Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: nCU6OnN4xu6sgaTuv90ha4VSOtP2jGK0hTcTQGpndsE=
Subject key identifier: 5D:B8:6D:4D:04:B0:6E:75:41:21:D2:B5:DA:FE:65:94:0F:96:CD:67
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0198D515E0D1C50FE235033D12EC24FD21DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 04:00:37 +0000
Manifest this update: Sat 23 Aug 2025 04:00:37 +0000
Manifest next update: Sun 24 Aug 2025 04:00:37 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: 3/hxOUPC5UZRk7t2I92j7TZEzKqjsBdA6G4sVhdBwSA=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e0:d1:c5:0f:e2:35:03:3d:12:ec:24:fd:21:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Aug 23 04:00:37 2025 GMT
Not After : Aug 24 04:00:37 2025 GMT
Subject: CN=5db86d4d04b06e754121d2b5dafe65940f96cd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:0f:e2:c2:95:26:44:d2:00:44:ab:8d:85:
ee:3b:7a:dc:a2:1e:35:b6:e5:d0:e1:54:34:5b:ee:
f2:a6:47:2d:92:53:90:88:b0:58:53:e6:f6:96:44:
03:ea:53:c7:8f:37:57:c9:df:b3:ea:01:ed:2f:da:
a9:2a:57:66:77:25:e0:10:13:96:94:b3:f5:51:04:
49:71:50:b2:39:4d:44:b1:93:8d:c7:66:df:1d:9c:
d8:01:73:9a:26:b3:d1:e5:08:89:2b:35:66:b1:31:
a6:47:65:00:ad:66:b9:7d:b6:c7:0b:86:1a:25:a1:
50:06:3d:63:ac:a2:4c:65:43:6f:a5:28:e1:24:8c:
47:4f:3c:80:68:54:36:e9:38:ff:c7:e4:21:9d:c5:
68:40:51:0f:db:cb:7c:cc:a0:3a:76:1e:5a:2c:e4:
2c:2a:5b:7e:fe:e2:2e:6c:69:32:d5:46:1e:4f:d1:
d6:16:af:a7:6b:97:c3:3a:64:52:54:91:aa:40:80:
f5:47:70:0b:08:55:ca:ce:f0:f6:d9:93:c4:05:39:
ce:04:15:91:7b:b8:e6:df:9c:a9:a6:8d:46:cc:0a:
a9:61:ea:cf:8d:31:81:60:16:23:61:dd:34:bf:7c:
02:d8:1a:f9:95:18:3f:05:b8:dc:1a:a9:16:fd:1e:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B8:6D:4D:04:B0:6E:75:41:21:D2:B5:DA:FE:65:94:0F:96:CD:67
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:a5:19:eb:cb:f1:3c:a8:0b:a4:64:6a:6e:ee:45:d8:4b:
02:16:bc:15:16:5a:b3:04:dc:af:3e:f1:a2:b5:77:2c:ec:18:
51:77:e8:fa:cd:d1:39:af:f1:c8:1a:00:0f:f6:39:13:da:a4:
9f:24:eb:58:21:2a:88:db:35:87:55:24:87:25:c8:a6:ad:f7:
dc:89:d9:59:fb:71:25:77:d5:21:35:72:39:d2:f4:48:a3:8f:
b3:53:e2:e6:8b:66:80:61:71:86:74:b1:68:95:c9:f9:0d:65:
39:18:33:07:ca:2e:b8:aa:0a:b3:2a:84:80:a9:b6:e0:f1:e8:
18:87:1e:1d:90:1e:03:88:35:5d:4b:fd:7a:f8:7f:0b:c6:03:
e8:eb:e5:97:b9:1b:7e:80:be:83:f1:d0:48:bd:ff:45:bb:17:
bb:44:7f:13:11:0d:d0:1d:92:ba:75:e1:20:87:6c:8b:4f:d3:
f4:69:c5:ef:13:62:7f:8c:fe:41:3d:d9:b1:19:19:eb:5e:59:
35:8e:8b:af:1a:1b:73:e5:88:a8:7c:b9:4d:91:b4:e6:e3:e9:
68:85:71:2e:b3:ac:d1:a8:0b:91:30:c3:f8:8c:bd:23:58:08:
9d:dc:87:ff:69:b2:37:71:20:e5:a6:d2:35:1a:89:ec:37:f3:
a4:9c:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:18 2025 by rpki-client