Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: 082uzqSshWS997sGb1h2G0Lkq2eom7QugTHz2oHuP64=
Subject key identifier: 57:4D:53:21:6E:15:8D:D6:8E:8D:F5:D0:0E:FC:91:0A:43:90:64:72
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 019A1C19D2023D32BC9C01A4107174DB6601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0BB4
Signing time: Sat 25 Oct 2025 16:00:45 +0000
Manifest this update: Sat 25 Oct 2025 16:00:45 +0000
Manifest next update: Sun 26 Oct 2025 16:00:45 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: yB5PIr6xkHgpRIC5qEsAqkFtgbPSaxQXuWu2UjjgOVg=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:d2:02:3d:32:bc:9c:01:a4:10:71:74:db:66:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Oct 25 16:00:45 2025 GMT
Not After : Oct 26 16:00:45 2025 GMT
Subject: CN=574d53216e158dd68e8df5d00efc910a43906472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:59:77:0f:7a:3b:9c:3f:35:e3:7d:3f:46:
77:42:fb:94:53:1d:38:19:c4:5f:ad:99:b5:6c:30:
76:4e:52:63:0a:92:6d:ca:59:03:3a:b8:c2:c7:63:
71:6b:ed:fb:dc:bb:e2:95:d8:56:b7:04:9e:9e:10:
0e:e4:32:70:7b:92:72:5f:b4:b4:cd:1f:78:48:fd:
24:31:73:4f:0b:16:b8:67:af:93:63:42:4f:b1:48:
06:89:70:3d:20:b3:9c:b8:5b:3a:0e:43:ee:fe:23:
37:91:81:57:40:92:92:82:f9:52:aa:8c:d3:e0:b2:
ff:dc:e0:cf:94:25:33:dd:5d:9a:f4:af:bc:43:0b:
8b:5d:3a:fe:97:03:69:87:82:ac:fd:e9:a8:b1:c3:
fc:81:d4:8c:70:f3:fc:c9:41:5f:dd:14:c9:33:26:
71:20:2b:7d:42:15:65:bb:62:72:17:42:bb:f6:a2:
c9:6b:9e:4b:50:be:f8:1c:e4:e7:51:6c:75:17:e9:
d6:2d:9c:25:aa:a3:4e:ff:82:7d:37:7c:d8:34:2f:
5d:bb:1f:cf:a3:46:74:5f:77:6b:0e:20:d5:00:dd:
6b:fd:a3:d8:74:5d:ef:fb:10:3a:ce:a8:e8:58:9f:
6c:0d:d5:a1:fd:8f:8c:1a:06:6a:09:6c:25:73:4a:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:53:21:6E:15:8D:D6:8E:8D:F5:D0:0E:FC:91:0A:43:90:64:72
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:fe:86:e1:cd:fc:8c:25:92:e9:8e:d7:f6:8c:68:ba:82:24:
b0:d0:2b:31:b1:d9:05:8e:62:48:91:a9:5f:c5:d2:39:64:d6:
7d:2f:94:c7:22:ba:2c:4b:93:f9:a4:4d:7e:da:df:e6:90:16:
e6:bd:24:f4:d3:3f:aa:66:13:da:79:a2:48:ea:cb:9a:6b:f1:
76:55:7b:05:6b:a1:76:d0:ce:1a:9b:75:8f:1f:25:f0:53:cd:
9e:5d:46:e9:5c:7d:43:e0:1c:52:d5:01:63:c5:a0:1a:ff:bf:
12:a9:b7:34:4f:47:63:79:0c:7e:80:11:27:62:58:d4:f8:c7:
1e:68:66:58:15:57:57:a3:97:8c:6b:86:c7:96:3d:f4:48:70:
23:ce:3c:3e:bf:02:48:b2:f3:8c:ba:23:9a:ad:41:69:a2:5e:
f2:0f:41:92:5b:51:cc:54:09:5e:0b:0c:de:9a:69:9e:a5:28:
d7:14:9b:15:16:1e:49:dc:16:dc:0f:8b:0c:fd:6e:4b:4d:d1:
d2:f7:f2:46:4c:8f:0e:2f:02:46:aa:b0:cf:8c:c9:96:61:54:
92:01:7e:29:13:bb:23:6d:89:02:22:69:ed:f9:45:3e:ae:c8:
5b:42:e1:3f:94:8d:ab:7c:11:a3:c4:f5:c5:3c:9b:f4:8d:b8:
4a:ab:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:29:26 2025 by rpki-client