Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: svuVIUBn5KyqvwWYHzSwX9x/MQlmCBvsYXuFaRjiS6s=
Subject key identifier: DD:FA:CB:2E:50:FF:1E:9B:FF:F1:72:E5:E2:39:61:9E:35:86:23:32
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019A50E30687B0322F4BB39AB288BF645E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 024F
Signing time: Tue 04 Nov 2025 22:00:46 +0000
Manifest this update: Tue 04 Nov 2025 22:00:46 +0000
Manifest next update: Wed 05 Nov 2025 22:00:46 +0000
Files and hashes: 1: 9yysPrsTvaDRMls4-pX0957dwiw.roa (hash: aqJVPhU1WTAEqvaL619sknSOiWwAlubUTNbFFjISOrQ=)
2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=)
3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: wfNL13A0yvbHQ0CKH5ylLWLQRr/BpxpX0jO8gvpkWCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:06:87:b0:32:2f:4b:b3:9a:b2:88:bf:64:5e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Nov 4 22:00:46 2025 GMT
Not After : Nov 5 22:00:46 2025 GMT
Subject: CN=ddfacb2e50ff1e9bfff172e5e239619e35862332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:f3:ad:23:b5:20:fe:3d:90:99:35:90:1a:
61:fd:2a:9f:96:8f:67:7f:f4:80:6e:19:fc:20:d7:
9b:73:54:ab:9c:b4:86:19:c2:a1:db:b8:0a:0e:54:
ec:0b:87:4c:45:1e:9a:b3:ac:9e:f6:90:fe:e1:14:
61:c1:19:5e:4b:aa:4a:21:16:53:9b:83:3e:30:bc:
26:4d:38:96:f3:79:42:59:f2:5e:fc:cb:6a:8f:ff:
72:77:02:40:ec:03:1d:5b:86:db:31:c1:94:ca:bb:
35:02:e6:42:6d:f2:98:db:73:17:9f:24:83:4e:04:
81:ee:cb:4d:e0:15:97:d5:0a:4a:97:3f:0b:59:62:
08:93:f5:9a:48:17:c8:fb:f8:7c:e7:4c:9e:51:a1:
63:b2:2b:96:8a:b7:d0:21:71:2f:4c:7f:f5:5f:56:
7a:4b:90:53:e8:45:fc:46:aa:a9:8c:80:71:fa:c2:
2d:7a:b0:76:ae:cd:b8:f2:5b:09:38:04:18:c2:94:
2b:dd:c9:8c:8d:07:a7:31:5f:60:88:ba:ed:c9:e7:
eb:12:7e:b1:94:d5:de:61:7d:09:ba:ea:f9:d5:8d:
28:4e:88:9d:74:98:b9:bb:92:af:e9:d5:4c:bf:97:
4d:7c:86:73:d0:62:1e:b1:b0:62:7c:ac:33:86:f2:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:CB:2E:50:FF:1E:9B:FF:F1:72:E5:E2:39:61:9E:35:86:23:32
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:70:a2:0d:3d:22:bd:f4:6e:d4:a3:ef:5a:89:72:d1:c7:74:
c7:6b:26:61:c3:e5:b2:07:49:be:07:d4:8c:ee:20:48:ca:e9:
6d:70:6e:df:37:a1:ca:15:67:82:81:ea:4a:40:2c:75:86:29:
8e:1d:d5:64:ff:e7:6f:38:a5:59:b1:ab:36:e7:96:53:0f:6f:
9b:6f:6e:53:83:52:8d:46:00:48:1a:c3:5c:93:b9:be:db:b7:
04:51:d7:2e:52:f7:e8:d2:fb:4e:1c:d7:f7:e3:08:50:bf:56:
7d:dc:84:d2:68:b7:06:f1:58:c1:1b:1c:92:87:3b:b7:07:6c:
bf:de:ce:ba:a3:db:ec:76:3e:e8:a0:70:b5:b1:05:af:b8:94:
b6:9a:ae:6a:ae:c6:48:bc:35:4f:11:01:66:a8:20:84:e8:50:
88:aa:da:9a:8a:2d:f2:ba:5a:4f:7b:8a:62:26:3a:50:27:7e:
52:37:f3:f2:86:2a:55:6f:b0:fb:b1:90:fd:d9:8a:75:0c:fa:
c3:48:fc:e1:ee:8c:bb:40:ad:cc:19:bf:16:03:57:e3:7f:08:
b7:04:c3:4f:3b:a7:4f:53:d8:cc:fe:62:10:44:d3:ae:c6:18:
19:d1:ac:4f:9b:27:72:a2:8a:05:73:56:67:d8:6c:27:40:d9:
96:ad:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:07:51 2025 by rpki-client