Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: B9ofcNVaye3Au5fiuIL+AYnE05scdPA6m6OXlaLJhvw=
Subject key identifier: 4D:9A:37:84:A9:24:8D:08:AF:23:04:A1:75:BA:DF:B9:FC:8E:9B:CA
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 019885E87C6DEA36959DECDDBDA444251C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 19:01:02 +0000
Manifest this update: Thu 07 Aug 2025 19:01:02 +0000
Manifest next update: Fri 08 Aug 2025 19:01:02 +0000
Files and hashes: 1: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (hash: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=)
2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: 3iQH730Jhno6o8sDtxmy3GJg89mbnLEDPH/J4pEJ/V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e8:7c:6d:ea:36:95:9d:ec:dd:bd:a4:44:25:1c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Aug 7 19:01:02 2025 GMT
Not After : Aug 8 19:01:02 2025 GMT
Subject: CN=4d9a3784a9248d08af2304a175badfb9fc8e9bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:a2:3d:68:ac:be:56:ab:6c:28:b5:f8:e4:
6a:eb:76:74:dd:54:17:83:f4:d0:9e:c4:34:98:29:
50:45:39:0c:82:ac:49:ad:18:8c:d1:03:79:ee:e2:
76:12:b4:3e:64:1f:32:ac:0c:19:80:30:a9:64:fd:
5b:9d:c9:4f:d1:bd:5c:34:47:95:cc:14:c9:35:d9:
95:e1:9f:86:09:e6:99:c3:a6:85:83:a8:0d:c6:88:
40:e0:dc:6f:bd:81:af:09:21:61:27:d2:88:9e:4e:
6a:3a:72:0e:4c:77:e9:10:08:c5:7f:ce:0f:76:2e:
17:92:4a:f5:eb:2f:93:9e:76:5b:82:0e:16:3b:42:
7c:11:18:1d:1b:11:a8:ac:69:4d:14:14:a7:74:15:
13:b8:8b:14:fd:00:66:22:b9:78:a0:9f:8b:d0:1a:
0b:0f:29:91:e6:1f:0e:3a:70:97:e0:07:d3:d8:78:
85:21:fa:54:cd:04:aa:84:a4:26:40:b7:52:88:71:
37:e3:d7:16:60:46:25:6f:5d:13:2f:84:ac:c7:19:
e5:75:3f:4a:1c:04:38:61:49:77:f2:50:78:b9:73:
e9:47:87:07:a3:8a:b7:2e:1b:34:5b:14:eb:74:cc:
c1:5b:5a:69:86:c0:ec:df:bf:1e:df:81:84:1d:4f:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:37:84:A9:24:8D:08:AF:23:04:A1:75:BA:DF:B9:FC:8E:9B:CA
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c3:8b:50:28:8d:a3:8d:17:32:e3:fe:d0:6e:ad:99:13:19:
b1:79:5f:6c:32:17:68:92:41:c3:37:d1:49:c4:ab:80:67:13:
68:22:10:e7:95:1d:ea:52:c0:26:d0:b6:03:99:7d:cf:3b:d5:
fe:1e:9d:90:6e:e1:9e:b9:da:05:ee:38:b0:7b:8f:d8:20:b1:
ad:e7:25:41:a5:0d:05:5f:5b:bd:9c:a5:59:92:d3:b9:f9:d8:
3b:ec:4e:d7:78:9f:4b:47:f7:e5:20:42:0f:9c:a9:38:39:f9:
1a:1d:3c:23:ba:5f:40:77:d4:c2:7c:22:33:45:6b:2c:64:f6:
9a:ea:5f:9b:92:2a:17:41:32:cc:64:ac:ba:24:dc:42:df:b6:
08:9d:df:db:36:1b:86:6a:0d:9b:05:5e:f6:39:b8:e2:41:7f:
1b:22:13:de:83:28:5e:5b:f6:3a:a7:3b:3c:a1:32:43:bf:55:
08:ad:52:e4:32:c3:00:c2:fa:76:08:ad:ac:36:9e:68:ea:81:
32:a7:9d:d5:80:97:60:23:b5:ca:5c:4e:0f:1a:a8:4b:84:2a:
ec:53:06:9b:41:74:50:33:4d:98:d5:f2:a2:b9:3d:31:e8:26:
f1:6b:5f:27:4a:66:10:95:77:53:a3:9b:97:e6:b7:66:01:f5:
c1:f4:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:59:48 2025 by rpki-client