Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: 567ICoVdDzl/JfvlodzMyzVImwCdmAg1fPqM3jSaOew=
Subject key identifier: B0:F9:15:6A:4F:6E:D5:49:B1:DC:E4:71:B6:BD:ED:FD:23:CD:DB:30
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 0198D96022350CB55A5FADEADBEA69F1675B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 05CE
Signing time: Sun 24 Aug 2025 00:00:12 +0000
Manifest this update: Sun 24 Aug 2025 00:00:12 +0000
Manifest next update: Mon 25 Aug 2025 00:00:12 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: CrogTt1M5ZEzoayziJf7ZVN87ofmhbB5mffJScfzW1g=)
2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:22:35:0c:b5:5a:5f:ad:ea:db:ea:69:f1:67:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Aug 24 00:00:12 2025 GMT
Not After : Aug 25 00:00:12 2025 GMT
Subject: CN=b0f9156a4f6ed549b1dce471b6bdedfd23cddb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:df:a2:a5:42:d1:32:d2:3f:eb:9e:b6:eb:
fc:c3:68:8b:ef:14:e0:cb:2e:ef:df:8a:f9:21:05:
df:51:bb:49:32:a7:be:37:2e:4d:6c:f4:71:e3:f5:
bc:82:4b:86:40:22:f4:68:c7:bd:e3:71:11:d0:e4:
52:d1:af:c0:12:4c:85:4c:91:fe:86:7b:97:fb:b3:
22:7c:bc:2c:68:0c:ef:c8:2c:d2:99:77:61:2e:a8:
49:af:9a:a3:13:e8:cb:78:1c:14:97:e6:64:4d:d2:
a0:0e:c7:7a:f3:0c:8a:31:42:b2:71:e9:f6:a9:42:
ac:94:79:28:39:92:34:2e:f3:0c:2b:92:79:67:eb:
34:75:ea:4c:af:56:b0:29:9c:b8:d3:99:86:90:a4:
d5:41:03:ef:36:a9:0c:a5:c7:b4:9f:f8:42:e8:15:
0f:b0:a6:8d:c7:b9:c7:c1:28:c8:1f:ae:e5:55:a4:
0e:fe:d1:b5:f2:d0:6f:ee:38:d1:fd:2a:7a:a7:dd:
67:f9:89:22:e1:b5:ee:ab:e3:ea:d5:c5:09:a9:e1:
cb:71:c1:e9:26:e3:59:79:90:df:05:e2:15:ff:ed:
ee:4d:a2:37:01:05:28:f0:a4:88:ea:01:20:c8:8f:
0c:93:3c:80:1f:77:03:37:d5:e4:4b:7f:93:0b:0d:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:15:6A:4F:6E:D5:49:B1:DC:E4:71:B6:BD:ED:FD:23:CD:DB:30
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:25:5c:27:81:19:f0:30:81:3e:06:24:88:bd:67:0b:a8:03:
79:5c:b3:4b:5b:0b:31:9b:17:a7:21:62:30:12:87:99:6e:f8:
60:ef:46:85:fa:32:f1:00:b9:67:29:93:83:3a:17:2e:8d:df:
5c:ff:a3:c3:e5:5c:89:c0:4f:a5:d7:4d:d7:d2:e0:ce:48:14:
4c:9e:4e:04:fb:ec:4c:ff:d8:46:d3:0b:b7:80:c6:c5:e4:8a:
98:02:20:0e:9e:e6:12:a7:5e:68:25:de:41:24:3f:d2:37:be:
03:03:b0:16:e9:6f:7c:67:ec:84:d6:6c:df:56:76:d1:a0:86:
ca:86:79:85:f6:ff:15:2a:59:fd:64:08:88:e3:ea:f0:84:7c:
3e:08:6a:c2:98:4c:69:e0:b5:15:0f:c7:c1:ee:a6:3c:5b:9a:
08:04:db:f7:f6:b3:48:73:ee:8e:5d:f1:95:6a:1a:f1:b7:8f:
5e:ff:1f:ce:2b:51:b9:93:73:a1:8b:a0:06:31:91:5e:2d:ba:
8a:58:f1:cb:81:6f:f6:db:26:af:89:8c:96:22:51:03:35:06:
34:04:99:70:e5:7d:f8:c0:04:53:44:aa:e8:84:78:8d:b1:30:
76:fa:9a:e7:8e:fa:cf:ad:01:58:3b:13:7e:69:dc:22:78:a0:
01:e9:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:41 2025 by rpki-client