Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: efes54dRLPfBj+/2r6o6vlVpIzsa3Yiv7NtusCAcfVQ=
Subject key identifier: B6:EB:F9:D0:60:26:4F:50:EB:AA:33:F6:80:0E:B7:48:97:0A:B1:43
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019A71B88D9AA9BE4EFBA2157E770907A833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 0314
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: RTPuQVLqgq7fCGjGbxcHwbnQrJeiYD9o9+XbWhV0Z9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8d:9a:a9:be:4e:fb:a2:15:7e:77:09:07:a8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=b6ebf9d060264f50ebaa33f6800eb748970ab143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:44:88:ff:e4:3c:87:48:dd:4f:ab:8e:0c:
57:86:47:c0:be:e6:82:de:05:71:9d:8e:c9:cf:da:
8e:77:8e:89:58:57:20:32:e9:2c:4a:e8:39:52:a3:
d5:6e:10:ce:0b:6a:49:1d:84:d2:17:56:43:31:33:
dd:4e:ca:b7:10:b8:32:86:92:f0:9f:9a:9e:db:20:
92:3b:06:de:f9:29:e2:60:f3:75:e6:64:d8:0c:9a:
0b:16:47:78:bf:ff:f0:9b:1d:1e:c1:ff:a8:06:c3:
6a:0f:03:53:97:64:39:4f:c8:32:67:ea:1a:22:cd:
8b:b0:75:2e:d6:3b:89:51:7b:67:a1:39:4c:3f:82:
d8:cd:c8:78:ef:08:0b:b0:45:3c:17:e9:f3:18:cf:
d7:5f:65:e9:01:cf:02:a6:57:32:31:00:78:9a:f8:
d8:04:cb:1a:4e:ca:fe:10:1a:53:19:bb:e7:8a:9d:
d6:8a:4e:8e:b1:13:06:89:ed:b2:be:b9:23:92:66:
c2:1d:0c:40:b2:49:97:33:df:57:a9:09:9d:c1:10:
e7:9f:60:69:75:69:49:9e:3c:34:d3:49:54:65:82:
f8:02:b3:6d:1e:c0:32:3c:41:1c:bc:e8:45:8c:0e:
04:c5:89:87:92:aa:dd:23:a3:55:5c:04:54:b2:35:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EB:F9:D0:60:26:4F:50:EB:AA:33:F6:80:0E:B7:48:97:0A:B1:43
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ea:70:ca:b0:9f:11:a2:33:e0:18:6f:7e:0b:23:23:84:1e:
ac:2b:34:64:24:50:aa:a5:97:3a:e6:fd:6c:f7:d0:19:72:fa:
a8:1f:58:22:1b:79:f1:56:df:58:a1:96:71:a1:e9:c9:d3:9f:
df:ec:bd:89:10:61:ce:a4:c2:c9:45:a1:98:8c:34:16:19:d6:
c9:f8:99:0e:c4:b4:31:be:62:66:88:3f:7a:7c:04:90:34:1f:
d5:63:83:cf:38:7c:3d:e3:a4:35:65:55:99:b5:4d:50:40:41:
3e:f0:8c:bf:66:c2:2d:ec:b2:10:39:69:f0:27:3d:9d:9b:4a:
90:be:39:52:8b:41:e6:9e:96:0f:cf:33:35:f4:e4:53:5a:d2:
07:3c:c3:39:48:77:6c:f8:21:98:db:22:2d:1d:47:b0:2f:6c:
0e:e9:1f:53:b0:6f:eb:36:3d:b1:3a:65:2a:c0:ff:6d:54:2f:
6c:bf:35:31:8e:c4:5e:c6:b0:8e:70:ac:53:83:e0:9b:44:aa:
fb:c8:68:48:4c:36:cc:c0:7f:29:fa:34:4f:77:73:72:44:e1:
2b:cd:c3:fe:64:26:18:61:fd:17:56:56:d8:4b:b3:4d:46:bc:
41:e7:4b:70:0c:36:78:36:3d:20:c8:77:57:13:2f:b7:72:5c:
b1:77:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:12:09 2025 by rpki-client