Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: 3QGELgwylB7hKTycs6g9JtD7uorM4KjMzLJ118clyYQ=
Subject key identifier: 91:82:47:05:F8:D1:DB:76:36:01:A0:DC:94:60:89:92:EE:3C:FC:0C
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 0198D473A8D6277426FF7829778F4B3E3F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 018A
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: 9yysPrsTvaDRMls4-pX0957dwiw.roa (hash: aqJVPhU1WTAEqvaL619sknSOiWwAlubUTNbFFjISOrQ=)
2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=)
3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: 6NJodbYwEdeIj0E7daInQyt4iscKxKzYFP+xqeKLGNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a8:d6:27:74:26:ff:78:29:77:8f:4b:3e:3f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=91824705f8d1db763601a0dc94608992ee3cfc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:4e:2a:a5:05:4e:a3:9a:03:c1:8e:c2:36:
67:e3:bd:2f:da:b0:ff:98:0a:3e:94:1e:74:1e:4f:
93:71:b8:2e:e9:16:f3:b4:34:41:1e:3f:1b:a5:f5:
dd:be:fd:80:05:fc:28:f6:19:73:ee:e8:84:4c:f7:
5b:a9:b3:50:8c:75:88:72:3b:fc:82:bc:08:4f:a4:
95:7c:aa:73:7b:88:37:b7:6e:fe:81:74:1f:23:f4:
12:a7:11:7f:b7:39:1c:43:3b:f3:0c:f1:f7:31:51:
3b:b5:9b:70:dc:ce:6c:dd:b0:c6:dd:36:2a:51:58:
05:8f:96:57:84:41:06:4a:87:6c:ed:fd:84:25:7e:
a5:6d:02:8f:b2:19:6b:b0:ab:c3:35:e3:d1:28:9a:
96:dc:72:cb:af:ac:52:7b:22:93:9d:52:4e:6a:77:
06:90:6d:65:89:24:74:12:08:28:b1:65:e0:5c:b7:
36:65:98:fa:9c:ab:be:da:04:f1:33:e3:9d:20:3b:
60:37:a9:3a:38:c6:de:81:4b:96:ad:1f:1c:b8:47:
fa:07:ef:38:21:5c:a4:8d:f0:fd:43:c8:c1:7d:a4:
a3:b6:b2:4e:b4:37:31:c7:3f:c3:44:b3:4b:d0:3c:
9b:e3:96:cf:49:a9:46:e9:20:5b:05:72:9b:09:33:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:47:05:F8:D1:DB:76:36:01:A0:DC:94:60:89:92:EE:3C:FC:0C
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:d7:73:fc:ca:cc:24:06:70:ca:7a:5f:43:89:f3:41:14:
f3:73:50:be:a7:e2:14:6b:b0:93:a6:04:36:d8:0f:5b:15:a7:
57:60:68:9e:af:04:37:3a:df:15:61:ae:4c:53:03:70:d0:37:
b8:65:d5:9e:cd:a8:70:db:17:91:f2:00:0d:c6:90:4a:a7:9e:
bb:b8:7b:ff:17:5f:86:0a:17:e4:bd:8f:cd:c2:72:45:2f:1f:
a6:7c:7c:50:bc:60:25:b6:cd:31:1c:22:16:c5:61:4d:a6:a9:
e8:c9:8e:00:d6:98:b0:11:47:c2:e2:ed:09:63:76:de:16:f0:
fa:83:85:8f:3a:3e:37:cb:5d:e4:02:14:53:75:68:82:b0:fa:
f5:f3:2b:dd:30:91:54:b4:63:54:d2:80:9d:05:13:5d:eb:29:
56:ff:54:0c:90:41:fc:10:d8:76:bb:b6:58:9a:d4:ac:08:16:
a7:01:ff:8b:7f:96:45:c6:17:7a:20:76:6d:7f:aa:8e:a3:b2:
59:db:bf:18:06:ab:dd:55:6b:ec:b4:96:0d:00:dd:6b:21:1b:
f9:53:05:d2:b4:20:4d:b7:80:24:ac:e0:e8:f0:68:a9:75:5d:
e9:20:58:c1:55:b8:57:ee:59:85:b1:af:59:6a:77:93:c6:0c:
36:47:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:39 2025 by rpki-client