Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: lyHpeyDP0Ur7aK78Tpmpha0BMcYjtykeUEgtX4QyTH4=
Subject key identifier: A6:75:FA:1D:14:12:92:17:5F:41:3A:45:67:36:35:16:31:0E:85:BA
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 0198D515BB5D6904FCC05345E91F489A0518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 06B2
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: hKQjrVI11V6Nycr4oiQqFmHa/k4iLGPywfufDSDrkTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bb:5d:69:04:fc:c0:53:45:e9:1f:48:9a:05:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=a675fa1d141292175f413a4567363516310e85ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:da:4b:85:95:bb:ab:cf:bc:50:c1:d9:49:
8f:98:2f:cd:50:0c:31:df:17:f6:62:2f:15:7a:34:
6b:5e:c7:a5:7c:7f:ab:e6:6f:b4:ff:6b:f3:76:08:
f3:07:34:07:b1:da:ee:12:4a:f6:c9:76:b9:92:0f:
85:f7:f6:6d:45:40:9d:b6:b9:b1:0d:c8:95:1b:2d:
bc:72:bc:70:f1:2e:09:19:1f:b2:a2:b4:22:c9:a5:
34:3c:b5:29:30:b1:88:66:a3:d6:d9:83:7a:5c:f6:
59:fb:ae:59:54:d8:80:f9:2a:5c:3c:30:5b:f4:32:
78:16:8c:ce:25:35:e1:b0:bb:6f:be:f0:b5:2f:c2:
d5:4c:59:b3:44:d5:9c:ac:82:51:0c:1c:ae:75:ed:
98:bf:7d:4d:55:1d:e6:4b:73:b0:3c:c5:33:54:1b:
7b:1c:c4:17:a1:6b:ea:a4:78:c1:d5:4c:a7:74:63:
bf:10:d6:75:ed:28:14:7f:b0:f2:94:de:bc:bb:02:
b1:bd:c5:19:14:f1:a7:9e:32:fe:c5:4d:a6:bd:bb:
12:a9:1f:0c:98:64:a8:c0:27:91:90:44:90:46:76:
d8:8c:40:cf:e9:33:f3:db:cb:0f:6e:8a:97:b2:92:
aa:c8:f8:0d:ba:be:12:4b:d1:f8:ac:34:50:d0:cd:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:75:FA:1D:14:12:92:17:5F:41:3A:45:67:36:35:16:31:0E:85:BA
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8c:20:17:bf:16:6b:7d:01:86:ca:26:c9:38:cd:bd:e4:c0:
63:0e:ca:cc:b4:49:d9:c4:61:d1:fc:89:79:e1:57:a9:76:95:
67:a2:66:88:36:69:d1:e2:10:d8:a2:d5:0c:7c:b5:6b:52:10:
5c:a2:05:1e:09:84:60:8e:80:0c:70:82:a8:e2:96:4f:cc:2d:
c0:aa:70:46:c2:53:6a:73:c3:44:f8:ca:b0:a7:b1:03:3e:70:
cc:ff:cf:c1:0e:dc:90:07:ba:6a:32:42:14:af:10:96:cd:ca:
cc:28:0f:58:57:e0:ef:db:eb:99:f0:3b:b6:d6:af:43:45:df:
11:f7:34:c8:eb:ee:0c:1c:44:55:15:86:5f:5c:96:cf:69:dc:
6f:93:9e:cd:a2:20:94:b3:8e:1a:5b:22:8b:fb:3f:01:a3:b3:
c8:b3:3b:13:ce:30:d3:2e:2b:5d:ba:78:39:52:a5:ca:42:28:
3b:af:6a:f3:d1:64:fe:d5:29:94:34:fe:a4:ba:fe:11:93:1e:
9a:47:c8:21:4e:f4:1b:fb:f4:97:54:5e:78:d1:ba:45:13:0d:
cc:b9:7b:65:46:61:ea:38:82:4f:b2:39:0a:0c:08:29:d9:9f:
d7:40:32:8a:42:30:23:25:a1:79:25:6a:7f:83:66:31:97:39:
26:24:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:54 2025 by rpki-client