Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: DCTqDHs/wPRAs/dX9qx924rfewKmwqDRO3truGC4cbQ=
Subject key identifier: 61:9A:40:B4:AF:C1:33:02:65:08:38:4F:E8:C4:78:87:A8:8C:15:B8
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019A52D147BE109F63707996372815B13390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 0FA7
Signing time: Wed 05 Nov 2025 07:00:38 +0000
Manifest this update: Wed 05 Nov 2025 07:00:38 +0000
Manifest next update: Thu 06 Nov 2025 07:00:38 +0000
Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: oUfSm/9iA7UJQaHd/rzth1zmhG7IO8YaLp/KJAVloO8=)
2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:47:be:10:9f:63:70:79:96:37:28:15:b1:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Nov 5 07:00:38 2025 GMT
Not After : Nov 6 07:00:38 2025 GMT
Subject: CN=619a40b4afc133026508384fe8c47887a88c15b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:a7:e1:02:14:e5:9f:17:a0:46:33:b6:5f:
69:63:0a:0f:4d:59:42:33:e6:bb:02:6f:2b:70:d4:
4e:e5:6d:1e:37:7d:de:7f:7f:99:f0:42:de:4a:23:
88:15:96:67:4b:d3:a8:85:c8:34:32:29:ee:b7:34:
57:4d:18:04:86:83:b0:c5:74:2b:49:16:ff:b1:9a:
5e:cd:d3:af:a4:46:bc:6e:5a:83:b5:21:a8:7e:b5:
9d:ba:0b:53:37:92:88:06:79:31:5d:b8:cb:4c:0d:
64:7a:59:76:c0:31:09:3c:b5:e8:73:76:a6:be:f0:
35:25:fc:6c:bf:3a:78:ca:c7:e6:2d:75:3f:de:16:
24:f3:79:d1:85:67:43:d8:43:e1:9a:e3:87:ee:6c:
57:a4:41:bf:76:4f:79:de:82:30:d2:4f:4d:99:19:
cc:a1:52:6b:35:16:0f:42:7b:a0:43:88:75:ac:c8:
3a:d0:2a:87:69:f5:7d:e3:e6:87:4e:58:d8:69:4d:
78:16:0e:2b:14:34:af:ed:2f:9c:6f:a4:af:40:36:
25:c5:c1:b0:23:a4:3a:9d:43:23:f0:61:a3:9b:a3:
51:b3:36:b5:e5:3c:91:a8:79:d8:1b:8a:72:95:e0:
bb:f3:0f:b7:b6:87:ac:c0:cb:c0:95:89:50:b9:99:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9A:40:B4:AF:C1:33:02:65:08:38:4F:E8:C4:78:87:A8:8C:15:B8
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b8:3f:ef:a6:d4:02:00:53:16:2c:6b:b0:22:3d:30:a7:e2:
f2:28:0a:c3:c3:d2:d1:0c:9c:a5:be:ed:96:57:75:21:24:15:
ae:6a:f7:e3:d3:86:ec:09:77:e7:58:54:44:d1:48:97:4a:fc:
71:ab:27:c9:51:5e:50:42:9a:79:88:a3:b3:18:c7:19:32:49:
c3:0b:7a:07:6c:17:7b:05:1c:65:12:a3:62:2a:11:de:9e:e7:
01:d3:5a:bb:e0:f1:ac:e7:8b:1d:17:ba:57:f7:e0:47:6e:62:
9f:ce:40:f4:f3:00:c5:c0:35:fe:15:f1:dd:77:4f:9e:90:9b:
cf:63:7a:0c:fb:c9:05:ac:e1:98:97:0c:b1:53:c2:e0:a0:3d:
e4:ab:d2:46:1c:7e:0b:b6:81:34:30:35:95:d1:79:ec:96:b6:
41:81:d1:16:c9:bb:c7:9d:29:55:e0:6f:14:58:df:e4:33:cb:
19:67:64:ea:d4:97:3d:6e:3f:93:04:0b:2c:d7:c0:90:39:4d:
5a:84:a5:ee:b7:a4:d0:d5:db:af:72:53:ed:d5:9e:6f:26:bd:
b2:9e:06:e4:f7:de:ae:21:24:a3:0c:58:b4:5c:ba:83:69:ce:
ee:87:50:32:82:2a:74:d6:c3:9e:c3:49:ea:36:50:39:3b:d7:
28:f7:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:21 2025 by rpki-client