Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json)
Hash identifier: 1rir1wjgBT3YkZb62DsAvIVeUzLMEgOsjNt2TEMmXHs=
Subject key identifier: EB:22:1A:02:15:FB:DC:FD:7E:46:99:29:93:1C:D9:E7:04:71:3E:48
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 019A725C8E290F07AA1EA6B7CF55081AF81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
Manifest number: 0E05
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: uWygutxGRWI91nqv0NGtU5xOX/YdtI9Ohb+TVYPDplg=)
2: azO-aDRzdJeZXPnkpaxb8BBtrU8.roa (hash: z6om+JaM7Y2eklhyA3h/kaXOgcnoTRDFx+JOSlMYz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8e:29:0f:07:aa:1e:a6:b7:cf:55:08:1a:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=eb221a0215fbdcfd7e469929931cd9e704713e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:76:eb:6a:00:6d:df:36:b6:e5:e1:03:17:
c0:7b:08:b4:de:49:06:1b:32:ab:0a:90:57:e1:e7:
9a:1a:8f:45:5b:fe:f8:07:3f:f3:9a:18:ec:e3:a0:
94:ad:7c:36:e9:d8:c4:b6:d8:28:be:e0:c4:81:cb:
7a:e4:af:66:85:86:77:2b:5d:49:da:ee:00:3e:11:
7e:85:14:84:ca:23:5d:4f:0a:81:8f:52:69:13:d0:
f4:67:bb:6d:67:69:53:ee:f3:52:d6:85:a1:18:72:
d8:fc:69:05:e5:a9:53:6f:2b:49:e5:90:92:a2:1d:
b9:80:0b:fc:d7:15:ec:95:69:17:95:9d:38:e6:bb:
8d:84:d9:06:b7:ee:ae:09:d0:43:f4:13:1a:f4:dd:
fe:66:48:23:f7:cf:e9:f9:84:56:e3:97:fa:b7:93:
81:af:cd:50:81:1b:3b:30:ee:95:2e:b0:a0:19:f8:
09:67:bc:40:a8:3b:2d:70:fa:6f:fe:cf:85:45:bd:
04:7f:16:0e:1f:1c:4b:7a:f6:ed:0e:93:37:96:d3:
43:a4:05:dc:f9:85:71:41:23:c1:5a:69:9c:2c:c6:
be:6b:5f:84:83:e0:c6:f6:2d:9c:4f:9c:78:0d:d1:
5e:d2:51:50:82:db:5f:58:40:56:77:5d:d2:07:60:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:22:1A:02:15:FB:DC:FD:7E:46:99:29:93:1C:D9:E7:04:71:3E:48
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c6:b4:d4:3e:9d:dd:6b:68:6b:53:af:fd:5b:a8:2d:11:cb:
15:83:d7:1d:d5:9e:35:d5:fe:4f:1e:99:eb:f5:f7:7d:78:40:
bb:11:d1:cc:a5:ec:2a:c0:d3:39:2d:09:bf:95:4c:3c:88:0d:
ca:cf:16:42:87:7c:66:b4:a0:9f:39:ca:00:0a:8a:68:03:20:
24:72:a8:da:c8:e9:c7:d4:d7:7a:ee:cb:8c:26:76:6b:4f:7b:
56:77:ac:6f:fe:c3:7e:a0:00:79:74:1b:24:13:67:a1:99:03:
ec:5a:f5:9e:b7:7d:2d:18:62:5c:6e:f3:a9:7c:b3:a1:1b:55:
b7:56:20:4f:74:fb:90:b1:44:01:f2:9b:d4:ea:7e:3a:ae:53:
bc:f5:85:24:c4:e2:fa:b9:1d:0e:13:fa:bf:f9:67:56:e6:27:
a9:58:c1:74:c0:70:4d:a4:a2:6b:e1:f2:3d:b1:3b:e2:59:e7:
64:ba:9b:47:5e:09:64:fc:1a:cf:eb:2a:8b:c9:89:a4:1f:f8:
25:f5:bc:b4:a0:e6:2c:12:82:74:7b:88:b5:b8:b4:66:34:b9:
fc:fc:f4:e4:8b:0a:37:fc:06:ca:84:9b:a5:1c:36:c3:cd:52:
1b:33:57:54:f7:af:b5:c6:39:1b:c8:9f:70:ec:3c:e2:69:74:
e4:1c:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:17 2025 by rpki-client