Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: m87NuzSuBfOWRNMxpQAgzkj1NjxoUvnYS7SgTJxTMfI=
Subject key identifier: D0:D1:9A:90:3C:9B:7D:D0:2B:FF:31:C8:D6:BE:D3:59:BE:F0:F4:C8
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 0198D5F11D025CA9BA6F2EB2A0971B4D81F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 1459
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: gKtnRwRWQ8e6WHFTWeKrmIaTDQzip63UmFPjP35q/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1d:02:5c:a9:ba:6f:2e:b2:a0:97:1b:4d:81:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=d0d19a903c9b7dd02bff31c8d6bed359bef0f4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:d3:d8:d3:fe:33:e1:eb:9e:6a:bf:d0:91:
8b:2d:ab:15:bd:12:4a:f4:fc:d9:57:c4:9d:72:72:
3e:58:22:08:59:62:52:4e:77:0d:ec:f7:13:c2:2f:
2b:68:0a:75:ae:e9:30:17:34:06:e6:ce:98:c9:f0:
c9:99:6a:6a:f6:12:57:cf:8b:ca:02:1c:08:07:da:
12:47:30:a7:2a:c4:3b:1b:cb:36:dd:80:5e:30:8b:
bc:30:2a:84:4b:ea:12:b8:52:58:02:18:76:ee:08:
df:67:a4:c7:39:df:ac:af:c6:8c:c4:b8:75:9f:7c:
3d:77:b7:c9:09:e0:95:7b:c2:f2:1e:15:06:84:7f:
6a:17:90:f9:5c:41:fd:4b:dc:2a:e0:40:19:c0:dd:
12:7e:d2:69:d2:78:78:45:77:f3:6e:85:0a:91:36:
f8:63:c0:89:90:9f:9c:41:74:64:b1:05:56:3a:bc:
80:cf:32:09:f8:7a:c0:7b:89:f2:c3:4e:61:a5:bd:
87:d9:ad:30:ad:27:9f:e2:43:99:06:73:e6:a2:26:
42:aa:f5:23:63:91:3f:38:1a:f7:79:af:5b:dd:bc:
da:13:36:d7:32:53:32:31:b4:a8:29:98:52:91:cd:
c9:f7:12:b7:68:3e:a1:b8:79:3f:10:c7:b1:c0:31:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D1:9A:90:3C:9B:7D:D0:2B:FF:31:C8:D6:BE:D3:59:BE:F0:F4:C8
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:69:4b:46:41:d4:57:92:da:23:09:b2:3f:2c:7d:4f:88:87:
b4:e2:c7:ef:27:fb:33:9b:79:ee:85:8e:23:1c:6b:c7:5e:5d:
9a:be:e1:7f:0e:f5:32:22:3f:2d:5e:fd:77:9b:af:d7:e6:0e:
b7:00:bd:ab:10:4c:e9:7d:95:a9:57:fd:66:ce:bb:0e:b0:cc:
d5:a5:7a:d1:15:c3:83:66:fa:23:ac:0b:b4:05:d6:71:5f:56:
1f:56:86:a7:6a:36:cd:6c:71:91:48:8a:13:42:48:17:da:90:
74:e4:2b:75:83:c5:68:c3:ff:f3:bd:5b:70:60:06:6d:26:dc:
90:75:c5:f5:0c:25:39:e1:6a:33:bc:b3:cf:d1:b5:1c:b9:fc:
25:db:62:42:60:0f:d2:9e:1b:48:41:cd:06:c4:c9:1e:62:2f:
9a:41:bd:9f:9b:62:2b:3f:f5:cc:7a:6e:30:c7:22:a4:b0:92:
ac:56:8b:1f:0d:b9:db:d0:70:a0:b9:cd:4b:5f:b6:ac:cd:09:
bf:da:c5:ca:91:55:03:1b:fc:3d:a6:2c:80:ae:d2:19:bd:e0:
cc:73:01:e5:2a:d5:92:83:cc:5f:9e:8d:87:99:cb:56:a0:8e:
39:0e:dc:a2:55:5e:de:c9:9e:4b:6a:de:bc:46:47:6e:74:b6:
b9:8a:eb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:39 2025 by rpki-client