Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: Z/n6n8/bYEGG7bdppORQEExEwBq4GUvtWlF5S+iq3r4=
Subject key identifier: 6F:5A:3C:31:B7:C4:AA:A8:68:CB:AB:B8:82:6A:5F:DC:7B:74:C1:07
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019A71B7F4EA458686A1702E297BE8EDB8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0DAC
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: 8ozPWjowMsRvWVZFjXJBoXKHHeSaP5moR5tEAnJdm6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f4:ea:45:86:86:a1:70:2e:29:7b:e8:ed:b8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=6f5a3c31b7c4aaa868cbabb8826a5fdc7b74c107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:7b:8c:97:8a:52:8c:db:02:08:a9:aa:99:
d4:41:85:2a:a8:2e:5f:b9:fa:2f:b3:a2:e5:5d:5d:
cf:71:72:63:26:1a:1f:d6:af:f7:03:c7:fa:a6:9c:
f8:98:d9:21:ae:f9:b5:b0:15:d0:49:2d:53:d4:b0:
be:bf:8c:ce:f2:04:fd:74:82:6d:f2:b0:74:4f:01:
bb:a6:ca:b6:5f:5c:36:bb:93:ca:5e:52:1e:5d:b2:
35:17:fd:06:92:5a:4a:d2:43:0f:7d:09:70:21:2a:
32:f7:10:25:c7:4f:ae:a3:63:83:e5:ee:46:4f:66:
82:22:0a:f5:b3:d7:ab:0c:75:cb:ef:cb:e8:9b:e4:
b1:cd:b6:b2:69:3c:f5:4a:55:f2:03:64:d8:ae:da:
74:af:1e:9f:e4:0a:91:84:df:41:7e:48:7a:5d:13:
32:32:34:af:a4:f0:0d:c9:4b:46:1a:65:74:ac:84:
4d:b1:93:0a:8d:69:ee:2b:4b:ab:63:82:02:eb:fc:
b1:72:16:82:54:1c:37:0d:59:f4:c5:cb:d0:a9:21:
9c:df:b6:02:0a:04:84:a7:9d:20:8f:92:25:c7:9d:
28:06:29:a8:22:6a:46:e9:a5:9e:cf:3d:cd:89:7d:
91:5c:ea:f8:2e:76:25:14:54:37:ce:e4:0a:c5:28:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5A:3C:31:B7:C4:AA:A8:68:CB:AB:B8:82:6A:5F:DC:7B:74:C1:07
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:89:6f:46:70:ef:60:84:d4:1b:ad:26:3b:7f:bf:3c:05:2e:
32:fa:e5:59:6b:80:82:da:a9:5f:56:5f:9f:40:2e:e1:d3:33:
b4:4d:a9:1f:0a:8d:31:33:96:50:89:8d:2b:70:c3:91:d6:73:
f5:77:63:f8:6b:f8:e2:b8:3f:53:ab:28:28:49:8e:03:89:71:
da:38:5c:ac:ff:23:2f:db:3e:58:b0:86:fa:36:98:6a:36:fe:
04:c7:8a:8b:a7:ce:6e:66:dd:2c:9f:c1:18:95:e6:80:1e:62:
11:45:82:8c:d1:3b:5b:b9:e6:93:2d:e2:72:6c:04:b1:1e:fe:
9f:3f:d6:29:da:20:51:57:f5:dd:31:76:bf:c6:3c:6a:ff:06:
da:3a:82:55:c2:0c:47:f6:04:53:1f:7d:cb:0c:bd:9c:64:d3:
af:95:c3:49:ba:e8:21:e8:fc:cf:d2:ab:7f:bf:e7:9d:cf:ad:
1b:62:5b:86:79:23:5d:d5:79:86:6a:81:e8:1b:6a:5f:c4:de:
e5:4f:50:e1:f4:e7:78:dd:cf:4d:e8:c6:e6:c9:d1:b0:dd:91:
60:8c:86:45:3e:c1:b2:86:03:65:7f:3a:82:77:81:27:91:78:
37:aa:4a:45:4b:5b:f4:d7:35:50:73:9a:33:dd:1b:69:f0:3b:
b7:06:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:13 2025 by rpki-client