
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: MgjamhxTdkiIQu3Ud6tlnYNPJODR3cOCiDwY/nRHIc4=
Subject key identifier: E3:BB:97:28:7A:19:5C:61:F9:18:3C:D9:29:1C:88:58:12:D6:25:74
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 0198D5BB78CA170BFA5B140D4C54E109312D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0B0B
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: ae0DUOyAgreDiV4LJsS7DARoHQFv7h/IH4JMII1yPqM=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:78:ca:17:0b:fa:5b:14:0d:4c:54:e1:09:31:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=e3bb97287a195c61f9183cd9291c885812d62574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:9f:a4:f1:5e:8d:bc:ff:94:62:5b:60:43:
b4:5c:93:f4:74:6e:61:d9:9b:13:d4:e9:a2:83:17:
1e:f9:5f:9d:0c:b5:83:46:ee:34:c4:8d:d7:45:ea:
23:ed:c3:94:40:a6:2e:0e:6d:e1:b6:a3:5d:19:37:
dd:e4:42:77:1c:05:8b:49:04:0b:d6:e6:31:93:0e:
c4:d4:95:20:ff:da:60:15:30:a2:70:65:0e:9d:96:
32:6b:8b:fb:aa:57:c2:90:65:f6:9b:9f:2c:b0:95:
22:ec:ff:48:a5:57:91:fe:9f:ce:fd:94:60:60:fc:
af:be:f9:dd:51:b1:42:3d:0b:04:37:0c:e0:8b:9c:
cd:6c:5e:ae:45:1d:44:4e:58:f4:1b:f5:5e:d1:95:
ef:02:e1:6a:3b:f0:bf:17:8f:16:20:54:04:ab:b7:
02:a5:48:fd:71:12:1d:18:1c:c5:47:4b:31:10:11:
2f:94:42:0e:44:30:80:62:b8:71:b9:60:ba:ed:f0:
a7:d1:7a:9d:45:c6:a1:c5:c6:95:14:b9:af:bf:ff:
a2:70:fb:7d:b5:e4:12:98:ac:d1:72:8c:eb:f5:cd:
75:5b:a6:d2:1f:2c:45:5f:f5:f0:61:88:6b:14:91:
45:4a:ef:d2:cc:d4:1c:b5:47:8b:a9:54:c9:cc:df:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:97:28:7A:19:5C:61:F9:18:3C:D9:29:1C:88:58:12:D6:25:74
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2c:f8:f4:25:68:53:a5:c4:12:97:37:bd:ed:b8:f2:77:1a:
11:4f:ee:7b:c0:19:cf:e9:6a:99:d7:f2:49:ef:90:e7:5e:93:
c8:5c:16:ed:5c:b3:7f:4e:aa:55:bc:19:4e:cb:3e:99:f1:e9:
3d:c8:5f:01:f7:26:47:58:03:a6:66:3a:be:e0:01:f1:76:fa:
71:21:8d:61:3f:f5:3c:52:7a:e5:cb:27:2a:4a:7b:f2:f9:cc:
b5:30:ba:e5:e4:05:19:30:1f:55:78:51:cc:6c:fe:da:a2:96:
6c:b6:54:b7:27:25:ab:4e:08:69:2f:34:4b:f4:37:13:f4:9c:
7e:a8:e3:d1:f6:88:5c:07:63:a4:4a:ca:dd:fb:3a:69:ea:47:
27:b3:d8:dc:ff:59:ca:96:21:9a:4f:8d:30:f7:4a:99:89:9b:
03:91:06:d1:63:7d:e6:62:8e:f5:67:d5:59:61:fe:64:a5:6d:
5b:b1:65:d6:df:47:cb:0f:a1:3f:51:d9:8b:3e:4d:c5:dd:24:
a1:76:83:1b:e3:86:a3:89:31:0c:e0:ba:2f:eb:03:8b:89:af:
43:35:c1:49:57:22:2c:bb:92:ed:ca:71:3f:ef:c2:96:53:48:
f4:e3:38:73:1f:d1:3c:35:0c:b9:b4:2d:2d:89:a4:d3:ac:88:
14:41:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:17 2025 by rpki-client