Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: gmvRNXhNHtmhtUhTuPuOU18Z3jztUhRiMXpyEFy3aVA=
Subject key identifier: 07:D9:FE:5F:3B:D0:B0:F9:45:49:A2:98:56:DD:C4:95:5B:85:86:36
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 0198D4E02AAF7A3A9C74907E1DED8A6FC6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 051F
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: Pfw6eEOjppLh+T/2xS2V5lmWlOWDpL1yzmdNgq83eko=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2a:af:7a:3a:9c:74:90:7e:1d:ed:8a:6f:c6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=07d9fe5f3bd0b0f94549a29856ddc4955b858636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:b8:eb:87:e4:a4:2f:6a:3c:2e:51:15:ef:
24:f8:d2:e3:03:c1:06:25:8c:c0:e2:bd:62:f6:c8:
36:87:91:bb:f5:d1:9d:cf:76:14:5e:e0:11:bf:20:
e9:9b:82:10:c8:6b:50:5f:89:b6:02:f4:ea:67:bf:
8a:b1:6d:82:aa:db:46:4c:07:6f:54:b1:f4:cd:18:
7e:68:a2:cb:31:98:dd:a9:10:df:2a:87:77:67:a7:
e3:43:c1:48:73:44:6e:1d:9c:28:dd:be:cd:5a:11:
bb:fb:7b:86:fa:86:d5:81:3c:b5:e4:5f:6e:23:db:
8e:d1:e4:ae:38:83:e5:1a:20:36:de:f4:38:0b:f0:
c3:dc:ab:31:de:cd:09:6b:ef:9b:e1:2c:ab:59:2f:
47:f0:a7:37:9d:42:7b:b1:62:70:7e:bf:a8:f3:7a:
8a:f4:4f:1d:07:aa:72:be:c5:c9:b3:e5:b8:25:79:
7a:43:5e:fb:c5:5e:7f:96:b7:64:09:a3:7c:62:d6:
26:0a:d5:35:92:a7:95:6d:5e:ba:b7:09:e3:9c:34:
16:20:c8:79:4a:8b:11:dc:c6:8c:86:4d:55:e6:07:
be:95:fa:fa:c0:c5:97:2e:4e:cb:4e:5b:af:80:00:
3a:1b:a3:89:1e:d5:d4:53:21:30:d4:5d:7a:f6:e9:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D9:FE:5F:3B:D0:B0:F9:45:49:A2:98:56:DD:C4:95:5B:85:86:36
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2d:0b:31:12:64:9e:6c:14:95:64:41:8e:b1:50:6b:0a:05:
59:a9:29:98:b7:72:ba:5e:8b:4d:42:25:9b:26:ee:71:08:b1:
a0:91:85:bf:f2:6f:9e:e6:3f:9d:22:45:98:4f:01:2d:06:54:
2f:2f:5a:ba:67:c5:9c:9f:31:1a:b9:67:29:9f:09:e8:db:89:
a3:b5:af:29:aa:4d:33:c4:81:5d:91:ff:27:7f:b8:ef:d6:ee:
ee:c9:98:e6:5d:a0:0e:93:b3:2b:85:eb:99:8d:58:05:70:a7:
52:31:e5:c1:c1:12:b7:fa:0d:c4:2f:2a:e7:b4:cd:3f:2b:20:
8e:26:99:52:fd:6c:6d:87:29:f4:96:bf:69:32:c4:e9:95:24:
bd:6b:fb:8a:a6:cd:43:28:ca:0b:4c:24:d2:18:15:ba:04:9e:
57:bd:65:fe:62:19:53:99:8d:62:cd:ab:7e:89:48:73:22:76:
3b:48:28:f9:9d:a0:7d:fa:b6:7e:7f:f5:1b:30:09:07:00:f9:
f0:92:ff:ff:78:fd:d4:c7:71:47:a3:35:40:e1:6c:36:8b:19:
9d:1a:40:6d:de:e4:31:9f:5f:43:63:00:52:69:ee:81:7a:e4:
06:07:88:6e:82:1b:72:02:85:b7:37:fd:e2:69:9d:28:9f:9a:
ee:67:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:12 2025 by rpki-client