Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier: vNkKLszaDlxYg9hS9IdaRXFHP61SQGsPiI2x/fRd9Q8=
Subject key identifier: 57:6A:1B:F5:1D:CD:6F:BB:B7:D1:09:F2:42:CE:76:8C:D5:4F:8E:6D
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial: 0198D7E1A45BA891A4FBFADA2F9A70404691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 17:02:25 +0000
Manifest this update: Sat 23 Aug 2025 17:02:25 +0000
Manifest next update: Sun 24 Aug 2025 17:02:25 +0000
Files and hashes: 1: Rn5W7oiVYRufZC2Cc9HQB686zNI.roa (hash: r6LX/rQ2IMQ0lnqajopwaJaJ6RgScSLx/FlgSbqRLTc=)
2: XHUUpmsTIvK_KTF6Ns7MAyI399w.roa (hash: Hd7LpYgtsmwvaWEwTnrD15eJzW3l7MahPrkz65fNT1U=)
3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: ZUaR91x4zIqzMqcPcgfnTaadsBLseejJjCJFsTjk25I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:a4:5b:a8:91:a4:fb:fa:da:2f:9a:70:40:46:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Validity
Not Before: Aug 23 17:02:25 2025 GMT
Not After : Aug 24 17:02:25 2025 GMT
Subject: CN=576a1bf51dcd6fbbb7d109f242ce768cd54f8e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:21:09:30:39:93:fd:c0:d7:7b:97:67:b7:
38:c8:40:8f:ff:be:ca:a1:3d:c2:17:37:b7:62:e5:
45:cb:3a:05:90:5f:71:27:b6:84:af:0b:1f:15:83:
33:3e:80:ac:4a:a5:db:f5:83:c6:5d:20:e4:4f:8b:
97:8d:a2:a1:2d:83:ef:fe:b1:fb:1a:bf:b3:03:ca:
7d:36:39:95:81:30:a9:2c:94:ab:ac:4f:ab:cb:e3:
33:53:a0:e6:aa:5b:8c:64:6f:c0:31:09:63:5d:e4:
b4:6d:7b:33:96:7e:4e:d6:74:f2:f2:70:8b:58:97:
4b:5a:79:1e:11:02:a1:63:28:1d:5f:c9:60:8a:66:
5e:e5:63:6c:23:2c:88:85:89:c2:f8:d9:9e:db:80:
95:04:0d:98:f9:14:c1:a2:14:1f:55:02:12:a4:18:
93:91:25:e3:26:04:d8:cd:7d:21:9f:65:58:2a:64:
ff:50:7e:66:9c:29:61:83:32:e4:14:3c:da:c1:bc:
be:fd:e2:37:91:9a:95:2a:22:36:7c:f0:ef:e6:f3:
41:1f:fb:ab:85:83:1c:e8:5f:08:de:89:8c:7a:9e:
0d:0a:fe:c1:64:22:42:8b:73:52:3c:8f:cb:6f:3b:
b8:89:71:5e:27:88:c1:18:04:7f:72:64:e0:b4:ef:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:1B:F5:1D:CD:6F:BB:B7:D1:09:F2:42:CE:76:8C:D5:4F:8E:6D
X509v3 Authority Key Identifier:
keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:b8:11:9a:e6:3d:92:21:0f:07:2f:f2:ce:87:63:82:5d:
38:ce:09:ff:ca:63:99:18:62:d7:17:2f:e4:34:17:a7:41:70:
ca:e9:83:0d:ef:c3:bf:32:47:f3:95:e0:3a:d0:3d:d3:be:f9:
6d:48:d9:73:00:4b:c4:e2:78:9a:8b:64:de:48:d1:bf:36:89:
92:c5:f7:83:7d:98:58:83:6a:95:f7:24:f4:91:84:8f:73:69:
11:09:62:ef:97:18:4f:26:ec:9e:8b:ce:09:2d:45:bb:36:30:
f4:24:e2:80:a9:ed:c7:73:98:fe:df:04:52:17:13:3f:94:0f:
c2:74:67:8a:9f:49:e8:f0:95:17:f7:71:b3:2f:32:f2:f1:7b:
f2:55:5c:49:a5:db:08:37:fc:67:1a:5e:79:78:2c:1f:74:40:
c7:f8:d9:23:2b:35:4f:98:c2:ba:bc:39:33:e3:ca:89:01:ce:
2b:6a:25:01:56:16:11:b4:ec:82:c8:fb:f6:ba:1f:3d:af:48:
52:1e:21:e0:14:ad:61:4f:b2:69:89:51:01:89:d5:78:ca:fe:
7d:ec:ea:9e:bf:9c:bf:49:c0:27:e8:75:50:a9:c7:74:31:3c:
9b:87:4a:b3:ba:55:2e:3a:fe:4a:80:3a:a2:c7:02:28:91:13:
c2:75:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:42 2025 by rpki-client