Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: YxrwJOztz6hLXVWqwtc/CKPHBK8uvzvt/6VJ6DXd0B8=
Subject key identifier: 23:24:55:BE:AA:E3:BE:AA:3D:31:DC:A4:C8:D2:20:12:01:B7:26:C0
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 019A503E3775EA07538710B8E74FAF08069E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 151D
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: czq5NEN7ZVPpNvfeMF9qup2p5tWL9UUiOkk0MxZTBGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:37:75:ea:07:53:87:10:b8:e7:4f:af:08:06:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=232455beaae3beaa3d31dca4c8d2201201b726c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:99:9c:a6:2f:7c:ec:76:ef:ba:7e:66:f6:
37:92:30:56:b6:26:71:57:84:9d:99:16:32:d1:d7:
f1:f0:75:ae:05:b0:cc:78:8a:b7:3e:a0:f7:59:a2:
e4:f8:f6:68:88:89:3a:72:f8:51:8c:52:37:2f:68:
8a:94:c5:c8:fc:8f:86:68:c0:8d:5a:f4:1f:ea:66:
a2:f1:ea:c1:8c:a2:0d:8d:c9:08:f7:30:cb:3f:a0:
4b:39:47:ee:b9:e3:57:53:d0:2e:df:61:53:94:1d:
e0:92:d7:6b:e0:d1:1a:db:21:63:1e:f1:8d:3d:d7:
5c:39:a3:96:62:31:c2:74:b9:04:ba:cb:ae:0d:fb:
db:d1:82:dc:75:d1:3a:ed:3e:4b:ea:0d:85:2d:a6:
18:a7:24:8b:96:1f:d8:65:9d:f8:01:85:d6:a1:9e:
b2:a2:b2:ca:cb:1c:fb:8c:64:24:14:57:aa:2e:20:
24:06:e8:6f:a0:02:9e:48:68:4c:10:45:6e:53:4c:
d1:68:ea:f7:58:8a:58:a0:cb:52:4a:42:7d:c8:8f:
d4:6b:b1:33:b7:9c:7b:29:3a:18:de:11:35:22:2f:
69:b9:7e:b2:91:05:10:50:f1:9c:7a:f0:ee:fb:ca:
0c:72:c8:f0:56:a8:fc:46:81:a9:c1:b3:3c:ba:54:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:24:55:BE:AA:E3:BE:AA:3D:31:DC:A4:C8:D2:20:12:01:B7:26:C0
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:90:58:f6:b1:85:7c:be:4f:ff:a5:25:20:7f:c5:75:a4:1f:
d3:d8:8a:0f:a4:7d:13:62:c9:9d:7b:b9:8f:25:5f:b9:3d:aa:
40:78:ea:34:cd:be:5d:38:6e:e3:bd:70:2d:96:a2:bc:b5:68:
de:cc:a2:71:95:14:6d:5f:ec:35:1d:ef:02:1c:fb:17:4b:52:
21:4f:05:e7:00:3d:3d:33:90:e0:42:34:7d:d6:1f:45:f6:91:
80:8e:16:47:7a:5e:40:d6:30:f1:9c:69:f9:12:db:12:0b:a2:
32:65:51:79:e6:70:41:33:4a:f8:f2:5f:69:ab:58:88:1f:6a:
d9:19:6c:97:cf:cc:8a:10:ea:9e:20:74:c2:0c:54:13:6f:f0:
63:11:8e:eb:75:fb:12:3e:70:5a:02:4a:19:01:c2:12:9c:6f:
e5:53:01:b0:c0:13:1c:da:c8:e4:e9:9e:e4:78:ae:95:81:a6:
34:15:fd:bd:7e:0b:58:57:db:19:5e:c8:da:3f:c2:f6:7b:48:
cc:be:e1:d2:92:5d:e8:3e:a2:9b:cf:9c:ff:06:63:d0:6a:54:
84:87:f1:f8:ab:85:8f:6a:d8:ec:01:43:2e:7e:dc:2d:68:ba:
c2:5d:58:11:09:b0:6f:b5:d7:95:52:2b:77:d0:6b:c5:da:e0:
70:dc:e0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:19 2025 by rpki-client