Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json)
Hash identifier: CULOUGNlScYqCBk2k6RK2UHFlh4tIPANEoLEmsLTOcM=
Subject key identifier: 32:C0:3E:4D:1B:57:13:21:5F:97:59:90:EA:3F:97:F2:6A:2C:DE:03
Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Certificate serial: 0198D73B302BEAC4D37D0205B46308CCAFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:00:36 +0000
Manifest this update: Sat 23 Aug 2025 14:00:36 +0000
Manifest next update: Sun 24 Aug 2025 14:00:36 +0000
Files and hashes: 1: NJmmW764rdnW_zIUswA3g-8-n2M.roa (hash: uNbv9sZggt1kjUfoR4Ji7KAa4WT9RRySZVjN33ZdWTA=)
2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: E8pb9PSwKEaJfO5IRnrXjLYlMmAI2fKIdQHzWQ0FXKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:30:2b:ea:c4:d3:7d:02:05:b4:63:08:cc:af:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Validity
Not Before: Aug 23 14:00:36 2025 GMT
Not After : Aug 24 14:00:36 2025 GMT
Subject: CN=32c03e4d1b5713215f975990ea3f97f26a2cde03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9d:7e:05:fe:18:dc:fc:9d:2d:2d:45:95:b0:
3c:6b:7e:93:e4:a2:24:1d:45:49:a5:df:8e:91:d6:
0e:72:98:26:ff:d0:14:c6:1e:e2:df:13:96:d0:dc:
c5:57:9f:2f:03:53:c3:40:75:15:75:ff:de:9f:d0:
05:cf:33:43:74:5a:3a:6e:38:c3:ae:73:0b:62:a5:
12:1e:81:b7:92:4f:03:ca:74:9f:b0:02:cd:60:8b:
24:5b:a2:58:e4:13:92:ee:44:91:34:6e:88:75:c8:
2c:38:01:46:db:6b:67:d3:3b:d4:50:6b:54:0e:50:
2d:30:61:cc:96:66:7a:59:c1:c8:77:79:19:81:c2:
ef:3a:91:82:7c:b4:ac:82:d1:f2:21:a1:e3:d0:de:
b2:af:3f:78:3a:f6:96:86:d6:8d:4e:c6:68:28:1c:
e7:b3:f9:46:a6:51:ad:fc:e6:d2:83:7f:bf:47:85:
48:ec:20:01:0f:79:d5:67:54:8c:91:32:68:b3:23:
3b:d8:85:6d:7b:41:27:05:59:42:ad:45:bd:f6:c3:
55:be:a3:21:97:92:f8:41:49:0e:71:9e:96:86:9f:
41:c2:2d:0d:9a:ea:ef:39:94:a0:9a:b2:f8:93:38:
22:cc:a8:a6:49:07:bd:94:da:c5:cc:d2:be:3c:bc:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:3E:4D:1B:57:13:21:5F:97:59:90:EA:3F:97:F2:6A:2C:DE:03
X509v3 Authority Key Identifier:
keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c2:d9:a6:99:42:bb:c8:8b:9a:1b:2b:b5:71:5b:26:bd:85:
d2:f4:34:5a:89:85:5b:40:69:cf:5f:72:2e:fb:9d:04:c3:12:
74:cb:73:44:ac:d5:de:86:ce:ce:9f:16:b9:ae:4a:3a:ae:f8:
ad:20:72:29:13:3c:23:63:0c:33:e8:ab:b5:92:cb:b7:e2:e0:
b5:1b:26:27:56:f0:fa:e1:07:35:ad:5f:b5:51:ff:a2:8b:2e:
82:1d:90:43:d9:b9:05:09:4d:c8:ef:1b:ad:d8:14:a9:5b:d1:
3b:fb:47:8c:f2:34:08:43:f4:19:89:e0:cb:e7:c4:97:d8:ad:
66:16:fd:d3:f0:14:af:39:38:15:ce:3c:41:84:3a:56:de:42:
75:b5:24:36:08:32:4b:b1:50:08:54:e5:8b:11:5b:94:89:de:
86:13:92:68:20:e1:e0:16:4c:84:a8:b9:46:e1:5c:2a:79:c7:
57:69:ec:71:f4:a7:82:13:02:b3:93:6b:88:26:be:5c:2b:62:
b8:7a:59:f4:0a:5c:7b:6a:b0:47:1e:78:06:8d:fb:f0:8b:ee:
08:d3:82:aa:f0:9e:9e:1d:d2:c3:7f:e1:64:34:e2:0e:2a:82:
21:10:2f:3a:82:38:cd:83:7c:5e:d3:31:d4:4f:05:6e:01:d4:
c5:7c:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:45 2025 by rpki-client