Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: lrepNDbDvjfOfgOhqMIy3rCtrzpXyZRPZU1Vqud8xus=
Subject key identifier: F1:C6:40:8D:6E:48:FD:A1:56:93:5B:60:9A:2A:7E:5C:46:34:8A:B0
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 0198D69843E9D6B966241A6B1818B6F032E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 0215
Signing time: Sat 23 Aug 2025 11:02:39 +0000
Manifest this update: Sat 23 Aug 2025 11:02:39 +0000
Manifest next update: Sun 24 Aug 2025 11:02:39 +0000
Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=)
2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: M6VWakgp4wcCmaCBFqVRV1W25YnDZPiZ4pKr0TJaXdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:43:e9:d6:b9:66:24:1a:6b:18:18:b6:f0:32:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Aug 23 11:02:39 2025 GMT
Not After : Aug 24 11:02:39 2025 GMT
Subject: CN=f1c6408d6e48fda156935b609a2a7e5c46348ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:b1:b2:03:f8:c5:fa:06:fc:ca:37:31:23:
17:bf:48:bc:44:e0:46:00:16:c9:05:fc:09:69:4b:
7a:be:4b:5d:21:cc:38:a6:d3:f5:8e:8d:d3:f3:05:
8c:b2:6c:3d:a9:33:51:60:28:98:3d:bd:56:e1:93:
0c:5b:6e:ec:40:b2:30:2f:e9:89:ec:f6:54:5f:51:
46:ae:ea:57:5a:96:be:22:46:7a:b0:10:c8:20:6e:
d6:a6:0c:8a:81:db:eb:5e:9c:bf:8e:c4:6d:98:b3:
11:8a:73:4f:8c:e1:0f:75:3b:36:dc:da:f2:73:3d:
ae:e9:1d:d7:cd:46:b9:11:89:04:33:5b:42:1a:01:
58:07:62:b2:dc:18:2d:61:9d:44:63:ca:89:69:d5:
66:74:6e:7e:68:6f:86:61:52:a1:b4:73:dd:62:fd:
4d:71:9c:be:09:42:bf:73:ac:bf:56:2a:43:26:9b:
5e:d5:cb:2b:04:62:6c:0a:e3:18:1d:61:5e:27:e3:
e4:dc:b2:08:9e:a9:f0:c6:91:ef:b2:62:47:70:9c:
e1:dc:ce:b7:ad:6b:75:a3:40:bc:43:8e:bd:24:dd:
83:d7:34:25:ba:d5:90:60:3d:ff:a0:74:21:9b:74:
0b:e4:68:0c:b6:af:86:e1:4c:4b:ce:df:94:c8:74:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C6:40:8D:6E:48:FD:A1:56:93:5B:60:9A:2A:7E:5C:46:34:8A:B0
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:47:fe:11:cb:96:41:04:80:e3:c3:b1:2a:7f:68:c4:81:
3c:4b:9c:fa:fb:df:94:07:73:f2:bf:e9:9d:1e:bc:da:76:f6:
12:cc:3d:b4:d2:e8:17:3a:42:ea:a1:e4:ba:11:09:b1:db:5b:
9b:c4:f4:6b:e5:a8:4f:fb:27:34:15:e1:85:5b:7d:9f:f5:a0:
63:c7:d1:7e:10:5d:9f:22:58:88:8c:f7:f7:23:90:45:a1:30:
37:1e:7c:8e:2c:cb:24:7c:87:ee:b6:2a:e6:c1:03:dc:d5:9b:
f8:2f:fb:5f:78:0e:9a:8a:18:d3:0c:a2:3a:c2:49:bf:42:22:
a0:53:59:dd:9a:12:b5:43:c1:d7:c5:8b:6a:35:94:e9:2c:46:
e3:bd:6c:aa:f2:3b:a1:5c:39:c3:71:f2:0a:c4:dc:0b:8c:d1:
ba:24:24:d7:e8:4b:db:b6:e0:42:c7:63:6c:d6:ce:f2:94:ec:
82:c3:44:0d:f6:b6:00:c6:90:e3:b5:8f:7d:1f:dc:f8:8b:0b:
3b:64:9d:08:2d:94:9a:03:22:80:1a:19:92:7e:10:00:d5:8d:
8c:e5:d7:ae:94:74:7d:a2:78:93:87:33:8b:e0:21:d7:c5:cc:
e8:7a:d7:00:d6:2d:c8:17:33:85:73:21:27:91:cb:ab:82:a4:
8f:bd:94:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:25 2025 by rpki-client