Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: 7GpACLm8mbUfALgDAenDu1XEaNHQ3FnO8hLvSmry2SM=
Subject key identifier: AB:96:C0:6A:57:A9:CE:D8:98:99:7E:E6:EF:C6:31:32:7E:D1:0D:89
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019A4D05B2EF984330D647CC25F069811348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 067A
Signing time: Tue 04 Nov 2025 04:00:10 +0000
Manifest this update: Tue 04 Nov 2025 04:00:10 +0000
Manifest next update: Wed 05 Nov 2025 04:00:10 +0000
Files and hashes: 1: PYhNNzuk9SlKthV_33iOWNORmCM.roa (hash: 8PTIGwrPsJPGQk8kIZHLm7NCCrY0xp7lDA1kLSNWPlg=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: glEuYM3R5UFD+2VkE7N1gPnxEJCdWon1UFDJnVIxrok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:b2:ef:98:43:30:d6:47:cc:25:f0:69:81:13:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Nov 4 04:00:10 2025 GMT
Not After : Nov 5 04:00:10 2025 GMT
Subject: CN=ab96c06a57a9ced898997ee6efc631327ed10d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:e4:bd:44:22:7e:54:9f:7c:f9:72:b0:40:
df:26:d3:b1:84:d2:8a:5a:b4:46:1d:d1:18:56:0f:
6f:ab:67:4a:22:b3:7f:30:e9:2a:46:4e:f5:aa:0a:
2d:16:64:3e:37:55:97:4e:1f:25:56:21:18:05:33:
cd:77:b5:b9:5f:8b:40:93:46:5f:89:84:8b:57:04:
65:60:16:a0:1e:bb:4e:21:83:8b:85:bd:65:4f:bc:
af:03:a4:b2:bf:34:8e:69:95:9f:9b:fe:2d:0c:a0:
d2:ab:9c:28:e9:08:2a:43:25:3d:18:74:5e:fb:f0:
ad:37:ef:9a:81:2d:9b:35:f5:63:68:8c:f8:fc:8a:
58:d4:6f:81:23:50:db:4e:dc:af:4e:1d:ed:97:c7:
72:37:cf:b7:be:23:da:90:22:b7:b3:36:c3:15:3b:
10:5d:81:20:60:c3:56:7e:7b:3a:ae:11:ac:28:b5:
8a:67:b4:bf:38:18:f2:85:a6:e3:6c:c7:e4:86:3e:
ab:47:49:44:2b:3a:89:65:9b:de:c6:3e:d8:9f:a3:
62:0d:e1:51:aa:cf:93:e0:4b:56:41:89:79:d8:ae:
52:3c:e0:c3:9e:db:20:e8:61:3d:09:33:11:4b:23:
7a:fb:96:a0:a6:37:15:34:1c:dd:5f:e0:11:33:df:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:96:C0:6A:57:A9:CE:D8:98:99:7E:E6:EF:C6:31:32:7E:D1:0D:89
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3c:a0:b6:fc:fb:38:02:e4:87:cb:74:42:6f:0c:c0:d3:25:
d2:6c:a9:70:c5:7f:3c:02:ab:15:a8:72:d7:d2:8d:9f:50:28:
09:83:fd:f9:95:92:5a:19:0c:a2:29:74:5b:9f:db:1f:77:a7:
59:9e:79:a8:6c:df:ac:8f:6f:79:b0:ce:fe:55:93:b8:46:41:
aa:a6:d4:ae:3d:e0:27:d0:53:96:a2:5e:6a:64:b0:26:a7:79:
9d:63:36:a9:67:43:c1:61:65:7a:d8:18:f1:94:c2:eb:3f:0d:
e6:ab:47:f7:de:6a:c8:7a:65:a0:28:90:e0:3b:6c:4d:9d:6e:
22:ec:5e:ca:2f:26:55:ea:84:28:e3:b4:50:47:48:27:7c:c1:
af:16:36:1a:fb:35:7c:a6:f9:b9:2e:62:b7:9b:72:9e:8e:e0:
0f:41:8b:cd:e9:a1:f0:cf:5c:7f:65:0e:5c:46:e2:ab:58:5e:
0b:73:2c:3b:71:5c:79:9b:5a:2c:fb:3b:ef:3e:b7:aa:5c:0d:
5b:2e:9e:d8:a1:5c:02:b0:d1:4a:03:9e:5b:e0:b2:3c:8c:05:
c6:98:0f:9a:86:2f:d4:bb:c7:1c:ce:3e:99:55:4f:73:6e:c1:
87:8e:92:f1:fb:b7:3d:70:58:f6:3c:76:e4:47:4f:74:b4:d5:
00:ee:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:52 2025 by rpki-client