Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier: ELUP11Ybhq/C/fxU8ZSSI48h830T3+BOigT31+wouEU=
Subject key identifier: E9:A8:74:11:41:E0:45:5D:BB:B5:CA:EF:FE:98:EC:21:53:B7:18:02
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 0198D660B47A3D6D5FDB4D093B11CE207BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number: 0686
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: kruUQbukgNiiBEO9u3lsB/rkAgq357ID0N0S6aP6BYI=)
2: z_g_oyYscLU1IVMsubV8om2IHIM.roa (hash: TMMjkM/DLDsCF3bsXeBPNo5kbzaCJniVgP9Feba83Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b4:7a:3d:6d:5f:db:4d:09:3b:11:ce:20:7b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=e9a8741141e0455dbbb5caeffe98ec2153b71802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:c1:18:0c:7c:a8:09:06:f4:01:79:a3:e4:
b5:54:ea:00:a8:37:3e:61:35:42:39:51:3f:2a:f9:
bb:e3:6d:4f:25:cf:cc:95:b9:75:47:d3:2e:7f:61:
d6:fe:90:25:9c:9f:8d:22:6c:ea:44:8e:83:d3:97:
34:25:6a:8c:47:ef:22:56:7e:f8:54:f8:b0:e2:78:
b1:37:37:db:ae:a1:1f:5b:9a:14:72:a3:85:67:bc:
62:90:43:6b:76:a1:94:a1:45:4b:65:47:bc:b8:1e:
cb:fa:7f:ff:eb:5d:89:a5:98:36:98:a0:fb:9d:0d:
bc:fc:b1:0f:3a:75:7c:72:7c:4a:1c:47:c4:6d:f1:
aa:b5:55:e6:32:5f:00:1e:05:52:a1:73:30:41:df:
8b:07:ec:c5:1c:b4:ca:64:3c:69:fb:8d:d3:66:9d:
d4:20:a7:d0:9f:30:68:3b:6a:b9:91:ea:3d:c3:78:
cc:75:22:b5:63:95:f0:49:31:9b:b9:bb:ab:f0:49:
5b:c1:d3:85:ee:61:3c:4b:26:2a:75:d3:24:37:23:
bf:67:00:93:0e:b1:f9:7e:55:d9:10:df:81:3a:b6:
22:38:1f:fc:da:d2:ca:7e:5f:e6:a9:3c:e4:8b:b9:
a4:83:37:23:f6:df:87:b9:9c:96:4f:1b:85:91:74:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:74:11:41:E0:45:5D:BB:B5:CA:EF:FE:98:EC:21:53:B7:18:02
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:17:09:a3:17:c1:cd:86:d3:d0:8e:f1:e9:88:0a:58:d1:aa:
84:ee:ae:0b:95:74:71:cb:7b:fd:93:c5:ad:69:14:4c:d6:8e:
bc:31:de:fc:a9:98:56:f6:27:2e:dc:33:df:bf:ee:30:fb:df:
76:cc:1f:bc:ff:c3:55:3d:36:4b:34:3a:ba:66:1d:d8:45:8f:
c0:dd:25:a0:44:00:18:c0:c9:54:72:40:98:f1:57:cc:66:1e:
f3:cf:73:99:97:e0:ae:47:7e:ed:3f:9a:5b:51:cd:94:5e:7a:
17:d5:a0:79:31:11:90:89:3b:da:00:4c:6d:5f:d1:ec:5b:f0:
e0:ef:7c:9b:22:6b:99:4f:bd:24:5d:6d:ab:31:5e:2d:f0:2b:
1d:d8:b7:c1:f6:d1:05:a5:cc:3b:a9:7e:2d:c7:ab:12:7d:6f:
8c:0a:c2:16:67:92:65:93:9b:c8:30:e8:6e:71:8e:53:8d:19:
19:06:1e:c8:56:ea:dc:ab:63:ff:a3:37:24:70:3e:a2:31:42:
17:39:e9:90:6b:85:99:a7:9c:10:0c:71:64:0e:40:20:72:a8:
e3:f0:60:d3:2b:6e:bd:70:f8:0f:2b:21:19:e8:71:18:a0:f2:
f6:2d:22:04:be:d8:b6:3a:de:f0:ef:f0:32:9c:30:98:00:21:
c1:11:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:17 2025 by rpki-client