Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
File: Z1Zd_fZrIS4XodmKf14rCzJkza4.mft (raw, json)
Hash identifier: i6tKYf/Jbg6Qh8KRNqoUVD2LFlOOJCEcgaW1RqSAYi8=
Subject key identifier: EE:A8:F9:B7:41:29:F9:B1:63:F4:B0:67:91:F7:10:EC:CF:29:59:FF
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial: 019A51F55637DA7DAAE12F8C1CCBE4DE33DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 03:00:24 +0000
Manifest this update: Wed 05 Nov 2025 03:00:24 +0000
Manifest next update: Thu 06 Nov 2025 03:00:24 +0000
Files and hashes: 1: OmQLRQDa519JAOcRQ-0IoYAc07g.roa (hash: r2MtseM7TYgvO+fc3i4czAoe5mksWI3VGSC01KSdHT0=)
2: Z1Zd_fZrIS4XodmKf14rCzJkza4.crl (hash: Jwc8FHR0mNBUBj32pBqjOwq4cNeni/oir0+LqgzdM7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:56:37:da:7d:aa:e1:2f:8c:1c:cb:e4:de:33:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Validity
Not Before: Nov 5 03:00:24 2025 GMT
Not After : Nov 6 03:00:24 2025 GMT
Subject: CN=eea8f9b74129f9b163f4b06791f710eccf2959ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:fe:1d:bf:9a:56:bd:a5:a9:96:7b:30:1a:
7b:54:dd:c4:bf:7e:85:c2:f7:0a:9c:3c:bd:3e:ea:
44:03:79:b3:b5:13:22:c6:f6:b8:64:fc:cc:7d:39:
9f:f6:c8:89:7c:2b:9e:d6:d0:05:51:74:b5:c5:df:
07:9b:aa:a3:21:10:cf:0e:af:d7:6b:e6:69:20:53:
13:a4:08:eb:0d:aa:da:6b:b5:37:3a:3a:77:93:85:
62:df:9a:2d:b5:8c:24:e5:7a:95:66:18:8e:8d:0b:
24:81:9a:e7:55:56:68:29:27:09:41:42:d2:8d:98:
40:d5:77:25:fc:7c:54:73:f2:98:5e:1a:94:20:5c:
79:2e:62:20:49:a2:fd:d6:ad:6d:01:87:15:be:1b:
c9:97:18:86:33:96:2b:2e:b9:c8:37:cc:21:70:79:
d2:32:b8:3e:6e:0e:53:fc:d0:74:d1:5a:8f:5f:67:
57:0a:86:4d:35:af:ab:50:ed:ce:b9:8d:75:6b:16:
49:af:4a:fa:56:70:dc:86:ac:96:42:0a:d5:16:4e:
64:a4:10:0e:1b:cf:72:a2:a8:ba:89:9d:49:7c:e1:
da:fe:6c:f1:98:14:a0:64:82:e0:f9:b4:95:6b:9d:
34:66:47:2f:bf:b3:9f:11:7a:43:65:c6:bf:e9:a5:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A8:F9:B7:41:29:F9:B1:63:F4:B0:67:91:F7:10:EC:CF:29:59:FF
X509v3 Authority Key Identifier:
keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ac:89:cf:ce:1d:01:02:dd:fc:5d:ff:26:0f:0e:80:8f:a3:
e1:6b:21:a7:ad:c2:9d:8a:fc:37:ea:b1:99:8a:a5:a0:4b:cc:
f5:c5:b5:ea:18:a0:29:5a:72:eb:45:e8:49:ce:f9:5d:51:ef:
58:d4:09:06:b8:fa:7e:c0:f2:65:23:47:51:6e:8c:a0:a0:69:
c6:b9:15:3d:4e:18:a6:5a:d6:0b:8a:e0:3a:e2:ce:29:0c:93:
a5:58:d7:2f:7c:3c:b8:05:29:d1:e3:61:16:f6:d8:04:a9:4d:
9f:c7:58:f8:fd:a4:bd:be:84:c0:5f:08:b4:7e:3b:36:5c:b2:
d1:46:ba:51:14:d1:0d:76:5a:bf:34:d1:bb:83:47:fc:0e:c6:
80:c0:fb:2f:78:55:ff:0c:6f:71:fa:cf:87:19:ae:f7:95:50:
6d:8a:94:72:8b:18:17:c1:b7:5a:4e:d4:3b:8b:7a:9b:99:f7:
fd:fd:16:72:44:01:59:0b:dc:84:a7:f9:ec:71:b7:6e:bf:70:
a9:2f:57:dc:3e:90:cf:17:61:d3:d6:00:66:85:92:b5:ed:ce:
66:06:0f:e3:1a:33:a7:4c:43:64:ac:f9:14:47:8c:ca:41:08:
73:6a:e2:fe:c9:7b:cc:4e:cb:ec:2c:4e:c1:dd:5f:9e:3c:9f:
46:ce:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:40 2025 by rpki-client