6d:4a:87:d8:4b:19:5f:d9:dc:7b:1f:f5:1c:4a:26:da:de:f8:
13:ae:c2:49:a7:4b:88:b6:a2:4c:02:ae:b6:3b:48:0c:c9:75:
d4:cf:ac:5c:c0:94:26:73:ba:19:ec:20:fe:ed:fc:6b:a4:7d:
59:17:b4:0c:d0:99:00:d8:34:1b:cd:5a:9c:7a:79:20:13:b1:
5a:be:8b:94:06:6d:e2:54:6b:88:e5:96:79:1a:d9:cd:db:49:
91:25:64:68:d6:e0:9e:19:b1:bf:6a:12:22:50:ce:a7:37:ec:
20:e0:01:4e:e1:0a:c5:b8:44:d9:4b:c9:6c:be:e1:e6:6b:97:
4e:da:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:34 2025 by rpki-client