Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: xybrSvsPy5wX2RES9lQhu1ElbXHuddRtuXO/YldUmdg=
Subject key identifier: BF:24:89:A6:9E:60:AE:FE:EF:07:D8:BE:EB:8F:8B:A0:E7:EC:0A:F0
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 019872CF612CEC5475BDAE85ACABA3BBD82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 02:00:50 +0000
Manifest this update: Mon 04 Aug 2025 02:00:50 +0000
Manifest next update: Tue 05 Aug 2025 02:00:50 +0000
Files and hashes: 1: J8TxeAmZBzINa9syBZ1B4yTXcxY.roa (hash: 2QfjawOPNl3mivz2h5LwmzlkbdOnVy10wna7TIvLBVY=)
2: MwzfvZntetFg-_eX5DgAKUVWZK0.roa (hash: px93WC5fRlO4NzSq6ywwEqfisL0ff50EWTLfIp14D3o=)
3: Z2S57soliueMTVEyGovf75orajw.crl (hash: T3CEDRvnwllE623Z7sVd13mxcbtDNcRcJYtD0GaVBLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:61:2c:ec:54:75:bd:ae:85:ac:ab:a3:bb:d8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Aug 4 02:00:50 2025 GMT
Not After : Aug 5 02:00:50 2025 GMT
Subject: CN=bf2489a69e60aefeef07d8beeb8f8ba0e7ec0af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:94:04:72:34:2e:bd:4f:35:d2:76:3a:92:
17:b2:54:c0:7e:95:03:a4:78:ce:f7:54:a8:3d:eb:
0b:bc:f2:05:8b:db:56:1a:d2:c2:c3:6c:26:fb:b9:
75:2e:ff:12:d9:4e:05:32:87:f7:a2:07:40:ef:a3:
f6:b7:60:03:10:00:4e:65:8c:cc:7c:d1:d7:72:f7:
55:ec:a5:20:01:6c:f0:3a:94:a1:3e:a7:57:c2:84:
00:b9:2e:67:a2:0a:20:fc:2c:68:4e:a8:bf:4a:f7:
b1:c2:1a:09:48:05:11:0e:96:4c:b6:1a:dc:8b:f4:
a4:63:77:70:67:34:2b:36:5c:56:c0:93:1d:f1:57:
12:d9:a9:43:68:a6:c1:98:b9:53:0b:e7:36:ff:68:
bf:a9:1a:63:56:4e:fd:4b:55:fb:48:93:45:0a:42:
c6:69:7b:61:26:74:26:f5:13:ca:82:5c:16:d5:ce:
ba:ea:a4:a8:3d:ca:c6:34:15:65:e3:5d:c0:a5:f2:
dc:99:06:0d:35:cb:6f:4c:9d:e9:9b:37:27:a4:fd:
d1:d6:07:9b:f7:83:77:c6:ed:b9:8c:7b:57:ab:8a:
15:33:4e:9a:9e:7e:73:56:d9:68:5a:89:0f:c1:d3:
5b:ba:aa:bd:27:67:be:aa:a6:88:7e:70:3b:0c:20:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:24:89:A6:9E:60:AE:FE:EF:07:D8:BE:EB:8F:8B:A0:E7:EC:0A:F0
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:65:ea:cf:c0:03:9d:62:b8:69:7c:b9:70:4d:e2:10:8a:6c:
1a:5a:d9:77:84:92:49:a3:f8:87:f5:35:40:c2:14:2f:3c:a9:
86:1a:18:cd:f3:f5:82:53:4f:dd:56:c4:d4:60:c2:d5:f5:fb:
71:de:a1:31:4a:cf:b4:32:bc:31:1c:f2:4f:54:9f:05:24:4d:
29:e2:d0:08:b9:78:16:48:4f:c5:dc:ae:4d:09:0f:4d:cd:a3:
07:b0:f8:2e:b6:a7:ca:1f:2d:b8:b6:e9:bf:f1:60:a7:5b:83:
f6:87:90:4c:3e:b0:8a:cb:e7:b8:4a:fd:68:cd:a9:09:2c:83:
5c:db:01:22:f8:0c:c6:87:e6:0b:be:5e:9e:3e:81:b5:4f:7d:
ea:93:5d:9c:b9:9b:95:78:04:a6:76:23:d8:ca:f9:eb:90:8d:
e1:bb:bf:9a:71:c9:9f:ba:58:e6:e2:e8:3e:eb:4d:48:3f:d3:
04:5a:b8:fd:9a:04:df:e0:1e:f2:71:1f:90:cb:af:3e:fd:86:
b0:44:3d:75:47:ab:12:61:78:25:ba:0e:27:b5:0e:0f:8f:7b:
eb:34:a2:23:96:19:e4:76:93:44:24:cd:19:57:23:d5:16:1d:
57:7c:74:6b:91:00:70:21:3e:d7:8b:22:3f:92:0d:70:e3:21:
d7:55:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:08 2025 by rpki-client