Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: 0TockWs12fuHRECMMrjC9XsxpiCZc99xMHoZMIZPqhg=
Subject key identifier: 45:1A:BE:3B:D1:2F:F3:F0:E0:35:82:41:8D:8E:56:1C:AD:4C:CB:ED
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019A4EF5D07DAEEB7A6F72CE72E2F2E90E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 0302
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Wed 05 Nov 2025 13:02:03 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: FBrkmBjilwbLBJnER4hq3NJGOPEvg8vHh+H3B1uXTUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d0:7d:ae:eb:7a:6f:72:ce:72:e2:f2:e9:0e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 5 13:02:03 2025 GMT
Subject: CN=451abe3bd12ff3f0e03582418d8e561cad4ccbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:b1:07:af:78:95:be:7f:52:cb:98:e7:2e:
3a:3f:d7:06:c4:b8:1e:a2:26:d9:8e:ff:4d:21:6c:
90:af:78:f6:7c:91:59:34:06:f3:cb:59:b7:ac:0c:
d2:ae:9b:bb:8b:93:b0:96:7e:41:c5:0c:36:6a:93:
ab:c0:ec:b5:0a:eb:3d:cf:0c:d3:0f:f3:ad:02:52:
0e:4b:23:e2:a2:ef:5a:40:e8:3f:b8:17:06:7d:cd:
f7:4d:65:4a:5a:93:84:09:3f:cd:b5:70:85:00:4b:
e6:cf:a1:4f:54:65:90:5d:a8:ac:92:c2:c6:03:81:
d9:03:b1:86:e3:62:89:c4:78:71:66:f2:29:ce:a0:
5d:e0:30:fc:a0:ac:3c:dc:29:57:59:e7:6a:bd:31:
d0:b5:b4:bb:61:28:66:6e:85:8d:3a:3b:a4:5e:f2:
e0:bf:6a:4a:a9:33:e4:7c:a2:2c:f9:aa:65:5c:bb:
75:a3:23:3c:21:49:1d:2c:53:41:46:80:41:07:86:
6a:f9:52:ba:37:4a:d6:fd:b0:87:60:d2:4a:3c:96:
fa:96:99:e3:be:bb:4d:fb:6c:6b:40:36:92:ff:45:
95:92:d8:59:a1:ae:aa:e0:88:ee:4d:f3:f8:f2:1d:
39:7a:dd:ba:3f:61:98:f3:c6:ca:b5:43:f1:30:63:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1A:BE:3B:D1:2F:F3:F0:E0:35:82:41:8D:8E:56:1C:AD:4C:CB:ED
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2a:e7:1e:5e:21:7e:3b:dd:05:7b:48:89:cf:be:01:1c:03:
76:af:ff:fe:7b:83:69:70:55:52:dd:f8:a3:d6:58:c9:1c:08:
e1:4d:2c:d9:29:31:d8:4b:11:bf:5a:c7:62:5f:22:cf:1a:c0:
79:ca:8b:d0:36:8a:31:a4:fa:a3:3b:c9:50:6b:f8:e2:5d:f7:
86:c0:82:1e:4f:61:f2:09:b4:ec:79:01:0c:51:bd:a2:1d:bc:
d5:cb:43:55:a3:ef:29:50:46:76:8c:95:25:c8:ba:ba:2e:63:
a3:94:87:85:02:13:f6:1d:2c:5f:41:fe:e5:b1:d8:d8:6d:48:
38:2d:74:fe:03:e6:cd:8e:b7:ea:c2:6c:5a:e6:e1:aa:5e:4b:
07:3b:56:0c:aa:8c:dc:db:11:be:8e:f6:69:d7:a1:f7:34:80:
21:0d:d5:c1:78:e0:ff:de:5d:82:77:9b:a0:e7:48:1a:df:b5:
b7:6c:fa:97:87:ad:98:26:d3:e9:f4:ca:dd:e6:35:30:b8:21:
ad:50:3e:48:5a:ca:10:fa:a5:3a:ea:dc:eb:a3:1f:d1:4e:ac:
fd:99:ad:24:2f:6d:f8:8b:29:ff:9b:3a:82:24:b6:90:08:91:
ff:9c:a3:2f:34:77:12:a6:c6:81:05:c6:7e:49:78:88:bf:aa:
94:7a:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:05 2025 by rpki-client