Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: t1B8A18dd/gX+WxtGo0At6cYOeE1Mj7sl8S+BHjXGo8=
Subject key identifier: 78:9E:2C:75:A9:A2:15:46:63:60:E2:33:9F:F5:59:E1:F4:FD:1E:E0
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 0198D583C9470AFAED451E17C1F0C7A82A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:40 +0000
Manifest this update: Sat 23 Aug 2025 06:00:40 +0000
Manifest next update: Sun 24 Aug 2025 06:00:40 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: +2vUr/zm/z9ZLl4xyJOAzuTl4wr4ZZaiBqYTryEo/DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c9:47:0a:fa:ed:45:1e:17:c1:f0:c7:a8:2a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Aug 23 06:00:40 2025 GMT
Not After : Aug 24 06:00:40 2025 GMT
Subject: CN=789e2c75a9a215466360e2339ff559e1f4fd1ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:43:c6:27:47:22:08:8d:c4:bc:25:c6:2b:
36:24:00:12:f2:dc:27:19:24:6f:80:13:72:af:da:
37:9b:63:87:eb:2e:8f:e3:49:1a:11:c0:f0:60:4c:
f3:00:ed:38:28:53:12:1b:54:a4:46:be:86:5e:78:
7d:6b:39:43:3e:01:87:28:96:c5:1e:7a:83:ed:cd:
56:a5:d2:75:d8:f5:0a:b1:f6:6a:d6:85:c9:57:1c:
be:3e:fb:95:44:09:6c:8e:3d:25:53:7a:73:60:6b:
2d:a5:f5:26:55:61:78:a5:5e:74:9f:ad:a7:1e:8a:
f5:31:fc:fc:fd:97:25:57:4e:57:c2:94:83:20:91:
8b:50:48:db:d3:6b:aa:8c:82:81:5e:c3:9a:f1:a1:
5c:56:b7:b8:66:94:a8:10:72:30:3e:fd:5e:ed:ac:
c9:c8:1a:82:41:91:8b:eb:19:d6:bc:28:5c:83:f1:
f7:be:9e:4c:13:18:0e:e8:56:55:cf:89:a1:59:58:
b3:13:84:a5:1b:a9:49:7b:b4:0b:03:35:b2:f6:b8:
30:53:c3:12:ae:dd:01:fa:a6:a7:7b:2d:dd:b9:dd:
b7:da:5e:da:6f:cb:20:99:71:94:73:e1:e4:93:0b:
dc:1e:1a:ba:f1:73:a5:b1:c1:3f:23:01:8c:99:11:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9E:2C:75:A9:A2:15:46:63:60:E2:33:9F:F5:59:E1:F4:FD:1E:E0
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7c:ce:c0:17:36:10:98:fe:fd:fd:99:b1:a4:32:62:8d:29:
94:69:fa:1c:08:8f:dd:90:29:07:78:ea:cf:d3:1c:03:80:30:
8d:bf:38:70:31:78:ca:5a:bb:64:e5:bc:bd:79:a2:2a:85:03:
73:54:34:90:87:ed:cd:a2:e2:b5:9c:bd:1d:73:32:d5:75:18:
eb:46:54:64:f7:cd:ef:61:ff:20:30:f8:8b:05:69:8f:3d:21:
4f:31:03:84:6f:53:86:db:ac:b4:f2:ea:06:4c:98:fa:52:47:
31:d6:98:44:5c:58:0b:d0:16:73:56:a0:ba:5c:fd:e9:38:ec:
97:fa:99:eb:43:5a:a8:87:12:63:de:b5:3c:3f:4e:33:22:75:
ef:4d:29:3f:d3:7b:27:9a:59:f9:48:26:53:22:19:85:2f:13:
c2:54:cb:a0:7a:7f:c9:75:b7:a5:c9:1c:fe:57:b1:db:36:2b:
d1:48:04:06:8e:c5:9a:68:45:fb:47:53:67:9c:f0:55:d7:bd:
fe:70:5d:ec:6c:3a:cb:40:3a:06:ff:34:93:4b:39:6b:8f:b9:
0e:12:8f:b0:51:39:7b:97:54:a5:b3:88:64:73:68:15:a1:a5:
d6:c5:c9:3e:3a:4a:f2:90:50:f7:b0:2a:e4:1d:c3:d3:77:0c:
0e:8b:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:12 2025 by rpki-client