Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: qOd8QgVSuuu9BIBDwcKetlKFh6ZFK0iIrkoXo/DEIlA=
Subject key identifier: BE:5E:3B:21:A3:51:4A:AC:8F:45:77:0D:6E:D0:C1:7B:BF:64:46:7C
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019A22F73A15C11341A0C352F54CA169F055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 00:00:18 +0000
Manifest this update: Mon 27 Oct 2025 00:00:18 +0000
Manifest next update: Tue 28 Oct 2025 00:00:18 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: gjRqiea0bguyTmUNJtIbAULD1F0p5Ape/5yv2BmxQ1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:3a:15:c1:13:41:a0:c3:52:f5:4c:a1:69:f0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Oct 27 00:00:18 2025 GMT
Not After : Oct 28 00:00:18 2025 GMT
Subject: CN=be5e3b21a3514aac8f45770d6ed0c17bbf64467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:6f:b2:4e:4f:64:aa:bc:77:01:ed:e5:37:
cd:e4:7e:05:c0:e3:bb:5e:d5:d9:0b:42:c6:d9:3d:
c1:74:26:0a:fe:77:77:f1:cf:63:38:74:eb:c2:df:
c9:00:a6:0f:4b:99:ae:cd:8f:96:ae:a2:56:33:cb:
91:d7:57:3e:6e:89:01:98:39:e2:99:48:bf:c5:b5:
ba:bc:93:bb:cd:30:60:1d:f4:1c:c5:79:4f:6a:e7:
a8:b4:6c:df:68:1b:65:fb:45:8c:9c:3f:11:f9:52:
a9:65:7c:42:9b:aa:15:f4:e9:60:78:b1:27:ed:5e:
d4:b2:ee:c9:36:ad:e3:b1:c7:4c:7d:80:85:4c:22:
fd:3d:c9:0c:9a:a3:c2:9d:c8:3b:80:dc:02:41:c1:
14:0e:3f:7c:8c:be:5d:9e:e0:23:3c:0d:72:8c:cc:
0c:35:20:f2:19:9d:e4:ed:06:37:a3:cc:8c:e8:83:
a0:99:fa:34:2c:33:c7:db:79:18:e4:dd:39:b2:53:
02:54:72:72:f5:4e:42:b2:dd:f5:b1:1c:ef:d0:47:
a5:00:c5:32:19:85:d5:06:97:01:e2:db:5d:6e:be:
12:14:2b:50:f7:dc:13:b9:d2:30:da:d7:e2:97:97:
45:f9:94:e5:ab:93:bd:c4:a5:a5:02:2a:27:a8:39:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5E:3B:21:A3:51:4A:AC:8F:45:77:0D:6E:D0:C1:7B:BF:64:46:7C
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3e:14:3a:1a:ed:c0:cf:26:df:02:58:5f:9b:6a:eb:2c:b3:
68:61:17:92:53:6a:cd:14:7f:cb:72:14:25:37:c8:34:be:9c:
4f:5b:f2:2e:c8:90:d1:64:ee:eb:0d:31:a4:d7:40:6c:56:56:
bd:d4:cf:87:47:8b:ec:a2:3e:f2:67:1f:4c:5d:9c:f2:a7:79:
02:5e:97:fb:50:67:e8:40:30:bf:29:2e:43:cf:78:46:13:6b:
30:fa:89:b9:1c:6f:ee:1e:72:b2:86:64:aa:92:7d:00:a2:8e:
8b:6b:98:84:82:e4:8e:bd:1d:fa:c0:b2:06:df:04:42:d1:e9:
d9:d5:27:d0:94:94:a0:36:42:30:33:93:cd:d9:cc:cb:20:ee:
87:f8:b6:2c:ad:7f:26:3f:69:e0:8d:9d:a0:e5:e6:42:4e:d7:
92:4b:02:d5:db:d0:8e:28:c8:7b:00:a7:cd:25:f0:dc:5a:03:
81:d0:ff:8b:7c:b5:22:91:0a:c7:9f:1e:cf:1a:b3:db:aa:96:
d9:8e:ad:d9:04:b9:a8:77:42:2b:87:30:23:6b:0d:a6:f2:9e:
c1:bd:ca:9b:a2:06:bf:51:c9:67:f3:59:1e:9e:fd:a1:20:99:
10:a9:9d:8a:c0:42:84:0d:94:8c:29:b8:f3:27:d4:28:f0:79:
c1:9a:55:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:21:06 2025 by rpki-client