Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
File: Z6TsOPL_adJQX39i6Uw715i1hVI.mft (raw, json)
Hash identifier: 5rGE+0HJZhijh/coch/gEoDlseQT2gBnI1Ou7RgVtuM=
Subject key identifier: D4:D3:45:3D:3B:4D:00:DF:3E:69:6E:BE:4B:50:95:D0:B3:1B:97:8A
Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
Certificate issuer: /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Certificate serial: 019873066F9936CE6C9C8940BB45CCD96F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
Manifest number: 143D
Signing time: Mon 04 Aug 2025 03:00:58 +0000
Manifest this update: Mon 04 Aug 2025 03:00:58 +0000
Manifest next update: Tue 05 Aug 2025 03:00:58 +0000
Files and hashes: 1: Z6TsOPL_adJQX39i6Uw715i1hVI.crl (hash: AwTtpke8jOMx+6TRzq/PgBpj4j2Z4UZFLDNUGaei8QI=)
2: yojAQ3oth9lVhqX5wg8l8cBEUmI.roa (hash: o7RnG1CkyxwhqBFMnhN8mnO/r8Gaf2uetg2QG+K1/Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:6f:99:36:ce:6c:9c:89:40:bb:45:cc:d9:6f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Validity
Not Before: Aug 4 03:00:58 2025 GMT
Not After : Aug 5 03:00:58 2025 GMT
Subject: CN=d4d3453d3b4d00df3e696ebe4b5095d0b31b978a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:32:8e:3e:cc:1a:d9:6b:68:23:14:6e:2a:
c4:3d:7d:54:9f:c1:a2:f9:2b:18:39:27:25:f5:91:
61:15:c9:1a:6f:43:b0:fb:c9:e0:b9:6f:61:e0:7c:
a1:6a:1a:13:11:8c:ed:5c:e6:47:ea:d6:a1:ad:67:
dd:75:01:85:fa:38:71:ed:61:8b:f1:99:14:ba:b5:
25:6f:0e:b7:38:5e:1a:6d:e6:de:3e:97:e0:5c:f4:
4b:75:47:0f:f4:d1:2e:ce:5c:e8:cf:7a:44:de:bf:
a2:a1:89:cb:1d:8b:2f:ca:34:d7:f6:6e:68:cf:b9:
9b:2e:8e:62:e2:39:10:15:90:75:77:dd:e9:f2:da:
19:bf:4e:92:d0:e1:68:58:ee:62:09:27:63:b8:a8:
56:cb:e7:e4:17:21:9d:21:a5:49:77:01:e3:b8:3a:
5e:eb:57:09:c8:25:c6:75:05:20:52:3d:c6:e0:b4:
6b:22:ab:36:ac:54:02:13:bf:c3:8f:0e:16:d0:40:
83:17:f3:aa:a8:90:90:4c:ba:ec:95:ac:35:79:70:
b6:29:a8:77:65:18:9f:f4:92:d1:ce:66:71:51:a3:
c6:23:8e:24:a5:2a:fa:73:86:c5:c2:af:d2:5c:89:
bb:f9:22:bb:58:29:79:a7:93:73:65:d7:b2:9d:ae:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D3:45:3D:3B:4D:00:DF:3E:69:6E:BE:4B:50:95:D0:B3:1B:97:8A
X509v3 Authority Key Identifier:
keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:77:7b:ed:e8:55:34:6b:81:c2:44:69:ae:8c:64:7f:95:3d:
37:38:0d:74:6a:27:36:b2:b2:2b:9d:cd:04:23:bb:a8:82:4b:
82:1d:4b:01:66:23:3b:b2:0e:6e:51:24:45:52:34:b3:9d:ce:
d6:fd:28:df:4f:6c:96:48:de:63:eb:33:86:cd:07:ec:77:1c:
72:6b:41:3b:20:ab:1b:70:e9:ab:01:d1:10:68:48:13:9a:75:
0c:47:47:ed:9e:72:76:ac:02:af:c4:57:a0:1a:81:d1:8c:d9:
01:df:22:9e:8c:06:c8:cf:c9:7b:c4:25:f9:c0:0b:e5:0c:2e:
9d:23:a2:62:8f:f5:66:ff:8f:cc:92:ef:2e:4d:87:57:0f:dd:
ae:ae:0e:76:67:f0:fd:97:13:99:41:e7:06:30:8c:60:f5:39:
70:c7:2a:ba:4e:a8:d5:97:04:52:86:9f:be:6e:a8:6c:db:09:
d0:93:7c:44:94:a9:79:50:1a:ac:1e:40:ac:52:f2:48:a8:47:
8d:6c:3b:ba:b6:57:71:0f:55:0b:49:dd:11:c5:5c:e1:6a:e5:
60:14:27:e8:ae:46:85:1c:20:db:b0:ec:a1:39:35:30:ee:88:
1f:6b:10:32:bd:a7:d2:11:bb:65:87:7a:0a:34:3b:a3:9a:fa:
69:f4:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:11 2025 by rpki-client