Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: +M5QN9bXToxRXE2j9+2MbV3RR6u3qvNPDVcuSY4Gq/w=
Subject key identifier: 49:3B:7E:C0:99:B6:B4:30:70:76:79:8D:23:B0:6B:8A:FF:EE:E9:A0
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 0198D54E855737314ADB64D3D6E1C8C60A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 0544
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: 6C4YqxZ/qq4vdqpcyGFxV4Y6+5uHRxjSCzMV5u7Sc4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:85:57:37:31:4a:db:64:d3:d6:e1:c8:c6:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=493b7ec099b6b4307076798d23b06b8affeee9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:62:ae:bf:3e:89:16:80:0d:e8:a4:09:2b:
36:6a:29:f0:8c:e3:6d:43:bb:81:32:55:07:d7:fc:
df:13:c4:b3:b9:1b:ee:f9:44:ed:a3:cf:35:49:d0:
b6:f0:72:86:4f:93:22:4f:5c:38:15:17:1e:64:51:
4b:2b:59:fa:35:b9:47:ca:fe:88:d9:f9:95:d3:c6:
ea:12:70:63:c5:f0:c9:c9:ce:e0:6e:2e:ce:a7:a5:
ad:cf:93:e1:56:11:92:9f:57:a5:a5:a4:bb:ad:c2:
41:26:7a:7c:5a:e1:df:ba:bd:a7:7d:fc:f9:c9:56:
ed:84:06:48:44:fe:b6:ba:1b:55:5d:ed:e4:1e:be:
79:13:0f:aa:b1:e2:2d:ce:fa:b3:dd:e1:57:52:42:
56:69:5d:9e:53:f1:5f:4d:ea:0b:13:3e:f7:c2:5e:
ac:7d:a0:e6:31:9c:c3:ef:bb:7d:65:77:13:d0:98:
00:9e:60:e1:b2:76:a9:41:b5:4a:32:8f:c6:51:4f:
6f:f8:d4:30:2f:34:f0:21:f3:9b:74:80:4d:59:5a:
20:52:fd:e2:e8:08:ec:fe:08:2d:cb:03:0e:2a:e5:
6c:f7:f0:3e:90:4b:3b:de:56:32:bf:12:80:5f:b1:
a4:5b:db:c3:33:3b:da:aa:2a:fd:57:e2:a1:70:e3:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:7E:C0:99:B6:B4:30:70:76:79:8D:23:B0:6B:8A:FF:EE:E9:A0
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:4d:5e:c2:b0:ce:f8:ec:60:1e:57:ca:c6:13:03:45:9e:
fe:49:83:be:54:0a:4f:ca:ba:10:f4:17:72:0f:79:a7:fb:b7:
af:a2:36:77:48:29:0f:24:79:eb:7c:39:1a:92:e7:9c:75:1a:
08:1a:10:59:7a:3e:41:4b:7d:f5:58:fe:1a:dc:07:3a:52:4c:
26:0e:4f:b1:3c:10:c9:d3:01:9d:24:01:15:f7:24:77:5a:99:
68:68:3b:94:56:64:05:3d:f8:ce:07:e3:86:fc:38:18:07:4d:
7c:f9:ad:4d:c2:ed:70:cb:26:4e:1a:35:57:3b:b1:0e:1f:54:
ae:23:14:42:4d:c3:17:ea:70:2e:7c:5e:de:69:20:49:56:c8:
30:b6:cc:e6:ac:d7:38:f3:da:7b:3b:ce:cb:74:1a:c1:f6:66:
f3:1c:c6:6a:0e:c6:37:f9:a2:82:60:bc:1d:73:93:c6:51:9b:
b0:a8:0d:ba:88:ea:23:a2:e1:ee:b0:9c:46:b3:2c:e2:e1:2a:
2b:bd:80:84:57:c5:58:45:4c:16:a7:70:9a:08:10:bc:94:e1:
d4:0a:00:09:05:00:df:35:ed:1a:5b:04:0c:26:4f:44:59:62:
e5:21:2f:1b:ff:89:e1:07:0b:d9:ce:b7:76:2f:70:cd:a6:a2:
5c:f1:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:41 2025 by rpki-client