Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File: Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier: GMl0lsqKa6dauSzw3/B0wJPr6GGGW+aSIyqiUYTZcRQ=
Subject key identifier: A5:E1:92:28:B0:BF:4D:13:87:33:99:EB:CF:0D:45:67:7A:7E:C8:69
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 019A4E86583B9D92BB503EB325D01D1ECD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number: 0F96
Signing time: Tue 04 Nov 2025 11:00:18 +0000
Manifest this update: Tue 04 Nov 2025 11:00:18 +0000
Manifest next update: Wed 05 Nov 2025 11:00:18 +0000
Files and hashes: 1: 9WT5lvrUTbcRS85JMSDk2uyrP5g.roa (hash: SuEzhNB8Z7i6RNSDwq8VVK9RN7Pd1DtyYQCtgqjgF5k=)
2: MUzH6xsh7lBrmnntCvAf96p9dnc.roa (hash: EiKpNpruJXWiN5MyW+0u9tVMVSJplWcWZqVPZo/F/5E=)
3: NHMobz5RYRVit9LoY3zWGAN_HOc.roa (hash: tGGn1zlHUoMNuDm6FPTyGRaUtT/oaeGBSOiswtnEYQU=)
4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: 4HGUDKs9d6yTEl3aiwe3gP+av0k8YGXOveWz9htWlUo=)
5: doDyzqqCQoqFs364AYHR_vs_9YI.roa (hash: n0tTCokEp8NBC6AkuYcyF3ZEXZVQKkGkYM93Vv520tk=)
6: exp48BWKUcDXUkG7i2Cr80hvpEo.roa (hash: PxK1jmuTn8+Arb/4EbK+9fd9fS7Yg9Yie0DgOUJDKD4=)
7: sfUsMcIrItn-6M-6LEpHfM2PmZA.roa (hash: kXBXp2wVH8CqH+KGVUIhNcFki1g+gzcxR7XYL4WqFqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:58:3b:9d:92:bb:50:3e:b3:25:d0:1d:1e:cd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Nov 4 11:00:18 2025 GMT
Not After : Nov 5 11:00:18 2025 GMT
Subject: CN=a5e19228b0bf4d13873399ebcf0d45677a7ec869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:b4:c2:da:db:22:50:03:7b:c9:4e:bb:ba:
05:f2:30:e4:cd:9d:3e:b4:58:9a:87:c9:af:11:ef:
e9:63:65:f5:11:9e:24:e7:b1:77:d2:a7:8a:41:b0:
83:97:53:94:c0:30:19:16:c2:c2:40:e5:bc:25:bb:
92:18:2e:70:0f:16:d9:e9:dd:9e:25:50:66:f6:03:
9f:b0:25:3a:5e:da:7a:7c:d8:b5:97:62:f7:4b:91:
2a:5d:46:bd:98:b7:16:be:9e:b8:58:60:15:9b:92:
61:35:cc:b3:ca:a2:57:fb:69:93:68:27:30:9e:dd:
07:63:bd:5d:04:bf:db:7e:46:3d:e5:62:1e:0a:a3:
fe:b4:3b:15:8f:38:99:67:42:c3:e1:02:d9:75:58:
4a:df:9c:38:f6:e1:8c:25:ff:83:af:21:da:4e:5a:
f3:6f:ea:ae:00:fb:4d:40:6d:26:73:9d:80:96:91:
34:f3:0f:29:d0:8f:bb:5c:5c:8c:1b:29:4c:93:f1:
e0:1c:60:9c:9d:2c:83:a6:23:28:d6:4e:cb:fd:33:
16:42:3a:db:23:ce:b0:a3:98:b8:d7:99:57:d5:46:
85:0e:04:77:ea:d7:5d:af:5c:49:8c:d4:a0:b4:86:
1a:b3:8f:34:30:2f:f6:f5:58:05:ca:c6:bc:a6:ea:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:92:28:B0:BF:4D:13:87:33:99:EB:CF:0D:45:67:7A:7E:C8:69
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:05:30:ea:a6:94:86:16:b0:61:17:50:2c:fd:02:03:63:bd:
6e:b8:19:3b:ab:2a:51:a0:f3:e7:12:53:17:cb:d2:38:8f:2e:
57:65:b0:96:af:37:95:08:b8:c7:bb:9c:9a:a7:aa:77:4d:cc:
c5:7d:83:af:a8:f7:e7:83:43:fe:1d:b6:b3:6f:b5:5e:3f:37:
06:b0:33:e1:63:65:0f:e0:cf:62:45:93:ef:fd:ea:17:a5:21:
12:8d:76:4a:4a:87:f9:8f:cf:a2:da:80:dc:0b:41:51:46:5c:
e5:ee:02:bd:4a:97:60:26:f5:39:7d:bc:26:bf:da:ca:73:5a:
8a:53:de:1a:53:7d:bf:8c:0f:4e:80:d1:d7:45:4e:55:10:77:
20:1e:69:81:96:ef:90:fb:43:0b:ea:fd:2e:67:0d:1f:32:ef:
18:dd:e7:f4:4c:f2:1c:3b:f4:1d:31:51:24:41:5f:d8:fd:12:
3c:bc:3b:4a:d7:96:ab:75:e1:9b:92:62:aa:39:94:54:ed:cc:
9d:71:22:56:67:2e:a3:90:38:56:1f:54:2b:a1:36:ce:fc:cd:
dc:75:8f:26:2c:30:84:08:dd:26:e0:73:a0:92:d4:a2:ed:4c:
f6:70:13:df:90:dc:02:44:1c:5e:93:44:f2:a5:8a:b6:91:42:
30:f1:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:15 2025 by rpki-client