Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: n0Hcqo2h6Gzjjcssb71vuuQZOLz5G5hxyKuClDFObiw=
Subject key identifier: 4E:2A:AB:90:8C:14:3C:B4:67:E0:CD:F3:8F:F8:5B:9D:D5:22:5F:20
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 019A4EF58F0B9C8DCCA6CA37CCAC92A915B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 1218
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: 9Y0tysDrsZqDp481t5wrmMP2G2T/Gms2PZ3MXBxDOEU=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8f:0b:9c:8d:cc:a6:ca:37:cc:ac:92:a9:15:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=4e2aab908c143cb467e0cdf38ff85b9dd5225f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:2f:5c:aa:48:f0:ef:08:f6:22:da:d4:d9:
17:70:ac:a1:96:f4:51:3c:dc:3c:0a:ca:8e:bf:84:
bd:35:58:cf:99:75:cf:7b:35:e6:e8:1f:4b:01:27:
2b:57:d4:e1:7d:94:07:0e:08:c3:e3:5c:21:4c:e2:
08:3f:8f:d7:49:1c:b6:2f:57:92:2c:85:88:f7:30:
a8:60:3c:ff:83:2c:89:80:ee:f1:a7:2b:16:ea:44:
3a:08:08:e1:bd:36:4f:cd:43:0a:41:4d:ca:b4:2b:
4a:27:dd:0a:87:ed:f2:c1:10:98:e8:39:5d:d6:2b:
d1:55:5b:f3:bf:84:ba:5d:42:8d:62:9c:ec:e7:95:
89:f4:66:1a:3a:93:85:a4:38:df:0c:9d:49:c5:b0:
a8:0e:59:5e:1c:c8:98:cb:08:f1:36:9c:d3:81:ce:
1a:22:c7:57:5f:62:b3:af:bd:db:9a:50:83:78:58:
9b:d8:89:56:7d:87:95:a7:da:40:9b:02:c4:62:e9:
c6:c3:3d:41:43:a9:a3:95:60:be:db:e3:40:34:6c:
87:a2:ab:f4:36:81:b1:b2:10:6c:ba:d8:ec:1e:49:
d3:9e:35:2e:9f:ff:79:45:52:d2:a2:1d:58:79:50:
69:d2:d3:a4:dc:a1:cb:6b:f5:65:92:7a:d5:45:09:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:AB:90:8C:14:3C:B4:67:E0:CD:F3:8F:F8:5B:9D:D5:22:5F:20
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:78:dc:5b:93:98:9d:0d:69:52:03:37:13:b8:4c:8a:fd:2b:
12:58:6a:12:f7:16:d3:0c:c6:d9:72:50:38:e7:25:20:2c:44:
1b:0a:47:92:51:28:c1:85:0d:32:15:92:89:88:c5:36:0b:34:
08:b2:6c:ca:38:62:d1:63:81:5a:7a:d0:a6:8f:29:33:a9:b4:
5f:3b:3d:5c:55:35:84:54:b6:d0:1d:4d:9e:59:f9:74:c5:fb:
42:c9:42:66:14:e5:9b:81:c1:f9:51:95:49:fb:4e:6d:45:78:
c2:c9:43:ee:b8:8b:86:c0:f0:85:d1:3a:10:3e:9e:b4:70:94:
3f:13:30:95:56:ad:70:81:ad:6e:25:45:46:cd:9f:dd:86:63:
0c:99:b9:72:5c:cb:42:d9:64:cf:4e:e1:2f:66:f0:fb:0f:a3:
70:37:8d:31:f8:52:77:d4:d6:7a:b7:b3:da:77:43:24:63:23:
62:f4:4f:f1:a8:7b:55:28:17:42:e6:6c:27:b4:7e:79:c0:47:
ba:f7:c6:87:93:17:58:5e:d6:da:93:14:6a:6c:e6:4a:1e:b6:
4e:34:75:c0:cf:27:03:0f:c8:4b:3c:a8:90:be:2e:95:69:e4:
78:50:33:36:c0:60:db:93:d2:b7:79:75:33:50:f8:6a:b4:55:
b0:a2:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:45 2025 by rpki-client