Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: TBanxGUHFK47xv2MKV3AGJgi1PXF0cjwh/MGvVf8PC0=
Subject key identifier: E2:1A:90:3C:9C:79:A6:C1:F1:55:62:F9:C1:12:FE:B0:2C:1D:97:DA
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 0198D583B96497DD6AE0C1F5A7319EA8AA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: ze63jLgazkCnITEfjp3FYqplwbSMJAFBtSCJpqh6iuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b9:64:97:dd:6a:e0:c1:f5:a7:31:9e:a8:aa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=e21a903c9c79a6c1f15562f9c112feb02c1d97da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:c0:d4:91:d6:d7:4e:b5:22:fa:3c:6a:a3:
97:f8:3a:1e:0f:63:80:de:ac:2f:c8:20:08:27:4c:
35:f1:4b:ff:33:5a:d9:d6:a8:8c:93:ca:46:56:e3:
a8:57:58:5e:28:74:39:d6:95:32:2c:1f:3d:8b:4a:
9c:49:4b:05:87:73:c7:22:67:d7:eb:71:b5:76:9b:
dd:48:ad:fb:c6:8a:26:bc:2d:62:47:93:3b:07:74:
a8:08:d0:c5:fa:80:51:91:7c:6f:93:42:47:d5:58:
7c:1e:04:0c:d2:a1:95:c3:8d:ff:0a:58:7a:90:c4:
fe:ae:ba:bf:40:88:00:73:d3:4a:33:3c:7f:41:08:
70:fb:f0:6a:90:a9:25:fd:9e:0c:c4:40:b6:58:61:
5d:ae:2b:e8:9a:61:ff:a8:76:2b:d1:92:68:d2:db:
e4:ab:73:26:66:db:c0:1b:4c:65:ec:f4:28:ff:e4:
8a:38:c0:4f:25:de:17:77:17:83:40:ab:eb:b3:c6:
e8:dd:82:dd:e4:0b:3b:1b:45:a5:b3:37:0f:5b:45:
75:e5:37:d9:ab:78:22:ec:84:09:03:4d:a8:3d:ab:
ee:85:0f:68:6a:94:3e:85:fd:b0:45:d3:54:6b:93:
5c:f4:e4:a2:55:aa:7a:a7:2b:d9:99:b7:ce:2f:05:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:90:3C:9C:79:A6:C1:F1:55:62:F9:C1:12:FE:B0:2C:1D:97:DA
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:36:3b:2b:07:96:fc:09:b9:3d:0c:1a:c2:84:b6:29:05:df:
a0:c7:89:db:eb:ba:d7:32:72:9c:9c:ce:ff:d3:2f:ee:1c:cc:
87:32:b6:9d:ed:6a:9c:2b:6b:e2:ad:8c:e5:75:87:fe:ef:19:
66:0a:d3:37:53:55:49:05:70:d7:5c:cf:3f:90:b4:88:db:3b:
76:dc:90:51:83:52:61:50:5f:9c:c3:25:20:43:e8:89:7b:74:
3f:e1:81:1b:63:94:d2:5d:b9:fa:4e:2a:ba:fa:f5:95:ed:3f:
1e:24:03:4d:5d:0d:35:f9:e7:6d:47:66:c5:a7:42:50:b9:e4:
4d:38:ba:ba:f1:0a:d1:87:08:c8:68:c5:0c:cc:b1:56:49:25:
ce:71:f3:71:a0:21:32:f1:d3:62:68:37:8c:57:05:47:0c:6a:
9a:9a:d8:49:83:19:e2:e9:d2:68:37:79:68:ad:35:b1:36:0c:
64:45:35:c2:9b:5f:35:80:70:19:2a:7c:3f:be:ee:5e:1f:7c:
59:d6:8c:44:d6:3d:b2:28:0f:0a:93:cf:5e:04:0a:48:94:3a:
fc:92:49:31:d0:5e:3f:ae:b6:6d:61:b8:24:e7:9d:c2:71:88:
e5:e1:5a:6b:f3:b0:58:88:5f:bf:02:eb:f5:7a:6d:d1:87:3b:
50:2f:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:28 2025 by rpki-client