Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File: Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier: cZJfNHFMPM5eJVL/EuhT181YYEKM0wWZNWPMdj1sYVA=
Subject key identifier: 3A:D3:16:C4:BA:5F:A2:45:2F:08:8F:C6:8B:93:C7:32:37:B0:F1:7B
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer: /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial: 0198D6984B3EB97E74222250C58C5723EAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number: 12C1
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: R2hIzPH7WznpzB3A9VGA94-nqD4.roa (hash: kT7LJSBIR26R77fVHHIPqJYdfVy6esu3U3f7NvLKrOU=)
2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: vcHH6ai772ooB7B1804zCAgDfGgieVNGh/9/See06EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:4b:3e:b9:7e:74:22:22:50:c5:8c:57:23:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=3ad316c4ba5fa2452f088fc68b93c73237b0f17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:a2:18:b6:d5:e3:a9:96:96:7b:1a:4c:d0:
b2:13:9e:48:73:b0:6b:c9:3b:10:f8:00:56:c4:f7:
a5:ba:86:02:c3:6e:9f:2a:ed:06:72:2b:e8:fd:91:
b9:8d:b6:2a:7e:ff:cc:98:8d:5d:a5:81:95:b4:ad:
29:75:82:cd:45:f7:e8:32:45:7c:7c:17:3f:9c:0c:
28:dd:eb:bc:a1:13:4b:38:8f:70:93:57:0a:45:61:
20:34:3a:3a:50:ef:36:a8:1c:c2:3f:10:86:88:a7:
2a:c6:16:c6:a6:cb:df:36:ba:9a:a3:4a:22:87:93:
d7:2d:01:8f:ec:e5:58:56:2e:34:40:6c:a7:80:e1:
d4:a9:fb:85:23:84:29:8d:7e:b4:d4:72:a1:ac:e3:
24:3d:e9:29:8a:36:b5:67:d4:28:6c:23:de:3f:6c:
31:00:3e:3c:03:3c:21:09:9d:7b:77:45:ef:47:eb:
c3:f0:92:26:98:64:51:1a:13:64:9a:09:7f:14:6a:
08:1a:41:88:24:03:c6:17:24:04:23:c9:df:6f:33:
fe:5c:8a:c4:33:bb:75:23:69:e0:7b:a2:09:b1:12:
a0:c9:5a:08:6e:8d:38:c3:2b:25:74:be:4a:07:d6:
d7:73:6d:f9:08:71:e2:e9:de:9a:78:e4:19:2c:97:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:16:C4:BA:5F:A2:45:2F:08:8F:C6:8B:93:C7:32:37:B0:F1:7B
X509v3 Authority Key Identifier:
keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d2:a3:35:0c:01:69:34:8b:b0:d2:aa:0a:e3:95:07:54:72:
12:64:d6:c9:f3:c5:5f:70:ac:cf:9a:7a:21:da:a7:94:ac:fa:
05:7d:76:b7:ef:59:89:d1:82:23:2b:14:b0:2e:1e:45:09:de:
2a:19:d3:cc:c7:6a:d9:8b:ca:6b:92:bc:10:ef:b6:98:42:9d:
93:04:d0:a7:63:07:26:8a:cc:36:12:86:ab:28:1b:ba:de:f2:
18:85:ee:e4:c5:5e:d8:94:78:02:6d:59:b3:97:26:53:c9:81:
27:c6:01:4a:09:bc:b4:ab:64:d0:1d:b6:32:88:0b:d3:a5:dd:
48:13:95:88:84:f9:b2:ea:c2:d3:5c:0e:32:24:c6:82:5f:d5:
57:2d:1a:8c:6a:87:1c:b2:8e:dd:8d:65:1d:22:81:fe:20:ce:
8d:44:19:47:a4:16:2b:bf:50:9a:c3:5f:8a:c2:56:98:cd:92:
2c:2c:a9:e2:db:f4:6f:e2:05:8f:8e:f4:35:18:9e:bf:e2:23:
70:42:f9:b7:f3:b5:3b:fb:a7:de:8d:7d:83:92:b4:f6:3c:e1:
60:75:cc:54:79:6a:60:49:d4:89:ce:6a:2a:4a:d3:83:a8:f4:
a3:b5:5e:02:38:e7:67:9d:b7:76:06:cd:3a:4b:58:1a:d2:57:
b4:48:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:53 2025 by rpki-client