
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier: RaUUSB8+7pJyUB/NiBKeBVQzBFW23bvgLPZG8laOHjQ=
Subject key identifier: 3E:69:B5:C0:3B:38:C4:3C:CE:A7:5F:9A:B5:18:EC:83:6C:E9:C5:59
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 01988B7D04A3BA1BE097A730D7EBFE62AAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number: 0D17
Signing time: Fri 08 Aug 2025 21:01:22 +0000
Manifest this update: Fri 08 Aug 2025 21:01:22 +0000
Manifest next update: Sat 09 Aug 2025 21:01:22 +0000
Files and hashes: 1: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (hash: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=)
2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: iDZy5LXU1yx3C4CzZhdXn96oejaGmRch/HhHkKpfcus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:04:a3:ba:1b:e0:97:a7:30:d7:eb:fe:62:aa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: Aug 8 21:01:22 2025 GMT
Not After : Aug 9 21:01:22 2025 GMT
Subject: CN=3e69b5c03b38c43ccea75f9ab518ec836ce9c559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8a:7f:11:47:ac:3d:fc:63:f4:5c:d1:9d:c1:
20:78:77:2d:50:be:bb:61:87:83:29:e4:5b:55:c2:
fe:74:ec:17:7b:e1:a3:81:02:d1:51:e2:0c:ca:5f:
a5:9d:34:c3:83:26:20:a7:7b:53:12:9c:61:ee:e5:
5f:b6:c9:e9:8a:46:7e:25:66:f4:8e:28:63:64:3e:
81:cf:0a:5c:70:72:4b:98:23:09:98:62:60:64:74:
0f:99:1d:9c:04:fb:40:33:bd:7e:39:0a:33:67:5b:
cb:84:03:ac:ac:54:86:ad:bd:5d:bf:c3:74:4f:dc:
38:14:f8:2c:11:90:11:e1:3f:5d:fc:bb:20:6e:d5:
77:ee:9a:ca:dc:cf:e6:50:1a:a3:aa:6e:b8:7f:d6:
66:9a:ae:2f:ca:18:16:c4:10:32:bb:f4:c0:64:54:
d4:f9:ea:e2:d6:91:1e:0b:ad:f7:b2:f7:c9:9f:2e:
35:02:48:a8:71:23:69:67:21:f2:0c:87:ac:01:42:
a2:8d:02:ae:73:a1:de:b3:82:90:64:3e:ad:c6:31:
58:08:12:5c:1e:6c:39:0d:5f:60:19:ee:f1:16:85:
8f:34:21:dc:e8:77:e7:c9:6d:c6:2b:85:fe:b7:de:
43:75:8a:96:9f:5e:f2:f3:15:a0:85:45:67:45:6c:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:69:B5:C0:3B:38:C4:3C:CE:A7:5F:9A:B5:18:EC:83:6C:E9:C5:59
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6f:96:54:2f:4c:c7:9b:f5:d4:6a:c2:12:14:4d:78:55:48:
34:65:49:36:08:05:1c:ee:4f:72:af:27:6b:c8:17:35:09:f1:
72:65:08:d0:9f:59:d3:bd:92:54:f9:da:d0:fc:e6:23:d7:21:
40:fb:eb:62:30:df:ff:0a:3c:e9:d6:52:65:11:e3:ec:49:cf:
28:ba:a6:76:31:67:6c:d7:6d:c5:2b:0c:57:33:f9:14:60:10:
ac:11:80:a0:a8:79:50:36:a9:41:45:8a:56:99:7d:4f:da:96:
db:a6:dc:8f:a4:97:91:22:f1:4e:92:b7:2a:d5:0a:3d:ac:8f:
23:20:44:de:2d:16:ea:c2:0d:d2:1b:5e:7c:93:af:69:82:25:
81:b0:b0:c7:4e:ec:81:7a:8c:0f:c8:d0:c6:ce:90:a9:d6:62:
1d:3d:ca:39:c3:3a:8c:3f:25:03:08:1c:ac:85:1c:cd:19:49:
c3:61:93:64:2a:01:d6:51:ae:6e:2d:0e:65:21:5d:ed:fe:07:
bd:8c:52:88:0d:6c:84:02:6e:b4:59:fb:4c:9d:f7:b9:48:24:
6c:d7:a7:03:10:48:ca:a5:a6:16:cb:f3:ad:1b:31:80:1c:3f:
8b:c2:b9:4a:fe:89:dc:f5:04:c8:13:10:29:99:3c:05:6d:f0:
42:5c:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:55 2025 by rpki-client