Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: eXnwlLeFEfP4P7nzt32r7yDf7aTknx4c0biKNKOuq04=
Subject key identifier: 0A:B5:05:A0:DF:5E:0D:47:E2:B6:86:C5:33:58:06:C3:B2:A1:74:53
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019A4E190BBCDC54FDCB4F54571EB365B913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 068F
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: Mf0CJpPZ+tP9NQY5xro76UOW9OJEVssajANwldVbc5U=)
2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0b:bc:dc:54:fd:cb:4f:54:57:1e:b3:65:b9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=0ab505a0df5e0d47e2b686c5335806c3b2a17453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:3b:b6:4a:14:f7:39:5f:62:d1:de:40:cb:
ac:d6:8b:61:b2:fb:e3:84:37:be:a7:e0:81:20:42:
73:72:a9:0b:e1:5b:7a:df:62:f8:57:d3:b1:ad:40:
51:83:31:1d:8c:32:41:0d:7d:f0:8e:db:d8:45:30:
3c:de:b3:47:46:19:fd:eb:2a:84:ba:f6:e4:c3:aa:
73:c9:84:9b:ee:88:6b:74:f1:95:e2:d5:bd:e1:1c:
4a:ea:05:10:5f:29:aa:eb:3f:77:55:e2:2c:2b:c5:
be:03:09:99:57:89:18:b3:84:c3:eb:40:82:dc:b4:
86:c0:b8:b3:0a:06:43:32:52:eb:94:e9:e5:13:7c:
ca:a0:7e:1c:52:bf:43:67:9b:a9:f4:91:32:f1:62:
5a:e1:59:81:a4:dc:2d:f9:a1:c2:7c:9c:af:55:81:
b8:7e:b7:4a:6a:e0:b7:57:c4:3e:2d:f7:c0:ad:34:
d4:b4:68:a5:a2:8c:a6:37:09:d2:29:14:18:a0:67:
6e:07:46:25:fd:1e:fc:9c:e6:95:d8:f0:b6:bf:e7:
9c:eb:ac:99:5e:64:65:a2:e8:b7:fa:34:7c:df:cf:
d7:b0:a8:82:38:a0:da:c7:c3:c9:a5:09:ea:64:fe:
6c:da:33:f9:21:07:16:10:4c:64:87:5d:7f:34:d6:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B5:05:A0:DF:5E:0D:47:E2:B6:86:C5:33:58:06:C3:B2:A1:74:53
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c1:23:39:01:de:c7:61:51:6c:1d:3b:75:69:5c:44:16:a8:
73:13:26:1f:d2:8b:d4:af:a1:b9:8f:8d:50:20:7e:45:07:58:
aa:db:ae:8c:b0:c3:38:90:81:a5:8b:25:2d:bb:b3:5d:6c:8b:
08:10:d8:a5:45:32:af:92:af:4f:93:bd:3e:27:5b:26:bc:58:
6d:00:31:38:97:81:49:c2:68:6f:6b:92:82:82:49:4b:b9:6f:
f8:46:e8:67:4b:55:23:a7:67:b9:c8:fa:0c:77:c4:63:a4:bd:
73:47:97:a2:89:0f:4b:1e:06:1c:6b:e8:d9:36:ca:b3:3a:05:
60:11:4a:15:1b:39:85:2e:23:8d:21:c6:e5:54:e8:fd:fb:39:
97:52:a6:dc:14:51:6b:48:a6:45:bc:9c:b0:64:89:60:48:92:
9e:d4:80:af:56:68:ff:a3:d3:e7:cd:bd:c3:5c:29:cb:35:d9:
ae:1c:80:b8:c7:41:19:d5:7c:b1:15:70:1e:24:9a:c6:34:ae:
a6:83:05:d2:2b:9b:5b:a8:79:a0:19:ea:51:a7:11:cf:cb:e7:
f7:cd:79:f2:ff:cb:df:7c:92:47:bc:a6:e1:b5:bb:d8:57:83:
ea:39:73:85:31:0e:94:9d:8c:a3:6c:78:f9:f1:ba:2b:f5:5c:
67:55:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:00 2025 by rpki-client