Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: efxWjYbPA8y1GejwqFCZLHsKB6aj/IGTG7/el9nohhk=
Subject key identifier: 3E:32:B6:F4:6E:D0:1F:96:EF:3E:7A:6E:27:72:07:70:C9:CF:08:38
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 019A71EEAA9F4174863DE805A70B0EEE4E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 0868
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: 0v4Q3A_w9M1p1YcV4-7Pe389fdU.roa (hash: WhKTFW0tZdeh1NFz5izqlimm3sG/vP+EpF9M2Z10RmY=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: g54P2mRKIVkQ6YTl1PRLm4+itioMRzA/ge3MDWdu7sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:aa:9f:41:74:86:3d:e8:05:a7:0b:0e:ee:4e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=3e32b6f46ed01f96ef3e7a6e27720770c9cf0838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:97:52:45:ea:30:09:1d:99:98:2d:3f:b9:
60:0b:5d:b5:92:e6:c3:33:3e:89:55:82:af:57:ae:
07:02:43:07:4d:6a:ff:97:06:2c:9d:e8:3e:8e:36:
78:78:79:30:99:3b:23:3f:58:7f:96:a8:64:4d:d9:
46:12:16:00:a6:d9:8e:d8:c4:e8:69:5b:8c:45:bb:
7b:dd:a2:28:ea:80:8e:d6:19:0c:ca:5c:61:dc:94:
5f:2a:81:05:7a:5b:0f:22:d0:8f:c8:6d:bb:a4:eb:
27:29:88:82:44:d0:e8:fb:66:fb:fa:bb:6f:a3:2b:
47:d7:99:04:db:64:9c:f1:56:3c:47:28:03:70:f4:
c5:4c:c5:2e:ff:79:6b:e4:d3:9e:4e:16:ca:da:70:
d1:cd:46:49:2e:7b:e9:73:e3:53:12:5c:d2:02:7f:
f2:cc:ce:b4:77:7b:e1:a5:21:f4:7b:62:26:3a:29:
dc:87:b3:ab:78:0e:66:a1:2a:ff:58:fb:4c:53:d1:
df:26:b3:93:93:22:c3:2f:54:bd:0f:52:00:b0:91:
92:51:0c:0a:f6:f1:0c:ea:ed:80:63:de:31:6f:1e:
6e:10:02:2b:0b:3d:f8:e4:40:6e:fa:54:b8:df:d3:
80:80:b2:0a:70:06:ed:6e:54:59:b8:63:4b:15:c3:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:32:B6:F4:6E:D0:1F:96:EF:3E:7A:6E:27:72:07:70:C9:CF:08:38
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0a:cd:35:06:79:37:cf:93:b2:b9:ff:0b:f1:c7:95:20:61:
de:f9:3b:76:bf:ab:4d:39:84:b6:92:55:2c:9c:91:9c:3d:73:
29:b3:e8:16:c7:1d:45:e9:90:f8:d7:46:7f:b2:bd:f2:fd:b8:
cc:23:73:07:f5:86:e6:5e:29:ff:ce:43:b7:05:2e:19:04:97:
07:95:d5:28:b5:85:2e:98:00:ec:a8:f7:f2:ff:67:d2:4e:bd:
ff:e2:78:71:57:b1:63:69:5b:27:b6:ae:00:e7:b6:ee:77:12:
4c:b7:5b:8a:10:39:f2:cc:00:4e:a5:02:79:bb:a4:24:d1:b6:
9e:17:9a:67:78:18:5c:90:8f:75:83:31:0a:95:1f:6f:4c:0f:
08:a0:9d:93:93:9f:4f:c6:7d:0a:99:f8:15:b8:e2:8e:08:55:
7b:10:68:c4:69:d1:db:2f:16:92:f5:ad:51:26:6c:ea:79:fd:
bc:b1:87:96:c5:d2:ae:4c:ff:a0:b8:b5:a0:89:e0:74:af:59:
5e:96:56:90:e5:ad:56:39:d4:e0:ad:f8:8a:f5:86:9d:93:3c:
3e:34:e1:96:39:9b:d6:a2:0c:e8:18:7e:f6:62:1f:0e:7b:df:
2b:39:92:e6:14:04:03:29:ff:37:bd:7f:a4:fe:f6:e3:41:08:
e4:79:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:22 2025 by rpki-client