Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: CTktf9uSqHBtp0+tFO7I/CO/5V1E+VbdSp2fZGMVA4U=
Subject key identifier: 28:F3:1C:52:EC:4F:1C:0F:01:A4:C4:8A:7E:DE:36:72:08:18:42:DB
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 0198D4A7C7F15D74B9134E5855C58B090C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0C86
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: GVUeOB4dXXqj9XML1jN57j3Df5M.roa (hash: Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: ZLiygZuFKjS7yGv97AII+IUDM13np5AQ0ryTVoay5vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c7:f1:5d:74:b9:13:4e:58:55:c5:8b:09:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=28f31c52ec4f1c0f01a4c48a7ede3672081842db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:cc:1a:a7:0e:59:09:4f:65:1a:50:3a:ad:
49:1b:16:ed:d6:b9:63:1e:de:56:fa:12:bc:43:33:
67:9a:ff:bb:8d:df:64:9f:4f:ab:aa:69:f6:54:78:
57:a6:53:62:a0:30:46:52:5e:a7:d5:cb:52:e1:fa:
8b:0d:50:32:24:fc:aa:04:94:a6:ca:fe:85:10:11:
eb:60:93:bc:ed:49:51:7c:96:b8:f0:9c:d8:64:60:
8d:3b:af:28:2c:5c:83:2b:10:f6:5a:5a:38:b7:4e:
ed:f3:eb:60:02:10:eb:aa:58:ab:4c:6e:0d:dd:5a:
de:7d:d0:96:c5:72:cb:53:ac:e3:91:12:b2:67:c0:
c2:cd:70:8d:49:b2:d2:f4:9d:23:f2:0c:32:7d:f8:
3c:2c:71:66:30:90:c2:b4:63:5f:00:8b:66:e5:11:
2e:27:be:80:f3:df:3f:da:6b:b5:62:fd:e3:0c:f4:
5d:89:04:b7:b8:73:8e:24:23:23:87:69:7a:89:b9:
46:a6:9e:5e:bd:32:69:1a:31:8a:02:60:2d:66:88:
d3:eb:4d:6f:04:bd:f0:04:93:ec:82:9c:1f:e3:d4:
47:5b:56:a8:d5:71:1d:b9:12:cc:36:c0:b5:68:81:
92:0e:d9:cf:75:33:5d:02:d1:0c:a3:d3:42:31:c3:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F3:1C:52:EC:4F:1C:0F:01:A4:C4:8A:7E:DE:36:72:08:18:42:DB
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:91:82:7f:d6:f7:1d:2a:95:d7:3f:b1:34:ee:39:ff:0e:39:
d0:14:82:e5:1a:ed:e1:c3:c6:4e:c0:ed:75:c2:ec:c5:04:2b:
68:85:92:ac:9c:53:13:12:fe:ac:35:46:c9:92:d4:e0:91:93:
c6:e0:04:6a:ff:23:b8:74:aa:43:ea:7f:4c:2d:1b:85:25:a8:
16:65:df:5a:14:c8:fc:25:a1:e4:52:6e:2c:b8:a8:93:0d:6b:
46:7d:8d:66:15:69:72:1a:4f:3c:de:e7:eb:6b:fe:c1:64:d0:
6f:bf:b6:b3:90:22:3e:e4:90:f3:e8:71:05:af:dd:a5:03:c9:
e2:7e:50:f7:16:bc:f4:5e:39:e1:b8:6c:00:0b:57:f4:ed:c9:
5b:b6:26:fb:44:cd:ad:5d:6d:2b:59:6d:09:73:60:99:5c:e8:
d4:30:c0:a4:4d:33:9b:f0:b8:c8:5d:58:b3:30:32:de:58:8d:
80:9d:c3:cc:3c:d1:b3:91:17:88:56:85:10:d1:ee:66:6b:03:
fa:27:41:c8:4e:56:ba:ea:47:df:7f:4a:7e:f0:db:95:e7:c2:
d2:2f:e9:9a:01:3f:71:b6:f2:12:b5:a4:fe:a1:b6:94:45:91:
0b:06:25:b1:60:e8:12:e5:b6:4d:8b:e5:e6:93:40:83:57:bf:
0b:3d:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:20 2025 by rpki-client