Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier: cHOsClKZe7lpu4pd9IVvT6DNxqfeF+Ot+K4m3kn7/w0=
Subject key identifier: 14:E3:0E:94:41:CF:97:CF:7D:3A:D1:D4:25:DB:F4:47:5B:7E:31:ED
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 019A52D1D1E49D70FE613950D4BCDA0EB25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 07:01:13 +0000
Manifest this update: Wed 05 Nov 2025 07:01:13 +0000
Manifest next update: Thu 06 Nov 2025 07:01:13 +0000
Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=)
2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: f4b81LZ4+0SYmk8hB+Epj63Cz+b3w2+dX7Op56iZMSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:d1:e4:9d:70:fe:61:39:50:d4:bc:da:0e:b2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Nov 5 07:01:13 2025 GMT
Not After : Nov 6 07:01:13 2025 GMT
Subject: CN=14e30e9441cf97cf7d3ad1d425dbf4475b7e31ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:ff:27:ab:98:ec:b1:fd:cc:46:66:68:ed:
64:fa:cd:4c:62:71:62:dd:f3:ce:cb:4f:95:02:f8:
9d:61:7d:33:67:10:96:be:cd:d1:21:88:e4:74:2d:
b5:f1:a1:50:37:58:51:4c:fe:b5:a8:b7:2a:a6:ff:
b4:cc:d3:d4:45:80:55:5c:78:15:49:21:8f:4e:bb:
8b:89:98:37:2b:a1:8c:de:ef:30:eb:29:88:c2:d8:
02:52:36:e7:fc:fc:69:ac:76:cd:49:ec:62:ff:1f:
ea:94:fc:2f:e2:56:e3:a5:64:60:2c:57:a8:e7:8c:
9f:d9:f3:60:90:d4:5a:ca:7d:87:99:6e:94:33:8a:
53:1c:28:c1:df:05:98:d8:6c:f4:2b:97:1d:da:4c:
24:d1:05:11:d1:d9:d5:2a:61:e7:85:cc:45:24:99:
74:78:c8:13:a7:8a:ab:24:e3:7c:88:83:d8:40:38:
be:a6:71:51:78:55:df:fe:04:4e:76:27:f2:d8:44:
d7:93:6c:62:9c:23:6d:e4:b2:45:43:5d:99:a6:1a:
4d:36:35:43:b2:f0:a2:29:23:a3:9c:4d:7d:5c:b9:
1b:36:80:c5:f0:77:8f:26:cf:e9:ac:5f:44:33:2a:
8e:c6:39:a4:95:d0:12:8f:be:b3:0a:40:40:07:f5:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:0E:94:41:CF:97:CF:7D:3A:D1:D4:25:DB:F4:47:5B:7E:31:ED
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:27:ec:18:03:f8:6c:45:bb:06:14:b6:25:a3:d0:aa:02:8c:
40:8b:86:c2:43:de:19:30:e3:1e:d2:24:d5:49:4e:67:57:92:
04:2e:98:85:36:19:89:06:68:a1:a8:80:aa:2a:8e:99:cf:50:
cf:1a:7d:ed:28:ac:77:b2:24:20:2a:bc:49:65:fa:32:3d:5a:
b6:c2:3e:da:9a:12:57:10:36:bb:e8:f5:b1:ff:db:06:8d:e6:
90:71:41:f1:d6:b7:1d:9b:fa:36:28:d6:9d:c4:d7:c3:6d:a3:
24:6d:b3:ba:18:45:29:84:59:7a:c4:4b:7c:d1:19:13:01:a4:
8d:da:8a:56:99:f4:cd:a2:00:49:32:48:df:29:a5:df:31:1a:
3d:ac:e7:f9:19:78:f6:fa:14:54:85:24:86:39:27:ae:67:a5:
4e:33:b5:31:bf:ed:62:73:ca:da:21:b0:26:7d:7c:8b:3e:61:
2f:92:ad:f3:bd:f9:8c:6f:8d:e9:8b:8c:aa:4e:e2:10:42:c2:
f6:41:81:b7:80:d7:28:ac:6f:4f:d4:bf:cf:d1:29:ea:6d:a0:
da:7e:09:07:32:da:72:6e:d1:2b:a3:2f:46:bd:47:05:6b:d7:
a6:5e:1e:23:92:6a:3b:2c:ba:a2:32:d6:82:cf:b4:62:0d:83:
f3:47:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:18 2025 by rpki-client