Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: FwPaAk9RJLIHHibbPaDOgp3ngOdInBzYw8xDMKm4VHw=
Subject key identifier: 1A:DC:86:20:F6:73:7D:2C:D7:D0:58:F7:67:B6:07:BF:9D:7A:F1:7D
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 0198D6605F77B1B03D3FE7E22F8C91269438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 0EE2
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: zJgaMW3RKWrCLLFg92Yd1V2ON5/hW4zYNkAXeuAHwYU=)
2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5f:77:b1:b0:3d:3f:e7:e2:2f:8c:91:26:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=1adc8620f6737d2cd7d058f767b607bf9d7af17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:63:6a:53:6d:72:08:a4:c5:a5:cd:fc:b8:
73:1b:94:b8:02:80:67:6f:c9:d9:b0:a6:ab:91:c3:
77:29:c1:72:64:e6:53:47:29:07:78:d7:0a:7d:b8:
25:60:2a:2a:a7:0f:0b:6c:9c:b6:2f:18:ec:35:f2:
fa:30:e5:65:c2:f5:79:2b:67:f0:e2:01:6c:90:3f:
d1:96:57:ab:bd:e8:df:e6:2b:12:57:62:e4:cc:60:
e3:d3:43:bd:66:fb:c8:48:cf:ac:c1:fd:ca:ad:6b:
15:eb:5e:30:2a:b8:9d:6d:45:88:2d:39:44:33:5b:
06:d3:86:94:c3:c7:e4:b5:10:da:bd:db:f1:06:78:
21:42:69:02:d6:3a:2d:2d:40:57:c5:2b:a8:f8:73:
4f:32:57:0b:bb:35:86:af:b9:d0:c5:3a:b8:cc:c4:
8b:b9:b7:d8:9d:60:b7:ab:70:04:94:5e:04:25:0a:
ac:ef:36:2c:ad:80:61:7a:d5:99:9c:03:48:f8:40:
d0:47:80:b1:12:77:7a:59:9c:3e:d0:03:b9:2f:79:
1c:f6:73:18:09:be:c1:48:da:11:40:20:1d:f6:f4:
e3:27:a9:70:21:73:1e:47:ae:47:a8:e5:dd:88:43:
6f:8b:b1:c2:12:5a:77:c5:95:42:0e:c4:dd:c5:e5:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:86:20:F6:73:7D:2C:D7:D0:58:F7:67:B6:07:BF:9D:7A:F1:7D
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:51:4b:a7:5e:1b:ae:aa:a1:2d:ba:d2:de:04:66:04:6b:1f:
ec:3c:30:06:48:4a:45:ac:1a:ca:50:4d:dc:53:a9:3d:48:d5:
1d:1a:67:6b:56:4a:d5:31:23:ee:3f:1b:1f:00:c8:a2:06:67:
02:95:58:23:51:9a:04:28:47:95:9d:58:7f:94:29:ec:5a:2d:
75:fd:61:f6:5d:33:42:67:ba:bc:66:0c:26:70:43:5b:7d:a8:
60:bc:9e:dc:00:fc:62:30:7e:13:9f:5d:d8:47:db:5b:c9:6d:
8d:da:07:5b:9a:06:3f:74:50:38:03:22:7b:8d:90:a8:b9:5d:
9e:55:b6:c8:20:c8:67:8f:36:3e:ae:b8:58:9a:a0:ab:54:be:
91:21:a6:72:c1:0e:e2:7e:78:1f:2b:ba:58:99:f0:c6:2a:5d:
9b:ac:8d:a0:1f:04:66:bb:a6:48:d9:39:2e:1a:e3:45:e6:be:
ab:9c:33:a0:7c:af:f4:89:2a:ec:fa:fa:c8:4d:48:4b:e5:94:
77:3f:cf:31:cb:69:6d:1e:6d:15:ba:5b:de:b9:3a:b2:2f:fe:
d1:5f:8c:02:98:62:a3:56:32:9c:54:5f:6c:7a:32:a2:4b:68:
eb:89:32:c2:8b:a7:6c:c0:49:93:0d:a6:be:0c:f6:a0:13:9a:
d4:00:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:15:28 2025 by rpki-client