Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier: u83tjk2Cr/JfbbHxPY4rqZW+BIkpL7AkRGeaSt93ISg=
Subject key identifier: 68:75:4F:28:47:35:E0:55:E3:28:7E:EB:A8:AD:48:49:50:A6:BB:E9
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 0198D472D6DE82D54381EDB33D42DE43C1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 01:02:32 +0000
Manifest this update: Sat 23 Aug 2025 01:02:32 +0000
Manifest next update: Sun 24 Aug 2025 01:02:32 +0000
Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=)
2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: ISBrz99Ulj8B/coOtrXnk0BIChWSbfRYWFD5RSFp8kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:d6:de:82:d5:43:81:ed:b3:3d:42:de:43:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Aug 23 01:02:32 2025 GMT
Not After : Aug 24 01:02:32 2025 GMT
Subject: CN=68754f284735e055e3287eeba8ad484950a6bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:3d:31:f9:4d:15:f7:74:20:db:9d:7c:0a:
32:cc:67:fb:ff:46:28:49:1f:e8:ed:41:ce:c6:21:
62:a2:f0:fd:fb:41:ed:03:15:5a:29:7c:e9:60:b7:
75:0b:3c:37:54:f9:38:2d:23:69:8f:0e:bd:e6:1d:
fb:80:7c:24:63:1a:43:6e:88:4b:51:cc:2c:45:c9:
3b:a5:5f:35:d9:1d:57:cc:46:15:65:51:92:ee:a0:
8c:70:e6:e1:41:69:24:a1:99:34:f0:40:a4:b2:91:
e8:12:2e:63:ed:0d:3c:77:f6:92:e8:7f:9d:eb:7d:
2e:cb:0c:d8:26:68:cf:48:13:98:52:51:c8:ce:c1:
8e:d0:ce:77:d0:a4:7a:0e:97:a8:76:59:ee:24:ae:
e5:14:48:9a:57:3b:90:8a:dc:27:61:93:49:99:c4:
45:bb:61:aa:88:06:93:49:f8:d4:61:c8:26:c8:3c:
dd:c5:0c:15:8b:da:76:41:34:d9:20:a1:02:b4:97:
65:c9:34:fc:18:98:c8:98:7c:79:ae:89:57:c0:d2:
9f:26:25:5a:cf:07:f5:f9:b7:59:11:f3:19:a6:b4:
db:12:bd:42:78:8c:aa:6b:c6:1f:7e:32:51:54:74:
a4:28:ea:7f:0f:2d:ea:1d:98:27:a6:4c:81:37:2b:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:4F:28:47:35:E0:55:E3:28:7E:EB:A8:AD:48:49:50:A6:BB:E9
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:58:66:42:a6:a2:36:07:dc:be:5b:4c:ac:63:de:5e:f5:d6:
7a:46:e4:cb:fc:0b:9a:0c:22:ea:5f:82:74:60:8f:e5:53:0e:
f4:23:29:01:db:4f:c8:78:01:49:34:97:c8:cd:f5:e3:1c:e3:
44:09:82:0d:6d:ce:92:f1:9a:67:da:ca:99:9e:07:f2:83:fe:
62:ce:4c:9b:47:59:f7:31:01:31:6c:13:00:0e:10:67:27:5a:
54:c8:42:7f:a2:16:f4:31:b0:cd:e1:4c:92:07:1e:5a:41:09:
bb:0b:a4:90:fe:f1:23:a0:98:f1:db:16:2f:a9:2b:77:bc:12:
c1:0b:d0:78:5e:b2:a9:3d:70:a3:4e:3e:23:89:a9:59:d9:37:
39:02:08:22:e8:64:d4:f8:dc:f4:74:09:65:db:ae:ca:4d:1b:
5e:86:f9:d9:99:97:6a:79:f5:34:9e:d7:7e:ae:d7:01:a2:5a:
44:48:26:65:db:cf:cd:33:2f:c3:e9:42:11:7e:9a:ec:f3:c2:
f1:46:77:eb:58:ef:d6:c2:0f:71:68:c0:90:53:4a:9b:a9:84:
53:d3:a3:86:c3:db:14:b7:1d:fa:90:38:81:27:3b:ee:e6:4f:
63:25:3d:3e:eb:f5:6e:27:db:d5:d7:0c:46:6f:0c:c2:eb:cb:
b6:fd:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:01 2025 by rpki-client