Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: skgqXqZNq0glwhQMCCP2Vcr7j5NAJyJo2CmLEdhbKw4=
Subject key identifier: 66:F1:F2:7C:56:D0:D4:06:85:D2:2E:63:4E:31:D7:C5:C3:46:7F:C7
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 019A4E18E643C478552C4A7ACE7533999227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 09:00:45 +0000
Manifest this update: Tue 04 Nov 2025 09:00:45 +0000
Manifest next update: Wed 05 Nov 2025 09:00:45 +0000
Files and hashes: 1: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: IPfdToMkEZ1HaH+A4eObN8MLfDEz3+grQKWC/vaJaXE=)
2: vICAXNaVi9WpUOInUKGa4x8kVzo.roa (hash: wwadTuvBpX7uW9J+Oei6uXdC+2oxhi7N3s69AlGUoYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e6:43:c4:78:55:2c:4a:7a:ce:75:33:99:92:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Nov 4 09:00:45 2025 GMT
Not After : Nov 5 09:00:45 2025 GMT
Subject: CN=66f1f27c56d0d40685d22e634e31d7c5c3467fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:0f:c4:53:b8:48:90:0a:94:9d:d7:0e:e5:
9e:17:9a:94:2b:9d:09:34:16:9e:63:62:33:42:ba:
80:4c:e2:6a:1a:c5:9e:44:3e:0a:34:9e:57:16:f5:
12:a4:ab:e5:9f:3a:7d:17:7d:9f:3a:e0:91:f4:ef:
84:0f:0c:74:f0:17:ce:21:d1:a8:3f:6a:65:6a:04:
03:87:48:9f:20:47:64:2b:ff:7b:b4:6f:b0:a5:81:
1d:4d:9a:74:74:f0:33:a2:8c:87:19:0f:f5:3a:47:
5f:37:e9:47:0f:31:65:2c:83:d0:83:3b:39:fa:8c:
82:ef:ca:03:41:8e:22:0e:8a:43:32:93:23:2d:24:
89:56:bf:e7:02:d2:8a:c3:f0:1d:76:37:82:7f:ff:
21:82:e5:91:db:3f:2a:d3:1c:07:16:ee:81:cf:e7:
ca:82:0c:da:50:04:2a:23:e6:ed:db:2c:5c:69:64:
24:2b:6d:64:bc:7d:29:f8:25:39:b6:38:eb:08:cf:
37:ac:5e:70:6a:8e:cc:dc:ce:69:ad:31:8b:45:95:
55:44:2a:7b:ce:e1:b4:b9:98:ea:a4:44:96:9a:cd:
66:25:c9:27:d0:63:1b:a4:64:dd:89:ec:90:99:1a:
51:d3:81:3e:b8:65:d1:e1:be:c6:71:63:26:04:be:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F1:F2:7C:56:D0:D4:06:85:D2:2E:63:4E:31:D7:C5:C3:46:7F:C7
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bf:f8:f8:9a:02:21:6f:ca:7c:37:91:07:af:ee:60:6e:5b:
4d:62:e7:f6:bb:28:8b:af:e6:85:6f:57:f7:35:f8:43:06:89:
2b:0b:1c:af:ab:c5:8e:16:76:cc:e9:31:e4:b1:d4:e1:1a:75:
33:e4:d9:e0:17:57:40:d5:46:60:03:cb:14:03:a1:57:9b:f3:
ae:8d:c9:e7:35:4f:d6:38:94:c1:63:68:f6:0e:07:36:e8:79:
a2:92:7b:fa:cb:40:ce:38:e9:4d:17:dc:17:ef:a3:6f:9c:29:
2a:f4:4b:e0:10:df:0f:e3:7e:8f:00:d1:cd:a2:2b:44:ef:d9:
dc:4d:de:ed:40:f9:19:c1:f4:4b:59:84:c7:84:ec:cf:d2:ff:
e6:a9:4f:c5:79:a0:e6:b8:16:fd:25:f6:a7:9c:25:29:b6:20:
b1:6e:e4:cd:2a:77:3a:83:f7:eb:08:d9:c0:c3:7d:4e:a0:2a:
31:d8:80:01:d5:70:10:82:a2:23:16:75:0b:d1:76:5e:22:a7:
1d:28:6f:d6:42:60:04:27:53:ed:32:9e:ad:58:91:e2:89:b1:
a6:6d:c6:0f:86:7a:00:0b:55:65:73:38:6b:44:af:7a:09:58:
a1:01:6f:a0:5b:a6:49:1e:92:9d:3a:2e:7c:55:38:7b:dc:45:
69:76:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:54 2025 by rpki-client