Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier: Q5yAlHQNnZWbZmJi42t0vbyrZ/tZnGMaP3E39AEk3Ww=
Subject key identifier: 59:80:A3:2C:C2:46:45:53:37:0F:AC:D8:95:2A:BD:96:30:8E:38:7B
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer: /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial: 019A71B8A2709A8851B70107D6503D4BD19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number: 067A
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: zARmzHjJv/8BxkenA3EQyGNLX6wSuZHv7HJZAVkslQo=)
2: nK_HCXY32Fzl4tvEIKTBph2J1Ds.roa (hash: Q85T1yXG2eaPvyBQfWAsYo6WtcGYElCI5jZL6LC33r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a2:70:9a:88:51:b7:01:07:d6:50:3d:4b:d1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=5980a32cc2464553370facd8952abd96308e387b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:72:8d:7b:39:9b:80:ab:bb:4d:d1:5a:2e:
bd:1b:d8:a0:88:1e:4e:2b:ba:b5:65:dd:49:2a:2a:
3e:18:b4:56:10:ff:b4:08:d0:7a:0b:93:27:b1:1d:
03:de:c2:4e:40:31:1c:17:aa:5d:ab:ec:7a:11:2f:
1c:27:95:8d:4c:e6:24:2f:54:50:4b:0e:ef:c7:de:
ca:f9:21:29:e8:3b:b4:52:b9:a9:91:ca:66:ed:aa:
44:02:16:16:9e:24:b5:b6:4d:bf:ac:12:2b:a8:9c:
56:64:b4:f9:47:b4:c2:87:1f:fa:c9:68:5e:b7:4b:
74:77:e1:c2:b2:95:65:eb:24:b4:d6:43:2f:3c:50:
0c:49:45:f8:4b:c4:b9:3b:9c:d9:eb:e5:82:f1:db:
6a:72:b6:84:ab:5e:29:04:21:94:82:99:0b:a7:1e:
95:84:d2:6e:2f:e7:71:87:10:2c:42:d5:75:80:74:
33:97:be:d7:41:4e:fc:2b:73:13:3a:1c:fb:8b:c6:
4f:e4:8e:62:0b:c8:b2:10:3c:1f:d5:ea:be:53:81:
f4:cc:95:47:bc:6f:b7:17:b6:47:46:de:35:43:de:
a4:b1:21:25:43:ef:9a:35:93:3d:e3:cd:d7:1d:58:
7b:35:b7:53:e0:c1:34:10:dd:3f:97:fb:dc:ba:4d:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:A3:2C:C2:46:45:53:37:0F:AC:D8:95:2A:BD:96:30:8E:38:7B
X509v3 Authority Key Identifier:
keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:18:9c:65:dc:b0:d1:45:e6:5b:49:6b:6b:68:f0:07:cb:d4:
4f:3b:02:94:36:d2:67:73:db:2a:72:d1:0e:77:a2:95:8e:5c:
0a:ce:af:47:ba:59:4e:bc:4e:85:73:da:3a:03:d8:4f:e6:38:
09:d1:c0:b4:1b:64:bc:68:79:4d:06:5b:32:ea:db:56:5e:3f:
24:f3:43:22:d4:b8:d1:aa:86:7a:56:6b:88:2d:35:57:0e:c3:
a2:78:c7:38:eb:de:90:f1:29:9e:ff:53:ca:d6:d6:74:cb:50:
d8:3e:63:95:af:f6:cc:0b:97:2c:11:96:17:ca:43:2c:4d:9b:
70:32:ec:3e:18:55:3c:53:12:52:9e:8a:4e:b4:ec:a0:aa:ec:
cb:8b:6e:d7:27:0e:42:52:54:28:6f:a8:75:4c:b0:f7:a2:e8:
8c:76:58:ff:de:ec:61:8d:47:32:45:e0:d0:0e:80:e6:ac:07:
38:7c:98:6d:22:40:91:39:ea:68:c8:a3:ca:fa:e1:e5:3d:1f:
88:41:38:c8:e5:06:e3:f6:87:2b:38:90:6b:25:51:98:37:27:
2d:f8:a4:52:fb:fc:bb:5a:e7:ee:32:a2:5b:11:a5:ca:5c:3c:
a2:4a:f9:2b:ab:a7:c9:7d:95:84:7a:d3:0c:ed:5a:59:7b:61:
9b:a3:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:21 2025 by rpki-client