Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File: Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier: WgU+1zLNe0kWnL29SifegkQ4uy3n0+VfqoYEhq8ZG8s=
Subject key identifier: 16:2B:81:D9:04:44:82:69:B5:32:A4:8D:B6:EE:D9:E4:31:A6:08:D0
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer: /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial: 0198D65F790BD6B886D23D02B413DEDE616E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: V/gyqCnDa0pVz5CDdPGmjzzg3GOYC34N8no4u0GvmLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:79:0b:d6:b8:86:d2:3d:02:b4:13:de:de:61:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=162b81d904448269b532a48db6eed9e431a608d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:1b:20:90:53:67:05:9a:c1:cb:ae:4b:cb:
aa:39:2b:d4:0e:04:29:89:fe:e9:fe:41:a9:f5:0b:
03:7e:00:03:50:7f:67:d4:e8:2b:06:f6:08:b2:fc:
39:96:97:67:e5:16:6a:b1:62:38:47:5b:14:da:47:
bd:70:de:d4:de:ad:41:52:b0:a9:58:71:60:bd:ca:
eb:b3:ba:81:35:be:ed:3a:4d:ea:1b:83:8d:dc:f9:
c5:d7:4b:80:c7:30:48:60:6c:a8:e4:aa:d7:34:29:
09:61:96:d5:3c:f0:66:35:78:56:99:fc:b6:e1:cb:
3a:7a:47:fc:e8:18:4a:23:d3:c5:eb:f8:61:59:15:
29:51:3c:32:33:01:49:d6:8f:fb:54:25:02:c0:40:
88:63:42:d1:52:39:ec:b2:6a:3b:dc:e6:6f:67:c3:
0f:a0:d5:3e:39:a4:a8:07:2e:b1:ba:9d:32:11:e1:
5c:1e:be:a1:63:b4:67:7b:ba:a0:62:ba:06:4b:ea:
9a:45:c5:9d:4b:ea:d0:fb:27:d5:56:50:50:15:21:
9b:37:a4:f2:8f:35:de:7e:57:f9:13:b4:50:4f:21:
a1:c0:e3:a1:3c:0b:0a:fa:fe:8b:2f:3f:68:b7:30:
e3:a7:88:9e:32:56:a6:bd:7e:4d:12:0f:19:d7:30:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:81:D9:04:44:82:69:B5:32:A4:8D:B6:EE:D9:E4:31:A6:08:D0
X509v3 Authority Key Identifier:
keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:de:bd:cf:59:ee:2f:31:7e:46:b4:39:8b:ea:35:c0:02:68:
c0:ce:ac:f1:0f:64:90:85:65:89:f4:04:91:1e:43:96:da:64:
b9:71:1a:78:9d:b8:ab:99:2d:e0:bd:45:92:0f:7a:56:87:5e:
05:7f:a9:a0:6d:e3:2d:42:fa:83:04:da:e6:90:37:ca:ec:23:
e1:14:e7:29:7d:1d:d2:ff:2c:e8:c3:4f:06:38:97:47:49:24:
27:d5:3d:1e:7b:f7:37:c8:6b:0a:1b:a6:56:a3:ed:91:aa:37:
5b:0b:1c:59:80:2d:cb:e6:63:89:99:a8:8c:f3:ae:ac:58:0d:
3e:1c:d2:21:f9:0f:5d:36:58:db:c7:a0:26:91:35:f7:bd:9f:
d0:20:33:21:bd:6a:13:90:f2:3c:02:a6:95:18:01:b3:5a:90:
b6:76:bb:28:e6:d4:eb:33:72:02:5c:bf:b4:e2:23:0a:61:8e:
b7:7e:5f:70:3b:0f:ac:cc:b3:a7:d1:62:d4:b7:2e:07:88:78:
87:c4:34:01:cc:0a:57:28:7d:96:2f:d5:27:8a:d0:dc:18:c7:
53:b6:4e:6b:63:c4:22:21:20:fc:75:ff:dd:17:2c:f0:73:ab:
fe:e2:f0:86:59:d9:9a:f4:93:cf:7f:44:1b:35:c1:e3:e8:12:
68:1e:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:32 2025 by rpki-client