Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier: XJ7caeNfSVQTp8glAGNJSVgFLdcLqOgS+2S//BaGGwA=
Subject key identifier: 24:68:56:84:D4:25:9C:89:1A:65:D0:FA:6A:22:B7:7C:91:1C:5B:E1
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial: 01988DD906990BAB9E9C3AD9190F2775B133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 08:01:07 +0000
Manifest this update: Sat 09 Aug 2025 08:01:07 +0000
Manifest next update: Sun 10 Aug 2025 08:01:07 +0000
Files and hashes: 1: LT0qB-gBAbq5frFGXTq1GqnXCfI.roa (hash: K2tXP/3iE8TclQjWefb7tiAmYpuF8VMrt60W/dO45lU=)
2: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: lWXiiBO+UKrCq1Se5qRN2+AX2DcWNgMDMNISPwpYmS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:06:99:0b:ab:9e:9c:3a:d9:19:0f:27:75:b1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Validity
Not Before: Aug 9 08:01:07 2025 GMT
Not After : Aug 10 08:01:07 2025 GMT
Subject: CN=24685684d4259c891a65d0fa6a22b77c911c5be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:f8:18:80:69:e4:81:4a:75:24:d6:ee:df:
54:cd:3d:ca:a3:44:f4:67:12:74:96:07:36:99:69:
87:53:8b:c4:0d:27:8d:7a:f4:4f:d0:08:77:b2:0c:
b9:0e:3b:fd:b7:ae:69:d8:ba:4f:1d:ca:ae:a5:c8:
33:c6:a6:d8:bb:df:97:80:de:af:aa:94:fa:b2:b4:
85:c7:ef:20:51:68:f3:69:0e:20:0b:ab:25:c2:a7:
20:17:b8:dc:eb:65:34:a9:b8:a7:8e:60:a7:73:36:
70:d3:56:9a:ea:f4:c0:cd:4e:84:0a:47:b4:64:16:
ca:04:ab:12:b3:83:7b:a9:d0:c1:e4:c9:58:7f:73:
c4:1b:39:23:80:37:40:54:12:68:11:b8:25:02:8e:
e0:fd:29:15:d8:91:8a:78:ed:96:e7:e8:29:97:90:
2a:03:25:33:52:b8:a8:96:e2:01:b8:43:ee:90:3d:
11:d5:7e:5b:3a:f9:fa:69:1d:6c:b0:71:e1:e5:83:
da:4f:57:cc:2d:73:d7:2a:18:cf:bd:b1:8a:eb:e7:
2f:21:0d:54:0b:20:95:ef:2f:84:75:25:50:97:cb:
7a:f8:3b:4e:cc:42:c8:15:a2:ff:38:3d:cf:6c:07:
c8:ff:69:2c:e1:31:8d:66:22:46:42:10:82:37:2e:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:68:56:84:D4:25:9C:89:1A:65:D0:FA:6A:22:B7:7C:91:1C:5B:E1
X509v3 Authority Key Identifier:
keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9f:92:7d:5b:89:c5:26:4e:69:b6:ca:57:ff:86:e6:9f:63:
79:a2:82:9e:ab:f7:df:4b:6f:79:83:a9:aa:72:c7:c2:6f:8e:
31:56:cc:b8:e3:33:20:bf:ad:9f:79:22:7a:b6:c6:b1:15:2c:
89:aa:e3:40:d4:bd:d0:80:6d:ad:ab:2d:54:60:b3:f8:3b:ad:
96:36:d0:fc:60:e7:70:5b:41:93:e2:c7:22:74:5f:b5:dc:7d:
59:6a:7e:9b:4b:76:51:13:ed:03:94:e7:81:7d:6c:4f:70:5e:
96:15:79:1f:2f:f6:b7:bf:70:3a:ca:ff:45:90:3a:a6:1a:4b:
f0:3f:1b:0a:c4:e7:3c:fc:a4:ed:e3:2c:7b:f0:30:a6:24:48:
e7:0c:5b:99:e4:a1:2a:1c:53:05:2e:60:fd:46:80:6f:c0:ef:
b2:d2:72:b3:97:ca:14:de:26:70:29:e1:57:7f:f9:8a:7f:98:
44:ae:d0:b7:79:f3:76:f6:32:25:ca:45:19:7e:bb:8b:27:ae:
33:38:d1:f2:4e:8e:61:0f:f7:f2:de:09:81:2e:7d:f9:ae:60:
3f:ab:c8:36:28:4a:5f:4b:d4:9b:80:6f:51:3e:f1:74:f4:ed:
05:60:f2:48:c3:3a:1d:c8:2e:07:e3:a4:a2:42:c4:4e:d4:60:
31:58:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:32 2025 by rpki-client