Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: 9LQXT0vTKudfl5TQC6eXwvEEbEZicOZHrjBK25rBPvs=
Subject key identifier: 40:80:A5:81:C5:93:FC:2C:88:9F:A6:9D:F2:1B:FE:32:D8:B1:F0:09
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 0198D6605C969743005A6BFC30CAE3DB3A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0CD7
Signing time: Sat 23 Aug 2025 10:01:35 +0000
Manifest this update: Sat 23 Aug 2025 10:01:35 +0000
Manifest next update: Sun 24 Aug 2025 10:01:35 +0000
Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: Uc3vsf/uJNlri0/MXPp8utsHO5YyWr+CuzX/vSwMjtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5c:96:97:43:00:5a:6b:fc:30:ca:e3:db:3a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Aug 23 10:01:35 2025 GMT
Not After : Aug 24 10:01:35 2025 GMT
Subject: CN=4080a581c593fc2c889fa69df21bfe32d8b1f009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:71:6a:c1:ec:da:1d:25:15:90:1d:d3:10:
2e:52:7e:07:9e:b0:bf:d9:7e:bd:ff:08:5b:42:a0:
0d:49:f4:ce:01:67:f6:7a:03:53:3e:d0:a4:64:84:
b1:77:ba:80:63:3b:63:89:12:92:ab:1f:29:b4:f5:
82:4a:e5:14:26:f3:03:8a:39:3e:3e:2f:d1:e1:7a:
c7:f9:b7:ac:40:c1:a6:e2:4a:e9:c0:6d:b3:f5:51:
8e:98:33:d7:21:b0:3c:a3:fd:32:82:37:5e:35:20:
d8:d6:c2:e4:6d:d4:50:5d:27:03:ba:93:d5:74:2c:
dd:21:ff:aa:6d:54:ab:16:af:8c:65:9d:11:55:94:
10:c2:4a:c9:10:85:c0:e8:48:b8:cb:fe:80:58:f6:
9c:c3:2b:bc:07:d6:8a:de:62:c8:15:02:0b:06:1c:
c5:95:12:a2:74:a5:09:47:1e:b7:04:37:7f:f6:93:
12:58:d8:ef:5f:91:12:7b:5c:f1:19:fb:66:96:07:
10:be:b2:93:52:8a:b7:3c:91:7d:53:05:5e:8d:83:
26:7a:c1:17:fa:40:04:77:a0:c5:4b:ca:ff:0e:17:
d4:bb:64:c5:bf:40:db:1c:07:f8:35:8e:13:f1:1d:
e4:cd:c9:5f:e8:12:ab:a0:39:f8:e2:fd:26:7c:51:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:A5:81:C5:93:FC:2C:88:9F:A6:9D:F2:1B:FE:32:D8:B1:F0:09
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c5:42:59:ce:25:3c:a3:60:6b:b8:03:9b:1d:1b:5b:b3:09:
10:23:69:e3:e7:0f:25:9e:ef:d0:99:ea:ab:b8:a8:2e:cb:41:
2c:51:95:ce:d2:05:6d:41:c1:f1:9b:f9:63:a3:2f:d6:17:da:
03:7a:86:f0:c8:25:57:af:79:c1:e9:24:81:74:d6:70:91:0f:
2f:c9:f7:5e:52:6f:78:67:8f:f4:ec:db:7b:0a:8d:76:f2:5a:
b9:ae:73:dc:43:6a:c5:0a:79:24:0a:ea:bd:f4:6f:e6:81:96:
6f:6e:53:20:9e:ce:81:a0:cb:76:94:e8:dc:26:3b:c6:d2:3a:
fc:6b:35:f4:77:2a:31:f4:37:11:88:fa:db:f6:3d:6e:be:cc:
cf:1c:7d:b9:3e:0b:70:24:e2:70:a8:b6:dc:cc:c2:bc:e4:46:
d6:0b:c6:0c:73:5b:20:7e:1f:e2:24:23:6c:e8:e0:3f:78:8d:
8c:6f:f7:20:1e:e1:12:b6:06:5f:da:9f:88:fa:66:a5:51:fe:
e7:83:85:44:3c:33:fd:3b:34:31:19:5d:4f:9d:72:c1:db:5c:
77:38:2b:8f:e5:9f:79:1d:d1:0a:76:fe:f2:61:ae:fc:a4:b0:
00:74:0e:ce:44:21:0b:8b:57:10:40:92:f9:2e:de:45:60:05:
7e:84:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:57 2025 by rpki-client