Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: zonsfR/oeckNqjo1pt0r+anRxKglKBhh6WdWgd2BuZE=
Subject key identifier: D9:ED:6F:EB:C6:35:21:A4:5B:D7:DD:93:07:11:8D:6C:18:0C:53:CC
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 01988BEACEC1CD0FD3DF27E13428E39DE9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 23:01:17 +0000
Manifest this update: Fri 08 Aug 2025 23:01:17 +0000
Manifest next update: Sat 09 Aug 2025 23:01:17 +0000
Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=)
2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: W8lrp9YNrf2LNNa2SIXHmJ10haXmU1793q41J2+3E1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:ce:c1:cd:0f:d3:df:27:e1:34:28:e3:9d:e9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Aug 8 23:01:17 2025 GMT
Not After : Aug 9 23:01:17 2025 GMT
Subject: CN=d9ed6febc63521a45bd7dd9307118d6c180c53cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:c4:63:93:24:3c:0b:22:3d:7c:64:1f:8f:
1f:a0:1c:4d:53:5c:58:2f:df:ba:ba:56:12:a6:f0:
29:71:cd:f5:2e:a6:7d:4d:80:82:e2:81:93:39:4c:
0d:d0:4a:93:92:c6:0f:5b:22:57:4f:a7:db:52:9c:
fa:33:30:3a:fd:54:54:d6:e6:0e:24:97:68:22:70:
c4:0f:d4:b6:ae:99:a6:37:43:7c:d3:e7:04:69:4c:
70:13:52:41:06:e2:76:67:2f:c0:a5:82:1a:d5:82:
bc:3e:84:7e:5a:b8:83:95:65:ec:d0:63:cd:4a:6e:
57:43:9b:e6:f8:9b:0f:68:f9:38:50:82:c4:67:47:
35:23:08:41:4c:cc:fe:4b:fb:0a:1e:fc:5e:22:a2:
02:6b:a9:53:1a:1f:7a:d1:10:cb:5f:c7:77:28:a5:
3b:f8:c7:92:a1:12:ce:19:3e:a1:d8:f6:20:cf:66:
93:ac:0b:41:50:b9:0e:e0:4c:ba:7d:58:22:96:92:
14:4b:bd:b4:fb:58:f6:a8:5d:40:b8:0e:74:c2:2b:
81:98:dc:b7:68:ea:a6:b4:2a:0b:ea:5b:fc:75:0b:
65:9a:12:37:a5:a3:8a:96:bd:3e:f7:e3:52:07:41:
dd:99:e5:03:81:88:e8:31:61:aa:7e:ab:8e:9d:e8:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:6F:EB:C6:35:21:A4:5B:D7:DD:93:07:11:8D:6C:18:0C:53:CC
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:09:a2:c9:5e:9c:01:9d:2b:63:ef:fd:f0:25:c3:99:1e:9b:
38:e6:35:d9:60:07:8e:2a:46:92:c8:da:08:b2:c0:26:95:9e:
d7:a2:76:a3:ce:42:db:32:3e:44:a7:23:a0:38:54:18:e8:76:
21:d8:50:ad:52:d3:13:94:29:b8:ce:fd:52:4d:c8:11:1d:41:
dc:c7:e7:9c:01:70:69:4c:e4:67:bc:8b:26:df:e5:6e:0c:5a:
5f:1a:9e:2b:dc:1a:fb:a8:bd:be:be:e1:65:14:b0:f5:34:c0:
22:c2:18:64:91:31:f6:4e:2f:dd:2c:16:ae:ac:c9:34:83:b0:
c2:e4:ad:dc:e3:69:83:7b:1e:c3:4f:e8:96:f9:44:9a:f0:b6:
a4:2f:0f:09:02:65:3f:d4:6b:7c:1d:f0:df:b5:d9:ae:0c:38:
01:37:68:6c:fd:52:78:ef:bd:88:80:41:07:56:be:0a:0c:95:
c2:34:aa:12:4e:af:0e:63:55:74:9c:79:43:cb:9b:c6:b5:02:
c2:25:2e:6b:91:8b:27:0b:db:74:13:8a:cb:d1:4f:60:cc:c9:
7d:4a:b4:12:4e:e8:11:93:8e:e6:75:72:ee:52:37:50:80:7c:
d0:12:84:6a:c8:aa:5f:f2:ec:91:25:7c:30:83:c1:d8:56:22:
9a:90:40:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:05 2025 by rpki-client