Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: RLUF+v+Xqd4zi+oCgD3sco4Hd7sFjd6wRnbxSICB6Po=
Subject key identifier: 3E:0D:DD:40:B2:01:A4:CD:09:5D:D2:36:A0:39:05:5B:7C:A2:FB:F1
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 0198D7062B1F35591C9613C0A97F7ABE72DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0D40
Signing time: Sat 23 Aug 2025 13:02:42 +0000
Manifest this update: Sat 23 Aug 2025 13:02:42 +0000
Manifest next update: Sun 24 Aug 2025 13:02:42 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: uzPB8Mi7dVjckOXIDfepLG1JXCbdwz4A9kjTIr7TTJI=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:2b:1f:35:59:1c:96:13:c0:a9:7f:7a:be:72:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Aug 23 13:02:42 2025 GMT
Not After : Aug 24 13:02:42 2025 GMT
Subject: CN=3e0ddd40b201a4cd095dd236a039055b7ca2fbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:bc:32:7b:bf:b9:93:67:ee:64:ba:27:82:
11:15:0e:97:fd:f2:68:bf:d0:3c:66:47:f5:c0:fc:
76:ff:4e:e3:d6:cf:36:2c:9d:aa:e0:4e:28:4d:9c:
77:b7:43:2e:57:6a:0e:d2:b8:03:16:11:40:b6:47:
16:a2:d1:f2:04:1e:ee:e3:09:3d:34:69:cb:ad:7a:
e8:c2:9a:b5:10:c8:66:2d:1a:61:76:2e:42:3c:3a:
71:67:7f:c4:f0:e9:35:21:da:d4:23:e2:65:4a:7a:
63:37:2e:6f:d4:50:04:be:43:72:69:2b:f2:22:dc:
ef:3b:01:8c:67:aa:f5:f4:70:1c:86:29:9b:e3:63:
21:79:99:ae:a2:d6:56:e2:c3:98:d1:ac:49:d6:9e:
c1:8a:05:ac:63:01:00:36:cf:5f:49:8f:e4:29:ff:
27:bb:95:86:79:bf:8c:b1:33:a5:19:d6:b2:d6:a9:
4d:e5:31:44:7e:5b:3e:57:9c:cd:40:df:92:81:9a:
a7:09:2d:66:a4:5e:44:f0:d3:61:3d:14:62:e6:25:
c6:3d:38:cb:65:45:a0:ca:4f:50:8c:45:e5:6f:39:
1e:a7:09:7a:6b:96:9f:6e:4f:0b:25:f5:34:89:f2:
5c:23:d8:84:dd:98:6f:85:4b:c4:d1:58:17:4a:7d:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0D:DD:40:B2:01:A4:CD:09:5D:D2:36:A0:39:05:5B:7C:A2:FB:F1
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7c:69:a3:41:29:53:26:32:69:8f:fd:28:d5:5a:d3:20:9d:
d6:a8:99:55:92:02:a1:49:39:af:c8:56:c5:05:9c:5c:09:8f:
97:e4:43:67:c2:c4:b1:d9:b4:f1:9a:e2:df:21:37:06:5b:53:
ba:84:01:2a:bc:da:30:cd:f5:1b:79:91:69:d1:5a:6c:74:05:
5e:8e:0f:e5:ba:f6:25:f1:1b:88:10:1f:d0:97:e1:f8:ff:53:
c3:04:80:fe:c5:54:6f:17:54:ee:39:da:de:3b:36:a9:2d:09:
c8:d1:5d:65:c4:60:4c:0a:1c:31:25:35:68:e9:a1:15:e4:32:
e5:83:f5:a1:d6:a2:a9:c3:99:80:b3:d8:71:7b:0e:24:ad:be:
ca:e6:b9:75:0b:e4:98:c8:fc:79:2c:d8:2a:92:f5:e8:1d:a8:
e8:01:38:20:05:33:a9:33:c0:e7:bd:a4:8d:25:10:bf:78:d4:
27:6d:81:cd:66:5d:80:f9:b2:c0:ee:be:09:b6:f1:fe:64:28:
ce:1a:f2:a0:df:e4:43:be:c0:04:8e:b7:82:f9:63:37:31:e3:
74:40:3b:ca:dc:89:67:98:3c:18:9c:fb:d8:58:37:7e:85:eb:
d2:a4:d3:02:f8:80:13:2f:b1:c3:4f:9c:05:55:ea:8b:0e:60:
07:24:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:07 2025 by rpki-client