Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: FIS+n0FRwsujzRPE8lKOc0b5+AMwtYunloDjjWU3sbE=
Subject key identifier: 87:F4:D9:C8:12:D1:02:F3:B6:3A:47:52:D2:85:AF:BF:B0:E6:44:DD
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 019A4E4F9227A3B2A939465FCCCD27C4575E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0BCE
Signing time: Tue 04 Nov 2025 10:00:28 +0000
Manifest this update: Tue 04 Nov 2025 10:00:28 +0000
Manifest next update: Wed 05 Nov 2025 10:00:28 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: kNFOnhmxbywX9cF1mh0idDrIHPCJnvRltOQeqjjNQbg=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:92:27:a3:b2:a9:39:46:5f:cc:cd:27:c4:57:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Nov 4 10:00:28 2025 GMT
Not After : Nov 5 10:00:28 2025 GMT
Subject: CN=87f4d9c812d102f3b63a4752d285afbfb0e644dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:9f:52:01:90:6e:23:e3:22:13:0a:9b:9b:
6a:ed:2c:6c:cc:ad:c9:07:46:b6:ca:55:a0:67:99:
ed:83:8b:3d:4a:93:c0:d2:99:60:51:c3:e4:a5:12:
aa:ae:d9:e8:25:69:3c:e8:a4:f0:73:cc:aa:3a:6e:
64:8b:e1:e2:07:72:59:2a:96:b0:0c:04:a3:17:d6:
31:f5:13:ff:1f:30:4c:8c:6f:6c:f8:f1:93:10:8f:
b6:42:73:9e:cb:a9:1d:37:08:32:25:44:32:57:5e:
52:74:f0:be:97:89:35:a0:27:64:67:18:4d:c4:f0:
63:19:73:86:1f:9f:6a:87:3d:f8:11:df:1a:cf:e7:
91:3a:2f:70:b8:c1:1f:8f:32:a6:94:ed:88:1f:cf:
a2:84:81:66:69:2f:5c:e5:ec:87:a0:67:c1:88:4c:
05:cc:8f:c7:2c:3e:48:8a:26:45:18:73:39:9b:10:
81:d5:c9:4a:3a:03:06:28:9d:bc:36:46:fa:96:cf:
a9:d9:84:f4:79:2a:aa:3a:d6:e8:90:c9:5e:e9:b3:
dc:f2:17:a9:9f:5b:55:32:be:45:ff:48:b5:06:55:
d8:36:22:e4:e0:cc:4a:2f:1f:7e:25:69:60:3b:f7:
5b:a7:6b:65:e8:2b:d2:ec:f5:0c:d7:c1:7b:0e:ef:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F4:D9:C8:12:D1:02:F3:B6:3A:47:52:D2:85:AF:BF:B0:E6:44:DD
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f2:cd:8e:50:d1:c6:65:71:9c:d8:5e:78:81:50:35:71:8a:
25:49:de:77:54:99:d3:d0:5c:64:31:da:89:d8:43:c1:6e:82:
27:32:59:f8:8f:85:27:97:87:ad:08:13:8d:de:99:1d:29:e5:
3e:ca:47:07:80:72:fa:0a:28:6e:44:23:38:8d:11:0c:64:7b:
2e:de:22:4c:9e:3a:2a:64:2c:a2:be:b4:ba:a7:45:12:86:9b:
64:e5:9c:de:2a:58:f1:0f:fc:78:dc:23:ed:48:79:56:cf:88:
36:f3:ba:84:c3:98:33:88:a0:04:f2:e5:5b:04:f1:24:97:6a:
d3:af:6f:dc:8f:9b:61:cb:02:1b:7d:83:34:22:72:cb:1c:46:
60:76:15:01:e7:4b:41:b8:ed:0a:d3:ac:44:0f:f2:9e:1d:75:
25:ad:23:59:0b:fb:02:73:b2:93:91:31:47:39:e9:3f:88:5c:
5c:74:f6:19:00:80:77:4c:07:c8:a8:a7:b8:ea:56:6d:80:32:
a1:f6:96:d2:bb:fb:58:b4:5c:4d:1d:09:52:cc:ae:b4:b4:d0:
b5:96:16:c4:ff:12:af:7a:66:53:a1:19:15:7b:95:62:70:80:
fc:99:dd:ef:67:51:4a:43:75:e7:3e:6a:93:7b:4e:cd:c3:71:
00:b1:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:39 2025 by rpki-client