Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: CyL12G5aIDVGacAYnnI2u1vYbZ1tvmk2AleK1U0IsMw=
Subject key identifier: 73:28:64:80:A4:68:8B:71:61:D7:82:92:AB:28:EE:7B:9F:28:A5:28
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 0198D7E112804505E486D254678454106823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 17:01:48 +0000
Manifest this update: Sat 23 Aug 2025 17:01:48 +0000
Manifest next update: Sun 24 Aug 2025 17:01:48 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: 6qr+gk3vca9HvArLIhLOvWHQo1OwsDBXBKb5jZadYUw=)
2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:12:80:45:05:e4:86:d2:54:67:84:54:10:68:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Aug 23 17:01:48 2025 GMT
Not After : Aug 24 17:01:48 2025 GMT
Subject: CN=73286480a4688b7161d78292ab28ee7b9f28a528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:08:8f:c6:3f:d2:9f:2e:58:8e:94:cf:46:
ae:75:59:d0:3d:55:28:a9:ea:42:48:9b:ae:48:bf:
28:24:0b:27:4e:d3:8c:5a:2e:1c:eb:86:4d:b6:9d:
0c:d1:4d:bc:af:f9:38:fb:c2:cc:96:35:df:54:0e:
d6:85:ee:d9:06:0e:d8:c8:f7:90:0a:c7:f3:c8:bc:
2c:fa:1e:41:eb:a0:f5:fe:7a:6b:62:7f:90:20:61:
a5:b4:fd:32:c9:45:5c:d7:cb:55:3e:03:34:45:03:
09:78:93:0a:ed:d6:85:76:36:8a:04:b1:34:96:72:
25:66:a9:c5:d5:cb:94:df:86:9b:e6:20:ac:c9:75:
37:67:01:46:49:f5:08:c3:dd:8f:91:9a:69:ac:ed:
c8:b6:53:ba:ff:32:06:47:23:57:df:2d:6b:e0:7d:
ac:86:da:85:7c:2b:33:b8:e0:e9:a4:0a:8f:b7:86:
fe:bf:1d:13:37:71:8b:d6:02:d9:5f:4b:82:61:62:
6a:f4:32:fe:9c:00:f1:2a:0b:20:f7:52:b7:63:5d:
0b:48:c0:14:5f:9e:27:c1:56:c3:5f:72:10:f5:f0:
be:0f:f0:a6:c9:26:af:65:34:70:26:65:df:72:4a:
c9:d4:77:29:c6:11:6f:88:21:10:06:31:73:79:3e:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:28:64:80:A4:68:8B:71:61:D7:82:92:AB:28:EE:7B:9F:28:A5:28
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:34:22:6f:e7:a3:fb:89:31:3c:3a:44:c3:bc:61:9d:95:1e:
dc:51:75:85:5c:49:05:36:10:af:8d:ad:18:41:d5:ca:eb:37:
3f:47:23:6c:f5:8d:29:4c:05:14:d7:9d:58:ae:63:6b:64:6f:
bd:46:53:b8:34:27:8b:5e:bc:26:41:08:cc:f1:e1:24:3f:1b:
9e:96:59:ed:51:4b:8c:45:16:7f:5d:53:e1:84:89:7b:03:2c:
21:f0:0c:42:95:d0:b4:c8:31:ec:75:a4:7c:e5:9c:75:18:e2:
f5:4d:c8:68:96:5c:f9:4d:f0:3c:03:ee:33:ad:f8:01:40:a2:
d3:2a:94:64:c5:6d:01:a2:70:e8:10:e6:81:36:e5:81:a9:32:
f4:6d:93:28:88:87:d9:ec:f8:ac:f2:c0:fe:c9:2e:3b:e5:70:
4c:d8:a7:25:67:4b:86:ed:3b:38:1d:fd:d3:be:a3:16:57:3d:
a6:d0:b2:90:d3:48:7e:34:d2:4d:66:c3:6c:48:5f:59:e1:2a:
ce:2b:e0:ab:4e:95:dc:5c:0f:45:41:12:0f:82:d7:f1:76:aa:
b3:ce:6a:9b:76:4b:7c:87:af:2c:84:3c:b5:ff:a6:b6:1e:af:
14:c4:33:b2:9d:47:90:6a:f1:08:f6:04:2e:7f:cd:54:c6:6b:
83:df:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:44:26 2025 by rpki-client