Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: K0VM/ztanW/NDw8+E/vE7TNlgtXABDVXi8a/mpJYcb4=
Subject key identifier: 98:83:BE:6F:F3:63:4A:D4:8E:5D:8D:F9:4F:A5:5D:AA:BD:1E:CF:DE
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 0198D54EB23E62E748A7209E949432965D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 165D
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: AIMZF4BMpXflr+5wR+G7SWTWbrYKHyoZ/jYPUn5VNpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b2:3e:62:e7:48:a7:20:9e:94:94:32:96:5d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=9883be6ff3634ad48e5d8df94fa55daabd1ecfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:21:93:86:d2:aa:25:ba:5d:09:16:65:94:
68:5b:02:0f:67:95:11:8e:ab:68:b7:2c:c6:1c:3b:
ef:8c:03:0e:63:a6:6c:9e:b6:a8:7d:39:b6:68:ce:
83:39:18:0f:25:a1:4b:17:25:53:b3:d7:7b:fa:15:
73:e9:44:ea:86:77:b3:a6:75:07:09:9f:15:1a:24:
74:67:17:d5:89:83:ba:06:3a:d5:6e:16:3e:76:2a:
b5:f6:75:98:95:ca:d5:1b:68:3c:ad:a1:64:b1:7c:
82:53:b5:8d:30:bf:e6:29:36:ac:72:3e:1d:55:9c:
3f:c5:95:5c:75:63:ad:3a:bd:d9:1e:7a:3a:fe:6d:
88:2d:a0:e1:f3:5c:7e:7a:8e:66:0a:af:79:a9:72:
7e:3a:8e:39:34:d2:06:82:40:14:85:7b:94:48:a1:
15:6f:e0:19:a9:15:8c:a9:4a:c5:fd:66:5d:00:30:
5f:d3:d9:ca:69:72:d3:7c:b3:bd:79:f5:a6:ad:ee:
4b:63:07:cf:3c:4c:91:df:a3:66:22:f1:8c:e8:57:
d4:67:6a:b6:5d:66:a7:97:16:c0:5a:91:9f:b1:1e:
3e:77:84:96:8a:9e:96:c6:7f:5f:33:ef:af:1d:09:
60:e7:91:0e:a4:c0:ed:e5:c6:1a:16:5b:5c:64:d3:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:BE:6F:F3:63:4A:D4:8E:5D:8D:F9:4F:A5:5D:AA:BD:1E:CF:DE
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b0:06:9f:67:a4:7b:59:96:03:de:c7:9f:08:13:ee:6a:af:
f0:a7:91:2f:07:45:b3:3f:97:45:de:eb:aa:f8:ae:49:3d:21:
99:a9:7e:4a:4e:fe:c0:7a:f3:67:d9:6f:42:38:2a:12:66:32:
94:cc:76:62:86:97:cb:2b:40:99:2a:fc:6e:5e:48:57:f2:a0:
27:46:9c:71:d9:5c:98:1f:1b:86:a9:71:ac:34:92:ff:e5:80:
05:c2:1e:bf:f0:8d:86:df:3b:25:1b:65:d9:89:c0:1a:d2:4d:
1a:9d:d6:08:73:a4:8b:f4:29:97:8f:d7:14:f3:31:66:1b:13:
fa:e8:ef:aa:ef:d8:e0:c7:6b:90:bb:de:26:91:a1:54:50:6b:
25:17:34:be:ac:fe:97:11:49:09:d2:ee:06:6f:e1:75:98:d0:
bd:9a:27:f3:c7:cd:2f:9a:b5:16:1c:55:2a:cb:07:eb:22:20:
cf:6e:3f:c1:f0:b4:12:fe:34:66:b9:ac:23:2c:60:dc:c8:93:
36:22:cb:32:a2:1c:f3:27:59:25:50:77:60:eb:78:48:95:51:
df:fc:3a:cd:41:46:6d:58:8a:c3:46:9f:7c:17:62:0c:11:42:
cf:44:b6:74:13:f6:26:ec:83:7f:e3:b7:af:0e:3e:df:87:6d:
ee:3c:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:23 2025 by rpki-client