Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: Yfc2wl/0ObUaV2DZ5UJcFN7GpmqjSoNw3wXrFPdc90w=
Subject key identifier: 1C:6D:0E:9A:F3:72:5A:D2:74:CE:27:EF:6F:62:3D:A3:AE:8D:17:F0
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 0198D4E0A429455A5609800FFA5A20601728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:28 +0000
Manifest this update: Sat 23 Aug 2025 03:02:28 +0000
Manifest next update: Sun 24 Aug 2025 03:02:28 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: DTje8CFKT4w35BS5rdP5cO/eh8zK2Z7Q7enLJjP8u1c=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a4:29:45:5a:56:09:80:0f:fa:5a:20:60:17:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Aug 23 03:02:28 2025 GMT
Not After : Aug 24 03:02:28 2025 GMT
Subject: CN=1c6d0e9af3725ad274ce27ef6f623da3ae8d17f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:3e:ba:0e:5e:c2:33:74:32:ae:91:c4:6e:
55:75:58:9c:c6:ac:2b:43:80:79:e4:82:b4:f9:16:
d7:c0:b2:08:7a:57:25:6c:52:b3:b9:23:f9:e5:e7:
48:b9:0d:9c:49:88:d3:dc:4f:05:e6:64:34:dd:a9:
33:a5:ac:34:22:f5:90:0a:14:bc:70:4e:c4:35:66:
d8:33:c0:4e:90:f6:a7:25:32:91:6e:1c:56:19:63:
6e:a9:4c:8f:0f:74:8c:f3:8c:77:e4:2b:0c:04:61:
ab:e0:8b:60:23:54:e6:ce:f1:bb:e8:4c:65:a4:2b:
7d:03:c1:31:19:70:48:99:e3:da:e1:1b:76:64:39:
89:11:64:cc:af:f3:42:08:9b:89:fa:35:6f:37:92:
24:25:46:6e:4f:f4:8c:21:15:83:88:4d:4f:e1:20:
a8:fd:dd:43:df:3d:6e:40:be:7c:7f:41:e2:7c:bd:
5b:5c:5f:ac:c8:57:fc:d3:93:70:75:5c:eb:b8:37:
0b:d0:21:4e:bb:15:05:47:78:6c:20:e5:fa:eb:66:
63:d5:63:a8:6f:ec:1a:52:a0:30:3b:e3:7b:62:6c:
e2:ce:b3:7c:27:20:e1:f0:93:43:b8:34:83:db:d0:
d3:2b:cf:f1:93:e6:68:42:53:ea:51:32:c6:58:2e:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:0E:9A:F3:72:5A:D2:74:CE:27:EF:6F:62:3D:A3:AE:8D:17:F0
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:26:f7:df:8e:a1:37:70:ec:1f:c8:ec:b0:f2:cd:f7:81:0f:
63:89:ae:b5:6e:80:d9:bd:77:41:e9:ce:bc:8c:ce:b7:b6:16:
ee:4e:79:20:f3:6e:b5:ee:71:85:81:be:3a:89:e2:3e:81:48:
a7:99:ec:49:5b:ce:02:36:30:8e:c6:cb:68:bd:2a:b7:9f:37:
9d:4e:d2:30:86:0e:f3:13:b0:0a:79:1d:21:77:e2:9d:d6:b2:
42:8e:9d:3c:a3:3f:2e:9c:49:89:5d:10:f1:fa:d7:50:46:37:
b1:0b:f7:4e:ea:f1:8e:b9:aa:9b:9f:1c:39:fb:5e:ae:3d:df:
04:aa:fe:21:9f:88:b0:e7:c0:ef:b9:a4:dd:fc:3e:b9:a5:d8:
e7:95:0a:6f:32:eb:e6:ac:8b:1f:72:49:55:8f:6d:d5:38:fe:
13:8d:d9:7d:96:bc:bf:de:c8:33:e6:5b:36:79:e0:c4:e2:c7:
86:0b:dd:f7:fd:7c:52:3f:5c:90:c7:f1:d9:42:0f:58:58:29:
d1:57:61:cc:7a:4c:bf:0f:2d:b5:eb:50:1b:42:45:65:76:b7:
59:e3:88:7a:f1:c2:10:46:c7:10:1d:b6:bf:47:1e:b5:19:8e:
56:e5:9f:0e:b5:82:79:2f:83:96:96:b6:b9:0e:5f:66:48:05:
2c:6c:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:09 2025 by rpki-client