Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: Do/IgcCkEiSOONUT/bsS+NdkIzPBZVGIQOJpKBajm7c=
Subject key identifier: CA:95:0C:0D:2B:4A:7A:8B:0C:0E:4F:21:8B:77:49:F8:B4:41:85:BF
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 019A7112AF2F4724004F0CC6E7350EA6A5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 152E
Signing time: Tue 11 Nov 2025 04:00:40 +0000
Manifest this update: Tue 11 Nov 2025 04:00:40 +0000
Manifest next update: Wed 12 Nov 2025 04:00:40 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: 29Pvic876nRRjZdVZx+0g0OsxXuAPPuvJvofyv5C7iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:af:2f:47:24:00:4f:0c:c6:e7:35:0e:a6:a5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Nov 11 04:00:40 2025 GMT
Not After : Nov 12 04:00:40 2025 GMT
Subject: CN=ca950c0d2b4a7a8b0c0e4f218b7749f8b44185bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:0d:91:70:8b:67:af:9d:13:ce:63:b1:6f:
05:a0:f2:15:3d:ef:bb:1d:1f:85:05:1c:2c:7f:27:
8a:16:ab:b8:09:f3:8c:e5:b4:d3:5d:c6:a4:eb:bc:
23:f1:5c:a3:68:c3:e9:e2:f2:97:75:23:9e:a2:83:
58:9a:c3:9b:dc:99:f2:8c:13:6d:51:47:58:24:a6:
39:0a:65:9d:2e:a3:96:b0:98:0e:93:85:87:16:35:
85:1f:de:83:b4:e6:59:17:85:d2:89:4f:93:3c:9b:
7a:cf:22:13:89:06:8d:5f:91:90:04:e9:15:3c:67:
62:f9:42:ec:5a:ec:89:c7:95:76:81:93:97:cf:b6:
6a:3b:be:82:db:c8:8b:a4:61:03:72:88:8e:ba:f6:
b2:d6:9d:6b:27:e6:8f:6c:f1:dd:17:b8:d9:20:51:
db:0c:92:a9:5c:01:f8:1d:a6:31:3a:40:2c:78:43:
1f:1f:96:b3:6f:90:bf:41:63:74:6d:7c:95:2b:cc:
83:6c:51:1d:ad:c1:99:c8:33:dd:82:4c:c4:33:b5:
76:32:29:40:5c:b2:e6:0f:15:a0:ce:b3:61:ad:d2:
b2:6e:07:24:40:26:1c:5b:e0:64:13:2e:05:be:6e:
ff:96:96:75:f9:5f:e5:ed:29:f5:d2:e9:de:b4:17:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:0C:0D:2B:4A:7A:8B:0C:0E:4F:21:8B:77:49:F8:B4:41:85:BF
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c2:1f:37:7a:56:63:41:10:f3:3e:0a:80:59:c7:21:91:59:
53:73:7b:ba:51:aa:21:de:1e:44:66:75:5f:e2:ca:79:d5:88:
7c:b1:cb:3f:e5:e4:c5:6e:47:1f:98:c2:ae:39:28:99:b3:60:
cd:de:8f:4c:cc:00:20:45:a7:cf:4b:58:86:03:66:ba:5e:1d:
74:8c:95:a2:7a:94:d1:d5:e7:84:e8:68:26:0b:1e:e7:f7:66:
14:fe:5a:a5:d0:a8:8c:43:42:ef:05:02:6e:99:cd:56:a6:05:
84:48:f5:45:5f:d1:5f:61:b1:df:ae:a7:26:c6:16:97:c0:d2:
ed:ca:37:75:02:14:b4:d3:dc:dc:30:02:b1:fa:0a:2f:2a:33:
04:fe:10:2e:8c:87:3d:d7:20:ed:c1:38:70:27:ae:97:b0:83:
cf:82:23:74:b3:50:31:fb:00:2b:c1:45:68:69:aa:ee:94:41:
ce:c4:50:f7:f6:56:46:72:d6:6c:9a:29:f4:c4:44:bc:a3:96:
6f:63:73:30:38:23:33:70:26:06:46:1d:be:74:62:35:5f:e6:
f3:11:1e:a1:ce:fa:53:78:43:14:4d:28:18:b0:03:06:65:73:
cb:26:28:a1:dc:36:05:0e:26:55:49:16:5e:81:0e:ac:e7:0a:
f4:28:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:56 2025 by rpki-client