Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: j/jZJapVgumMI7GPLXH6o/4KifxXinSEiFZMEesYSys=
Subject key identifier: 53:3E:36:52:E6:5A:CB:68:84:3B:59:E7:C8:10:E4:0A:A0:D9:8E:DC
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 0198D473A6D52CE45DA8753FFAF3C8B0476C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 1154
Signing time: Sat 23 Aug 2025 01:03:25 +0000
Manifest this update: Sat 23 Aug 2025 01:03:25 +0000
Manifest next update: Sun 24 Aug 2025 01:03:25 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: /dGxOAJhBxiAPgw3lLgabD1gkRUsC24T48dfKMIbOMM=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a6:d5:2c:e4:5d:a8:75:3f:fa:f3:c8:b0:47:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Aug 23 01:03:25 2025 GMT
Not After : Aug 24 01:03:25 2025 GMT
Subject: CN=533e3652e65acb68843b59e7c810e40aa0d98edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:f9:6b:df:38:58:58:08:78:ab:cf:cf:32:
65:2d:eb:c3:31:7b:19:55:7b:01:bd:03:7c:51:d6:
28:c5:12:88:06:59:41:d2:32:de:9a:30:eb:4f:cd:
58:04:d0:40:b6:dc:67:a1:59:2e:a3:f5:9c:e8:c7:
22:0d:ee:7b:b6:36:b5:b3:d6:51:f7:91:08:6c:1f:
e1:d0:a6:90:66:3d:f9:08:4f:6c:19:42:90:8b:3b:
b8:77:20:f5:b3:93:4b:e3:39:d7:de:be:4d:95:10:
42:0f:e3:d8:a1:52:30:df:1c:d2:61:4c:f5:da:6a:
22:17:31:44:49:a0:ac:a5:7c:83:7d:ef:2a:5f:7c:
24:a9:99:f0:28:db:b2:04:96:5a:a4:72:f7:bd:b2:
17:12:27:37:67:e1:88:e2:cd:8d:a3:de:cd:37:28:
0b:12:44:ee:ea:75:6f:0b:07:d1:f6:fc:35:29:4a:
fd:de:bf:a6:23:49:23:15:56:bb:7e:0f:bd:09:60:
61:9c:ee:1c:da:a9:9e:0e:db:64:f8:6b:db:b3:95:
3d:1a:f2:68:9c:d9:ef:28:fc:fe:0a:73:02:ec:ad:
32:49:28:93:01:aa:6f:a9:95:a5:7c:a8:91:1b:67:
8e:44:4f:d2:3a:b8:f5:69:49:a9:e8:e5:e9:23:84:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:36:52:E6:5A:CB:68:84:3B:59:E7:C8:10:E4:0A:A0:D9:8E:DC
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b2:d2:ef:91:38:2f:07:7b:39:38:3b:b9:fe:77:c1:5c:c2:
32:16:bd:7a:49:6e:af:3d:9d:02:35:ca:74:0c:2a:06:ff:e7:
62:01:67:33:f6:4a:8f:c7:62:82:30:61:7a:03:a7:d7:a5:5c:
86:37:fe:29:43:18:2d:a4:44:94:33:52:6d:56:a9:92:57:da:
b8:f1:09:ea:e5:83:d8:d8:f7:8c:8b:e7:99:ac:56:80:8c:9b:
4e:7f:05:61:06:75:4c:9b:fb:42:7b:2e:68:94:4e:9f:d7:71:
4a:1f:76:c6:b2:74:f8:6e:63:56:2f:b6:4a:c4:ff:12:26:6e:
8a:1f:b1:31:65:52:1a:b9:40:1d:51:e0:9b:d3:86:b8:c6:21:
53:07:1d:31:82:e3:d7:75:0d:6b:ed:45:98:cd:98:21:7c:fa:
06:1c:06:a6:7d:09:9c:94:7b:d2:fe:32:0a:d0:53:eb:05:18:
95:f6:23:01:04:1b:9f:4d:5b:d5:42:e6:c9:6d:8e:7a:ce:3a:
34:92:3a:99:75:3f:37:4c:4a:fa:ce:4c:97:e5:36:6a:a4:b7:
ef:28:76:44:ef:16:1e:f0:8f:cc:e6:74:95:09:e3:88:e8:ed:
d8:22:29:1c:af:96:b9:b1:01:56:6b:7d:42:88:c0:7f:5d:f2:
21:b6:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:31 2025 by rpki-client