Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: bYMyWk3KCDPgCtwpa5Fg/sRuUO1kaGV9klNPwyLkfEo=
Subject key identifier: 7E:43:7A:A4:1B:5E:EB:F0:1E:10:6B:41:03:B9:E4:AC:4E:A3:79:08
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019A72CAA13CD9866E1F33CE2C59AB9D5AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 06A2
Signing time: Tue 11 Nov 2025 12:01:13 +0000
Manifest this update: Tue 11 Nov 2025 12:01:13 +0000
Manifest next update: Wed 12 Nov 2025 12:01:13 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: z24l3M5cbd5w5ugLr142wKAppGUvMHts2OcsgDkDD+4=)
2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a1:3c:d9:86:6e:1f:33:ce:2c:59:ab:9d:5a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Nov 11 12:01:13 2025 GMT
Not After : Nov 12 12:01:13 2025 GMT
Subject: CN=7e437aa41b5eebf01e106b4103b9e4ac4ea37908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:ff:48:08:cf:89:a7:04:62:2d:fb:1a:87:
74:28:35:04:28:69:3d:37:fe:52:fe:da:36:4f:e1:
2c:36:df:de:48:ba:02:31:8c:03:be:fb:ca:f3:a6:
c2:fa:2e:65:27:81:fd:c3:02:60:fd:67:90:70:70:
07:3d:58:58:7c:e8:3c:ac:b7:8a:07:f6:29:5e:da:
77:49:11:8e:19:9f:2e:57:1b:ad:86:ea:29:12:5b:
ec:41:fb:31:22:11:d2:2c:18:11:68:7f:4c:3e:0e:
b9:c6:82:c6:60:fa:0a:e8:ef:d7:a8:fb:99:67:fc:
cb:d8:69:02:76:c7:44:6a:d1:e6:e0:99:c6:34:b5:
e1:3f:4f:2c:74:ff:cc:4e:b9:6e:d7:53:c2:92:fc:
f2:15:fc:1e:f3:84:fa:69:e3:1c:96:75:8d:7f:b9:
f0:38:db:1e:e6:bf:6f:8b:55:9a:cf:d2:5d:ca:48:
23:a0:17:c6:27:26:ac:a7:e8:a4:b4:4f:5e:de:ce:
78:57:63:a1:ab:ef:08:e9:49:1b:61:4b:ba:41:fa:
f3:c5:62:28:15:90:7c:db:22:3c:7c:a3:3c:78:cc:
a7:41:8f:bc:ec:d4:3a:6d:1e:25:84:81:68:ca:22:
b3:51:55:83:b8:cb:79:86:4a:fc:4c:c1:ab:b4:57:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:7A:A4:1B:5E:EB:F0:1E:10:6B:41:03:B9:E4:AC:4E:A3:79:08
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0e:dc:4b:dc:6f:47:43:30:11:fc:5b:24:1c:22:3d:92:1a:
6d:7d:9e:59:ad:10:b9:d0:5c:8f:e1:4c:79:bc:0c:ce:81:a0:
ad:fd:25:e8:e9:3a:2c:8a:71:22:c3:c0:48:38:30:7d:27:61:
bd:b9:62:44:04:6f:e5:e1:33:98:c4:0f:66:3f:30:30:c6:3f:
a3:7d:62:50:bf:1b:86:74:76:1b:e3:7e:03:ff:01:07:00:01:
33:db:21:ba:94:98:75:14:5e:89:76:13:91:4d:9e:94:47:cf:
d0:b5:f5:28:86:15:2a:3b:74:ea:e4:f8:b7:d2:72:16:05:dc:
56:21:1f:f3:13:d3:68:bb:92:fc:d3:d6:5e:2c:8b:4d:e1:ce:
c2:29:84:2f:f7:39:72:dd:9c:23:17:6b:cb:f1:fb:1c:81:9e:
cd:93:a5:70:ad:0c:40:ec:09:59:c8:f8:89:f2:3d:67:22:0f:
dc:b5:47:72:3d:1a:2b:a0:ff:58:df:7a:4e:10:87:8e:d2:6b:
a5:6e:2b:78:ad:56:8c:0c:14:27:84:1f:73:8a:cd:30:59:9f:
b0:82:9e:d9:cf:74:0b:0f:46:ec:7f:f6:00:16:27:d0:aa:6a:
0d:98:3f:25:3b:d6:97:cb:df:ba:83:30:54:10:b6:f9:b7:de:
6f:cb:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:09 2025 by rpki-client