Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: GH16bqB0RthKkLhRO7UHnUwe+jIYG959ZKk4ZaqWvNE=
Subject key identifier: 6B:19:24:8C:AC:37:02:23:E2:11:50:62:D8:77:B7:52:47:C7:15:07
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 0198D4E06084A29E9EDCEE2AFC1573B4DEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: 8QuzjaCRHpdlctgcnQPaQN0Lu3YREV2Dg+wUjZ44ZNU=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:60:84:a2:9e:9e:dc:ee:2a:fc:15:73:b4:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=6b19248cac370223e2115062d877b75247c71507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f7:cc:02:a2:dd:65:3e:ea:cd:12:e3:d5:3b:
81:f0:b0:46:0c:30:9f:67:a5:34:f8:76:f7:0f:fd:
d3:18:5c:46:f6:82:6d:a4:bb:92:d9:f7:fb:87:9c:
fb:12:18:3b:19:3e:2a:4e:e3:87:53:da:42:a2:84:
10:bd:b2:9f:7d:26:29:f9:03:76:bf:37:6b:c5:b1:
f3:17:41:83:3d:a9:b9:9c:a7:96:03:21:66:ef:7d:
0b:8f:f5:69:fd:66:5c:d8:b3:55:b0:45:d3:4e:dc:
a7:b0:9e:92:7e:c9:61:4b:02:08:d4:22:f6:b1:89:
68:0e:b7:d7:20:cb:72:c9:d2:ef:6a:67:4c:87:be:
17:df:57:07:ad:3b:b7:e8:41:cc:41:e4:6c:1c:dc:
4d:fb:ab:01:0e:f3:47:1b:7e:10:81:bc:b5:71:00:
c0:ff:04:cd:8f:40:cc:30:3f:8a:5c:6f:60:12:8e:
4f:4d:8d:ea:32:52:5b:2c:47:f2:e3:f0:2d:2d:2d:
81:ec:86:48:45:66:7b:5c:23:12:93:85:c9:48:88:
d6:43:32:aa:56:d0:5c:3d:a3:bd:c3:f0:a2:66:4e:
c5:fe:a6:bd:ad:ed:16:30:db:dc:05:3e:21:16:73:
fa:d0:17:2e:b6:3a:2b:06:b7:79:8b:44:b9:15:09:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:19:24:8C:AC:37:02:23:E2:11:50:62:D8:77:B7:52:47:C7:15:07
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c3:be:15:4f:89:e5:67:db:88:11:30:01:96:d4:32:cb:77:
be:c5:c2:95:fd:2c:1f:87:e8:dd:e6:48:28:5f:ba:a4:7a:8f:
c6:76:b4:13:55:66:aa:99:14:ab:f1:b9:48:e5:9c:87:53:21:
d3:83:ee:a6:6b:6d:44:46:84:e3:56:99:66:33:cc:8d:7a:bf:
ed:b6:64:9c:be:7a:6b:60:73:40:34:fa:88:66:c8:0c:d4:af:
cf:28:91:74:c1:65:56:9b:c3:a1:98:b2:44:da:ed:57:f4:fe:
f8:60:16:98:83:4c:70:56:6b:54:9b:4c:09:d7:f3:58:39:94:
ac:9b:41:0d:b4:5b:38:3f:59:77:34:11:0f:59:2a:2f:dc:1b:
c4:d0:ce:ac:f9:2b:d9:60:ea:29:d0:a1:45:ef:6f:8b:68:07:
6a:51:73:29:e2:82:64:fd:a1:00:f8:ec:ff:0c:78:cd:ba:de:
a7:3f:21:8d:b1:b8:9e:da:8b:45:60:80:77:f7:f0:64:42:77:
a8:57:b0:91:4d:e1:3d:4e:81:5a:cb:b6:bb:1f:b2:34:af:54:
49:5c:46:fc:a0:9c:a1:61:9b:60:55:95:60:13:ae:4c:99:46:
41:85:c4:d4:92:58:76:9e:5c:04:47:3f:4e:5b:0c:d0:ac:5b:
c6:65:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:50 2025 by rpki-client