Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: B5kxO91FdY5AYGE15z+qutUzJQSHzOqs4I4rjhv32BA=
Subject key identifier: 69:1B:81:23:D6:9E:64:A3:CB:13:86:16:91:02:82:81:8A:44:EC:33
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 0198D54DC48801AFE82356F3927268B031A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0C5E
Signing time: Sat 23 Aug 2025 05:01:40 +0000
Manifest this update: Sat 23 Aug 2025 05:01:40 +0000
Manifest next update: Sun 24 Aug 2025 05:01:40 +0000
Files and hashes: 1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: WL6+lFVZlSuEg37BeGVRPk/CTfl9wTKHYDQvAApf2es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c4:88:01:af:e8:23:56:f3:92:72:68:b0:31:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Aug 23 05:01:40 2025 GMT
Not After : Aug 24 05:01:40 2025 GMT
Subject: CN=691b8123d69e64a3cb138616910282818a44ec33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:78:0c:53:25:93:26:3d:aa:e9:00:ae:51:
8c:16:b8:f9:eb:34:4f:7b:0b:ff:e9:37:6d:84:02:
f2:d4:2d:55:17:8c:8b:42:2c:ba:40:7b:ab:f5:0b:
4c:bb:86:34:11:59:f7:46:d9:e7:16:8e:8e:61:e3:
2f:ad:0f:38:32:01:e1:e5:a4:ea:dd:1a:fa:a8:b9:
14:d4:5a:da:1c:c8:0e:7c:c8:3b:ad:65:e9:b3:01:
9c:1f:79:af:0f:63:96:e2:a8:50:55:25:b0:8b:b9:
cd:43:0f:02:b4:24:80:9b:f3:29:f4:77:b6:3f:ed:
ab:e2:25:a1:22:2f:a1:e5:9e:9b:94:c7:5a:67:5c:
82:08:0b:c0:5a:e1:a6:a6:5c:3b:c8:89:23:d4:3e:
aa:77:f8:c8:ef:1c:51:9a:79:59:bb:26:4f:4f:d3:
dd:9d:52:31:c1:66:0a:f9:b7:9c:87:38:13:e2:21:
e7:b0:fd:cd:53:a2:5d:a7:66:6d:05:56:b8:fc:67:
6f:4a:dd:27:fe:72:65:fd:1a:7d:68:fb:85:4b:27:
91:dd:49:4d:91:c5:cc:84:55:58:2a:f3:2b:f6:10:
a4:58:2a:e0:2f:4f:1e:48:96:30:b9:98:8a:84:0a:
f6:b3:08:44:13:74:10:b7:a3:13:a2:2e:d6:fe:cf:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1B:81:23:D6:9E:64:A3:CB:13:86:16:91:02:82:81:8A:44:EC:33
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f4:90:36:42:9f:c5:60:c5:25:8e:62:33:b8:b0:1b:f8:14:
80:ab:a0:8f:23:81:08:48:1b:02:5c:0c:8a:02:80:8a:fb:73:
28:8f:31:05:f0:ce:7a:50:c9:7b:65:89:22:5f:f7:da:9d:ce:
ba:c0:84:75:24:70:c4:9a:28:6f:54:a3:e4:41:d5:3e:91:78:
54:42:39:70:3c:c4:76:be:d0:d2:34:ee:fa:f1:38:eb:d4:2a:
43:b0:03:9c:10:ab:88:34:c0:a1:b3:7a:8f:48:70:08:e0:66:
e6:6f:cd:af:88:2e:9f:3a:a0:65:93:f7:2d:a0:6b:e8:f5:57:
06:9e:8c:c0:90:ac:80:b0:ba:25:1e:6f:2f:1c:d3:4f:8e:71:
e2:f1:01:3a:32:28:45:21:14:11:19:ab:d6:e3:2b:d3:f9:ed:
0f:0a:f3:3d:35:40:e6:00:86:d1:dc:9f:ec:53:0c:3b:7e:35:
99:4e:18:7e:35:60:2c:42:df:46:6e:20:3f:58:d6:c4:0a:df:
aa:06:3f:bf:44:04:40:4f:a5:04:c3:da:dc:50:8a:ef:02:da:
ec:3f:76:df:99:d9:84:72:a8:87:1b:21:89:0c:82:b0:63:bd:
7d:4d:82:72:54:d9:48:71:60:89:69:03:a9:7e:25:23:fb:f0:
ba:68:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:54 2025 by rpki-client