Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: 26zEwY7Qm8zh17zRRkaMCCpqVUwNLLN71ySU4cc2alA=
Subject key identifier: 25:5F:D5:10:E1:FE:B0:3E:FF:4F:ED:C1:A3:B3:56:A1:3E:63:3E:D7
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 019A32D8B8981F3A4DD58ECB9CBA44C19ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 040C
Signing time: Thu 30 Oct 2025 02:00:55 +0000
Manifest this update: Thu 30 Oct 2025 02:00:55 +0000
Manifest next update: Fri 31 Oct 2025 02:00:55 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: 0AmcTkl086xVk8Qx/A7qTcijnDUbfLjuhdjcm7yPY1o=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:d8:b8:98:1f:3a:4d:d5:8e:cb:9c:ba:44:c1:9a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Oct 30 02:00:55 2025 GMT
Not After : Oct 31 02:00:55 2025 GMT
Subject: CN=255fd510e1feb03eff4fedc1a3b356a13e633ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:af:18:50:ec:5c:2b:2d:8a:1a:bf:ce:4a:bc:
91:2b:f8:e6:dc:b6:52:bc:8a:53:8a:b6:21:65:53:
0c:58:b0:47:53:7d:70:ac:5a:a2:8d:24:a7:3b:2e:
51:66:b6:5d:53:8a:38:7b:d3:32:6e:0c:1c:c7:c9:
6e:9d:2d:4a:8d:40:89:68:3c:c7:37:0d:67:03:d0:
0d:5a:12:f5:50:c5:35:71:b7:42:b7:13:02:37:13:
e6:45:ab:28:27:67:33:c0:97:da:e4:6a:bc:b9:11:
b1:66:f2:4a:c6:c5:bf:15:bd:31:1a:31:3e:fa:3d:
71:ea:08:36:16:64:ea:ec:ce:c6:47:42:cf:90:40:
55:f0:ab:11:fb:85:01:14:aa:26:58:da:0e:df:ba:
a9:97:9a:e0:04:7c:0d:d8:b5:89:23:6e:46:a6:ae:
48:21:3a:93:ca:4e:67:6d:c1:36:21:7b:d3:9f:43:
06:8b:be:d7:60:f5:71:77:3f:f2:12:c6:8c:a4:d9:
68:29:29:f9:a2:3a:87:b0:31:fb:a8:2d:a2:1a:91:
88:45:ad:ab:4e:1c:41:74:07:98:92:2a:6a:4c:11:
a7:99:6f:b0:ca:4e:12:4d:aa:28:86:1f:0c:10:cd:
27:6e:79:3f:6f:a2:d6:9f:f8:0b:51:78:60:8d:69:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5F:D5:10:E1:FE:B0:3E:FF:4F:ED:C1:A3:B3:56:A1:3E:63:3E:D7
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:1e:b8:02:f5:c8:fa:ba:17:6f:75:77:a9:cb:c5:51:26:
74:57:61:8c:91:fc:8f:97:8f:dc:99:29:0e:75:e4:3a:ad:70:
c8:22:e6:b2:7f:e0:d8:c0:6e:8d:b6:92:df:53:95:60:b8:96:
b3:67:c8:6e:ff:09:fc:7d:a4:55:da:73:6c:95:9c:d0:5d:be:
90:d5:d7:b7:f6:3f:59:cf:94:0d:0c:e5:e8:12:4b:fa:8f:cf:
35:13:e6:a2:ce:1f:93:29:f4:3a:4f:f5:e1:d2:4e:a3:37:c7:
eb:cb:80:14:f7:49:b5:7c:4a:6f:ed:ac:23:1c:49:e5:dd:b1:
b1:19:e7:93:41:aa:54:b3:6b:a7:1d:59:2c:b5:87:f6:e6:75:
b7:31:ff:28:7a:a8:fd:9c:4d:f3:62:03:ac:d8:07:a9:49:52:
83:de:1b:af:2a:fc:f0:b8:21:62:4a:c5:c9:09:66:fb:a0:2f:
d6:7a:22:2d:95:ec:b6:a8:60:1b:93:42:ca:e1:30:7f:a0:a5:
8b:db:96:ff:22:b0:f6:9d:b0:fe:05:84:51:24:4d:59:39:09:
a1:02:d3:e1:99:3e:b5:8e:ce:ea:5a:6a:68:02:65:50:21:5d:
71:73:b6:e7:81:f2:72:7e:91:20:f6:5f:d1:ab:83:30:04:62:
47:a7:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:56:36 2025 by rpki-client