Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: KDwEjQ7GqpR7g8SrStrYHlqwSBgzPh5d9fNtTUYY1nc=
Subject key identifier: A6:CB:81:46:8F:EC:EC:D7:4F:0D:57:16:5D:2E:BC:D8:B4:2B:C1:B1
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 019A25C1980C478BB04A2ADF9BBD8789D027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 05F7
Signing time: Mon 27 Oct 2025 13:00:35 +0000
Manifest this update: Mon 27 Oct 2025 13:00:35 +0000
Manifest next update: Tue 28 Oct 2025 13:00:35 +0000
Files and hashes: 1: tPR9H_DIj2ZRBOQ92V0Cq0cgME0.roa (hash: 04OzE6roqkiLsdkvUp90YsNXVC5oCpySc5tEOrXmoM8=)
2: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: JMW7vytozWLWwhhiCnHLY/x5YXKBnHa3+FlKoABM6sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:98:0c:47:8b:b0:4a:2a:df:9b:bd:87:89:d0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Oct 27 13:00:35 2025 GMT
Not After : Oct 28 13:00:35 2025 GMT
Subject: CN=a6cb81468fececd74f0d57165d2ebcd8b42bc1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:ea:94:fd:06:1d:cd:c2:3a:c0:aa:5a:ad:
53:9c:2e:a4:cc:01:12:99:ca:66:79:67:49:51:9e:
9d:d5:ae:d5:4f:89:ec:79:5b:91:d1:39:93:16:1f:
89:03:61:f0:1d:3d:c1:7e:3a:b6:87:08:bc:df:54:
6d:06:0a:74:6a:24:5a:2b:c9:83:c0:19:1d:e8:1a:
32:b8:a2:3e:12:a4:f5:60:2c:66:7b:1a:46:3f:16:
5c:05:b1:93:62:95:65:d2:a5:c4:67:e8:21:19:47:
27:62:80:d3:8f:84:db:c6:9f:52:d0:13:70:37:b2:
53:ad:3f:4e:d9:5e:fe:27:e7:0a:8f:bc:eb:e7:ee:
2e:f7:b2:cf:7f:53:04:21:6f:65:26:0a:14:09:27:
68:9f:0f:60:92:dd:c7:b7:18:b2:85:5f:42:21:83:
fa:c8:6f:9e:36:75:a9:26:d5:70:eb:06:e5:a8:f8:
45:ef:fe:cc:24:7f:8f:50:d6:38:5b:47:c9:a8:6b:
15:91:2f:6f:34:f5:0e:ed:8b:aa:fe:88:de:eb:e0:
c5:0d:de:98:79:f6:ba:a6:32:89:d9:91:f9:03:20:
56:82:9e:be:de:ce:a3:ce:4f:88:a0:ee:1a:33:71:
e1:54:76:a5:c4:13:91:77:02:40:b5:e9:a3:d7:45:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:81:46:8F:EC:EC:D7:4F:0D:57:16:5D:2E:BC:D8:B4:2B:C1:B1
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7f:97:81:00:f4:0e:72:07:32:13:d8:0f:50:0e:90:ff:d4:
5a:7c:3b:65:74:45:ac:f3:6a:c2:cd:72:85:d6:fe:a3:8f:40:
fc:ef:05:29:41:8f:c8:a3:b8:15:20:05:4d:37:d5:03:f2:35:
c5:d0:49:c9:fe:03:be:53:3e:e3:4d:8b:29:3e:ce:41:39:da:
19:a6:42:d1:dd:f5:08:d3:13:f5:e6:7e:b5:cc:ad:35:4e:01:
39:49:5b:83:63:68:84:70:fe:9e:da:07:08:72:7c:8e:50:f4:
76:44:32:92:ee:6b:e3:7f:24:b4:56:b1:2c:9d:69:8b:7c:33:
b2:10:3a:41:c3:fb:9e:bf:47:a3:33:d4:38:05:dc:29:0d:e9:
e6:6d:02:57:34:7f:ac:2f:69:4d:52:21:6f:e7:d7:5b:ad:ec:
ad:70:b5:16:db:c4:ed:30:53:0b:15:b5:98:7c:c8:89:02:54:
76:37:3c:35:87:1c:31:1b:0e:8b:6e:99:57:26:71:7a:3d:07:
2a:bd:e4:81:f3:e8:f1:58:a2:d2:c5:8c:c2:57:bf:a8:a9:df:
d4:19:61:20:a5:8b:fe:60:bd:38:be:6f:26:dc:ec:c5:ed:9f:
2f:89:aa:de:b4:06:e8:76:9f:87:76:b3:9a:9e:db:da:ac:5c:
29:2e:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:10:24 2025 by rpki-client