Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: Y9mV15Sinuy5/4V2XJkO9I1QKdJuJzcp8t7EtunKk6w=
Subject key identifier: 48:54:BB:A3:F9:26:0C:55:5F:CD:95:BA:66:12:EC:11:DC:B4:8B:DE
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 0198D66031F146F8A6E37FFC75AE0083BEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 139B
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: z1gcFAATysDvB2g8MrGMXa3ZSCWuciNsV2cbI9c1CWs=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:31:f1:46:f8:a6:e3:7f:fc:75:ae:00:83:be:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=4854bba3f9260c555fcd95ba6612ec11dcb48bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:a1:a5:12:70:6a:db:d1:b0:aa:65:6d:41:
52:75:2f:33:db:a2:be:a3:94:5a:f6:b0:4d:01:11:
e2:2f:3a:eb:60:5e:f8:e0:ae:a8:f5:91:68:9f:92:
4d:9f:66:6c:9c:77:51:b7:00:69:67:20:80:b5:15:
bb:df:fa:f5:d0:bd:1b:4b:6a:b6:de:f1:c0:39:07:
31:2d:29:69:52:1f:70:bc:97:20:31:a8:3f:00:f3:
32:70:5d:fa:14:e0:fd:02:98:33:f9:14:f5:89:3e:
b0:cc:5b:74:40:98:4a:c1:f0:29:ff:31:ee:3e:5c:
01:9c:e3:87:24:41:01:6c:36:3e:1d:24:9b:af:08:
d5:2c:c6:28:65:c7:1e:ec:5a:af:a6:cc:37:7f:52:
01:d7:07:cd:0d:7e:d0:1f:b6:6f:9e:aa:e2:8e:80:
90:49:45:ef:d8:86:28:83:73:37:66:27:ae:80:50:
b1:11:00:55:bb:b2:65:d1:22:e4:6b:ea:4f:70:43:
e7:23:2e:a8:73:d3:de:9d:e7:5b:27:60:c0:32:f9:
8c:98:a8:49:61:29:a4:0c:af:8a:dc:2a:36:9e:1d:
d9:9c:8e:be:f1:01:f0:4c:04:fd:fe:f9:62:12:72:
b3:cd:1a:b0:17:98:15:ce:de:88:3c:76:53:e6:c7:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:54:BB:A3:F9:26:0C:55:5F:CD:95:BA:66:12:EC:11:DC:B4:8B:DE
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f2:34:c4:67:1a:cd:f4:39:d3:13:1f:c5:94:54:b7:aa:8b:
52:ae:5b:ac:79:a5:c1:9c:d9:91:06:16:96:6d:8f:25:ac:ef:
5b:c1:38:4d:a4:10:00:57:21:2d:97:13:e7:40:8d:4a:90:63:
d6:62:7e:9d:3c:02:9b:85:f8:93:54:62:0e:cb:db:9b:4c:4f:
3d:05:5f:13:17:cb:48:3b:61:21:58:d4:50:25:99:8c:a2:56:
e9:e2:0d:e9:d8:09:de:cd:2f:33:39:a0:af:8e:c6:4a:85:43:
b1:03:8f:e7:42:21:53:a7:bb:1e:d2:b4:f9:dd:fb:f2:c3:51:
ac:8d:98:12:58:38:37:d2:1d:eb:d8:77:c7:8f:68:54:48:d2:
a5:38:19:f4:74:d2:29:5b:1f:6c:8e:1f:de:00:32:ca:f1:40:
0d:5e:e8:b5:09:5f:25:0d:83:18:9a:54:b3:ee:83:dc:37:4e:
c0:dd:b8:10:42:e1:d3:ab:46:5a:07:89:20:63:a9:c2:38:72:
08:03:41:b3:ff:04:ad:66:46:b6:aa:f4:69:89:57:a4:3f:55:
94:8b:36:97:1a:76:12:ec:5c:b3:d3:b5:65:d0:da:51:f2:97:
5f:2f:34:73:ff:47:22:4c:c5:53:9a:f4:96:b2:a6:af:a5:66:
81:30:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:37 2025 by rpki-client