Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: zz2r1y8IRWAsgVIdqauTOwCAjJUagxCg3UEodVgk900=
Subject key identifier: FB:32:3E:96:D5:E7:03:C4:9A:74:03:10:43:9A:36:AA:0A:79:A6:87
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 0198D773C8BB62A7D6DFB5B6047311A25477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 15:02:26 +0000
Manifest this update: Sat 23 Aug 2025 15:02:26 +0000
Manifest next update: Sun 24 Aug 2025 15:02:26 +0000
Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=)
2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: 0Y6K1BzQiRRHwT1DYgIMdAodHnRZSXEclU7xI/WMg2Y=)
3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:c8:bb:62:a7:d6:df:b5:b6:04:73:11:a2:54:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Aug 23 15:02:26 2025 GMT
Not After : Aug 24 15:02:26 2025 GMT
Subject: CN=fb323e96d5e703c49a740310439a36aa0a79a687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:49:1f:58:a5:e1:ca:87:88:05:53:fe:e1:
91:bf:1f:e8:4f:fd:c8:88:f6:42:4b:67:1b:e5:bd:
9e:1f:3e:7a:b0:1b:f2:57:df:e1:44:a1:15:53:59:
23:a1:76:f7:7e:25:f4:86:5f:88:07:65:6b:4c:61:
88:06:dc:cd:80:cb:d2:41:f5:63:2f:41:ad:02:f3:
36:98:61:46:31:c8:49:e6:dc:79:4a:13:a0:d9:75:
9b:d1:13:93:07:ae:57:6c:ca:80:06:4d:77:51:7d:
37:01:62:23:c8:bf:88:fe:ff:ff:26:6f:bd:bd:b1:
7c:86:4b:8f:df:fa:fe:13:cb:5d:06:01:bf:bc:c7:
01:82:d8:9e:1d:9e:9f:9a:6a:ae:a5:ac:c4:67:39:
08:d4:65:9b:0d:f7:bf:88:e2:a8:0d:dd:3d:1e:b5:
06:2c:1a:80:e2:69:8d:69:2b:dc:d1:20:a2:5f:52:
63:8e:a4:34:a1:a1:80:8b:52:87:a8:aa:4b:a6:be:
ff:a4:f9:56:46:d1:8c:d9:a3:1a:e5:45:d4:16:9c:
7a:34:78:95:34:d9:66:69:26:51:86:72:8c:91:c0:
c9:5a:1e:6e:85:fe:60:e7:b6:5b:28:86:92:ca:87:
31:19:a2:d2:56:ce:e9:af:ce:48:83:ee:f5:56:5e:
2c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:3E:96:D5:E7:03:C4:9A:74:03:10:43:9A:36:AA:0A:79:A6:87
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:da:c8:48:56:87:f5:cb:6f:9b:15:cf:02:6a:71:1a:70:19:
33:6f:07:7c:ef:8f:7c:11:46:ea:ae:f3:fd:32:d9:93:f9:4d:
f8:35:38:c6:38:1d:c2:b6:93:b2:0b:3b:e2:af:70:df:e0:59:
6d:26:f1:66:cc:8b:e2:56:7c:c0:d4:50:f2:8b:6c:ff:cf:25:
5c:09:cb:64:57:15:e2:98:94:5e:77:63:c1:da:7f:36:4b:a7:
19:9a:23:bc:79:43:78:36:1a:85:b0:2f:ab:7b:3a:c2:e9:bb:
13:21:5b:cc:08:5d:41:50:cf:4e:21:09:1b:84:10:38:f4:0e:
a7:f6:85:70:9a:c0:63:c6:2c:4f:c2:3d:64:25:e0:80:28:88:
85:93:b1:22:02:6c:2c:6e:36:2e:37:9d:93:08:29:b0:88:45:
4b:10:26:06:67:a8:a7:9b:36:73:c9:34:bd:7e:71:a2:68:2f:
46:2c:9b:c5:6d:51:0e:11:cb:42:6a:47:63:6a:49:30:31:66:
36:14:57:2c:a8:fd:25:b4:86:96:6e:26:a1:69:45:7f:8e:e9:
d3:01:29:08:69:88:ee:7c:e9:4c:d5:7f:71:74:af:c4:6e:14:
f7:d4:5b:c0:a2:1f:ca:5e:eb:50:6e:81:a1:07:8a:78:db:a5:
78:fb:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:11:46 2025 by rpki-client