Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: AlqMIF+nVC96g19V+IlgAqH5WKgEnEF5tAvjKuSKabw=
Subject key identifier: ED:52:DD:29:75:8D:16:34:B5:3E:3E:FB:FB:4A:8C:4C:19:9C:C0:A1
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 019A0BCA7418D86CA8EB1B5A575A1077B5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 0E99
Signing time: Wed 22 Oct 2025 12:00:08 +0000
Manifest this update: Wed 22 Oct 2025 12:00:08 +0000
Manifest next update: Thu 23 Oct 2025 12:00:08 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: JveM1YI3q3oZstDheRkBbZW97b2Ehm+yW3GYtg/cGOw=)
2: sbSQyxPLmKWv0FC39S3HHM2xa6w.roa (hash: u170yX0a6Jii29O1wm6n/a3vhANGyQ5cbWVo8PIFFwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ca:74:18:d8:6c:a8:eb:1b:5a:57:5a:10:77:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Oct 22 12:00:08 2025 GMT
Not After : Oct 23 12:00:08 2025 GMT
Subject: CN=ed52dd29758d1634b53e3efbfb4a8c4c199cc0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:99:c9:e7:09:0e:a3:18:b9:85:d3:b2:f0:
7f:9e:e6:b7:cf:7f:4b:2b:13:bb:e6:c9:d2:e4:17:
66:79:d5:81:95:18:ad:f7:ec:b0:77:e4:07:e9:57:
8b:d5:47:6f:76:71:dd:52:68:37:81:ec:d0:a8:50:
c6:ce:af:19:c5:9d:93:58:57:e0:61:d1:5b:f9:25:
db:b0:b9:d2:78:a1:74:1f:be:05:ba:89:90:46:04:
e8:77:47:19:5b:7e:4e:0f:d1:8f:6c:d2:be:41:b0:
79:5f:63:c1:10:71:66:ad:bc:59:93:81:3f:47:f3:
df:6e:16:86:8c:82:20:7e:a3:1e:be:ec:73:16:65:
e9:1a:de:2b:07:92:5d:92:78:46:26:c5:91:e0:fd:
cf:18:ba:40:05:5d:e0:2b:92:35:ee:2d:ff:05:06:
28:3a:49:80:e0:2a:25:23:63:da:45:e6:e9:8d:8c:
ce:16:90:ca:76:0c:05:bc:b0:5f:f7:61:99:7c:36:
1e:af:ba:26:b4:98:17:b9:c9:50:da:75:ec:76:c2:
38:dd:3c:f4:0f:55:20:0b:ef:80:15:48:b3:93:0b:
79:40:4c:e4:51:58:00:11:95:e2:81:bc:88:a2:49:
80:98:61:d6:36:00:86:01:9c:cc:92:b9:b6:6e:f3:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:DD:29:75:8D:16:34:B5:3E:3E:FB:FB:4A:8C:4C:19:9C:C0:A1
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:db:92:05:c3:76:05:75:2d:c8:a2:92:f0:55:f1:c3:18:56:
20:fd:e0:3d:c6:79:fa:7c:de:fe:d2:45:fa:09:cc:c0:32:a0:
73:c0:86:2c:c5:ed:35:64:73:9b:2d:95:a5:69:e0:6b:18:85:
97:73:ab:b8:a3:bc:21:e3:ad:82:9e:14:c9:79:b6:91:88:ea:
6d:80:2e:75:df:9c:2b:3f:80:77:8b:e3:bb:8c:b9:99:c5:de:
65:36:30:d0:00:1d:8d:05:83:14:68:5f:18:30:23:b7:ab:be:
25:23:eb:62:ac:4c:4d:a2:c8:18:38:48:ce:da:63:3e:b7:50:
35:d0:b2:b2:fa:bd:6b:0e:c3:5a:5d:47:b3:7e:70:24:de:b1:
b7:47:a7:2f:53:83:d7:d0:74:07:9f:bc:b2:a3:c7:d5:59:26:
22:69:be:1d:b0:06:9c:b3:1f:d3:8f:26:b7:33:c5:21:af:ff:
a7:f9:6f:57:4a:d2:46:96:3c:37:d0:84:ed:8e:ee:f6:c5:79:
e0:e6:7d:f6:d1:a8:24:e8:2a:5c:09:46:6c:7b:0b:3c:0a:14:
e5:b1:fa:93:1d:66:60:02:65:cd:8e:8b:37:ea:f5:f2:09:b8:
e6:71:6c:e1:57:ec:63:45:db:3b:56:8c:f0:22:db:0f:b9:fd:
ac:94:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:01:18 2025 by rpki-client