Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
File: Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft (raw, json)
Hash identifier: rbNi95gv2RLJfSFLpO+fFeKQK/M+kMMBwoBz/8aCpIs=
Subject key identifier: 71:00:F7:B0:4A:E1:A7:FA:02:4B:F1:9F:AD:78:06:C0:5B:E5:CA:16
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 019A73011B566BCC2E8A79781F494D1C5019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 13:00:43 +0000
Manifest this update: Tue 11 Nov 2025 13:00:43 +0000
Manifest next update: Wed 12 Nov 2025 13:00:43 +0000
Files and hashes: 1: A6mU_fy2dvWAW9y9y6qPym3VUYU.roa (hash: B8MQ+q91TtenzRFP6rUUzrDHFdogGVA1RdvfKnJNkfY=)
2: CEH26SsbgBXa-XRDjPR4dutITU8.roa (hash: 45+vY3NG1v7bfBUPDZYQRwEM4pvEI9SIrsWhw3tfGJE=)
3: GCgFGIXy9ORAgY5JZtgQnYO84po.roa (hash: uiQ3pF8ZQYiS46PnIMk3tsXyihLlgICHZ4OO1bUgWLU=)
4: Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl (hash: EFiIEUe1Oz6/rnAZdQ4AkxSdbqmzFnW3VdeuA2KckvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1b:56:6b:cc:2e:8a:79:78:1f:49:4d:1c:50:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Nov 11 13:00:43 2025 GMT
Not After : Nov 12 13:00:43 2025 GMT
Subject: CN=7100f7b04ae1a7fa024bf19fad7806c05be5ca16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:38:dc:c0:4c:99:73:da:dc:76:b0:57:04:
08:7c:81:99:f3:86:a5:a5:50:81:b7:bb:fa:3b:4b:
61:df:5a:ac:0c:d7:ac:df:5c:e5:c0:9f:35:55:25:
93:16:b0:98:3e:ee:ea:50:53:fc:77:17:ed:91:0a:
16:56:1b:2b:78:bc:28:f0:41:43:af:43:5d:33:b2:
a6:9d:6f:41:5a:cd:83:e7:a3:e4:60:c5:fc:3f:c5:
1e:bd:6f:68:b5:6e:86:fd:62:1a:76:11:ab:c1:22:
0d:02:7b:67:5b:74:3f:51:e2:94:bf:71:e3:77:88:
22:47:74:cc:e4:30:f0:fb:7c:87:90:20:29:62:67:
71:a8:51:d8:a2:9b:94:66:40:63:32:35:7c:3c:4e:
cd:d6:cd:3c:f2:c3:38:08:12:79:90:00:75:8e:4b:
7b:c3:41:4b:64:1b:15:2d:01:c4:b1:30:c7:f4:9e:
a5:5c:c1:b2:b1:3f:04:08:96:09:41:63:40:2d:e7:
e8:63:6e:a7:c3:48:3f:c4:43:12:da:8c:ec:1f:dd:
94:35:6b:a8:f1:9f:8e:7e:e9:55:78:9f:38:01:e7:
34:38:f1:fb:9d:b1:7a:ab:80:2a:b1:08:a2:b0:67:
78:36:41:9a:70:94:67:ec:cc:b9:cf:aa:92:7f:22:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:00:F7:B0:4A:E1:A7:FA:02:4B:F1:9F:AD:78:06:C0:5B:E5:CA:16
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:64:26:b1:d5:d2:0a:26:09:7c:30:73:a7:b0:0f:82:2e:d8:
9f:34:7d:6e:87:6e:d9:11:9d:c5:f5:5d:88:f4:c1:07:99:c8:
f1:c0:37:1e:45:04:17:05:42:86:1d:96:37:9c:7b:95:97:02:
82:c5:3f:50:24:15:1c:b8:1e:89:76:84:2f:71:d9:7d:94:42:
69:66:5d:36:ad:85:8d:07:21:20:77:8f:4d:fd:a0:11:dc:f1:
ea:07:77:3b:7a:ad:f1:e8:f2:04:7c:e7:b4:f7:84:ee:db:f3:
84:94:0d:97:88:52:6f:c8:1f:97:72:05:81:5d:00:a0:d0:8a:
c5:a1:81:f8:d6:df:ea:7a:99:e9:40:b9:2c:9e:9d:e6:5c:9c:
81:e8:bf:c7:6b:be:b5:71:7f:cf:fc:90:31:29:8c:e4:3a:5c:
81:ff:99:d8:fe:83:c7:76:db:5a:91:06:5d:f7:d4:ab:aa:5d:
5a:d4:f7:bc:79:9a:0f:16:6d:db:b8:fc:3c:90:00:68:a2:4f:
a2:28:bf:57:cd:e0:98:ee:65:02:fa:17:b0:0d:f7:cf:8e:f3:
b9:86:41:f6:b7:7e:fd:ad:e8:e4:6f:63:6f:22:49:b3:d7:59:
74:92:0d:43:81:03:6d:65:be:84:be:d0:82:d3:0e:ad:6c:6c:
eb:7d:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:27 2025 by rpki-client