Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier: TFWBgHPyyHeGSq8i2yjJdwzd4PrVdRkeJM591UtgTKI=
Subject key identifier: 9A:4A:DE:09:A5:BE:60:8E:34:63:9A:E7:E6:D7:2C:85:89:9C:08:01
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 0198D69840F0C7BE11121E96496060F12D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:38 +0000
Manifest this update: Sat 23 Aug 2025 11:02:38 +0000
Manifest next update: Sun 24 Aug 2025 11:02:38 +0000
Files and hashes: 1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: nGHJC0ZHAeTybkwv+vMs7uoWkPk382pj8nGj/sShAWw=)
2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:40:f0:c7:be:11:12:1e:96:49:60:60:f1:2d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Aug 23 11:02:38 2025 GMT
Not After : Aug 24 11:02:38 2025 GMT
Subject: CN=9a4ade09a5be608e34639ae7e6d72c85899c0801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:98:b6:a8:39:d7:b3:ee:b8:0c:be:4b:f0:
06:39:f0:f7:fa:67:ef:74:da:ff:d9:0e:15:ee:6f:
83:cc:a9:aa:e4:dc:34:ce:41:29:7d:22:4c:6f:eb:
0e:af:00:87:4a:f4:c1:f7:bb:fe:98:5f:c2:4c:af:
5e:b1:ee:0d:f9:e4:e2:a8:08:5b:f2:99:ff:35:82:
3b:ee:48:f0:9f:c9:8d:2e:0b:1c:45:e5:2e:51:57:
49:41:b7:61:e6:98:c6:2b:c8:96:2f:2f:ef:41:21:
c1:e8:20:67:01:89:b6:28:23:d9:c4:5e:7e:39:17:
5f:99:fb:74:c2:f6:b8:e0:a0:b6:05:d2:ff:c1:f0:
b3:27:4b:03:3e:77:66:9a:ca:af:8e:21:c0:01:c8:
49:da:3c:d5:dc:7e:5e:0b:1d:cd:56:17:0f:e8:b0:
14:27:d1:ab:61:ea:47:24:64:7d:ce:92:15:b2:c8:
72:d6:c6:e7:49:f7:0a:8a:61:52:e7:d0:4f:a1:32:
07:2e:a6:74:64:2f:b4:9e:39:8e:10:15:3a:84:8d:
62:89:9e:a7:09:17:a0:fc:4c:34:03:6b:dc:84:62:
fc:3a:21:ee:6a:9f:f9:47:9d:34:9f:42:ed:cc:12:
92:55:8d:42:34:e8:1f:08:5f:e1:9b:37:b4:9e:9a:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:DE:09:A5:BE:60:8E:34:63:9A:E7:E6:D7:2C:85:89:9C:08:01
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e2:67:e2:92:c0:72:b1:58:69:0e:f5:71:ef:f1:51:d3:37:
f3:38:4b:35:5b:50:6d:1f:b7:2c:2a:ea:7d:db:98:34:e6:f7:
70:72:50:9f:11:23:01:d9:32:81:cd:31:33:5e:ab:a0:1e:48:
33:12:ac:f2:3e:a0:d2:76:8b:b4:f3:60:f2:1f:5c:fb:b3:1d:
86:88:0e:b5:66:e6:e1:35:cd:d7:3f:66:5c:cd:13:ac:2b:61:
45:48:e5:55:21:c9:e5:59:47:fa:47:28:1c:19:a0:ce:8f:c3:
bc:57:38:1d:7a:9e:38:73:3e:b8:d2:b3:66:d8:82:99:9d:0a:
b3:d6:4a:f6:11:f6:39:52:21:eb:e5:00:4e:e4:b8:22:7d:ed:
d7:b1:28:70:20:74:21:71:31:02:40:18:98:84:de:ac:55:21:
30:a9:f8:9b:ec:6e:b6:8f:69:66:1a:53:55:4f:d7:bb:7b:9e:
6f:7e:b7:fd:e6:25:ef:76:d4:33:1b:fe:a9:5d:55:81:6c:17:
ec:e1:17:fa:71:da:4a:0f:7f:25:db:42:80:98:e6:e0:5b:f1:
4a:60:38:dd:51:78:6e:e3:75:62:0f:c1:25:1f:84:f5:64:0d:
b7:02:24:f3:35:eb:ea:30:31:4e:66:64:10:c7:19:6a:78:16:
62:bb:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:46 2025 by rpki-client