Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: bLuX5xpBby75yEVGih6Mz0OlrOq1updveq/J+aF5jP4=
Subject key identifier: E1:F1:51:C7:BE:59:E5:D0:29:08:2B:E1:F9:C4:AA:39:E4:E0:3C:BC
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 0198730694DB1B2CCC5F37D41851C912C5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 03:01:07 +0000
Manifest this update: Mon 04 Aug 2025 03:01:07 +0000
Manifest next update: Tue 05 Aug 2025 03:01:07 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: azi0FXbzUK5DyWLab/w23evnbwyVrlaeQL77IKlpxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:94:db:1b:2c:cc:5f:37:d4:18:51:c9:12:c5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Aug 4 03:01:07 2025 GMT
Not After : Aug 5 03:01:07 2025 GMT
Subject: CN=e1f151c7be59e5d029082be1f9c4aa39e4e03cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:fd:1d:83:8b:9b:36:75:6c:13:5c:12:f7:
63:c6:67:c8:3c:42:72:e6:63:26:92:b7:0f:22:68:
fc:a4:13:d6:39:39:2d:fb:4b:ce:f9:f2:01:07:b0:
82:64:b3:f7:f6:f5:dc:3b:4c:6b:7a:4d:bb:d3:3e:
54:1f:f4:e3:6c:56:00:7a:85:93:17:7e:f6:92:e4:
5e:76:c2:c2:40:a8:23:19:b2:7f:8a:d0:b3:f6:d6:
65:cc:e9:76:11:d3:1d:0b:f3:80:37:51:bb:18:aa:
89:6b:88:1e:7c:a1:57:65:6f:8d:0d:bb:48:ee:dd:
ad:ca:21:05:53:0b:be:00:10:c4:bd:04:65:4a:e8:
74:4b:ad:92:24:3e:76:17:82:cb:3c:23:d2:7e:f6:
e9:e2:59:50:f6:9b:6e:a2:ab:af:97:c4:d4:c8:38:
d4:de:f5:a2:ce:c1:90:d6:20:f0:66:df:0c:59:2e:
5b:46:3f:e2:8b:d6:6a:62:13:78:8e:9b:f4:72:21:
19:3c:15:aa:f9:3a:13:b7:d8:34:18:cc:c6:f0:c0:
44:c2:d4:5d:f3:d1:17:51:24:b2:e5:98:47:34:53:
ba:3d:81:aa:af:11:96:cd:b2:5e:6e:27:dc:46:c9:
48:36:1a:c7:38:58:e8:4a:a6:4f:99:45:c9:b5:17:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F1:51:C7:BE:59:E5:D0:29:08:2B:E1:F9:C4:AA:39:E4:E0:3C:BC
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:08:b4:fe:5d:be:87:5e:0f:04:14:a5:57:85:1e:17:30:f2:
21:ed:b7:69:de:03:be:b3:2b:56:1a:d4:e8:23:55:0e:fe:07:
43:68:8c:2d:1f:82:55:99:c9:be:2f:1c:8c:e0:25:35:73:0f:
58:6d:32:4c:9e:8c:49:77:58:4d:2d:cf:4b:6b:82:01:4c:c6:
49:a4:ae:25:46:af:3f:1f:ff:65:34:8b:41:bf:4f:73:25:d1:
0f:b1:85:75:2e:d1:8f:56:36:96:f9:52:a6:f1:cc:b7:b9:f6:
73:45:a5:84:ea:78:04:4f:39:5f:74:a1:57:8a:60:48:f6:9e:
89:f4:f7:ae:7c:34:c2:a6:69:d2:43:5a:89:98:1f:71:db:1f:
5e:c3:68:ac:72:7b:31:bf:65:71:5a:b8:0d:72:83:77:be:8e:
fb:a0:38:95:28:92:fb:f6:09:74:87:d0:35:bc:23:66:a0:d0:
1d:95:db:ab:c7:07:d7:59:d9:27:49:6f:df:f7:13:41:bf:52:
df:81:15:66:de:ee:a5:97:50:46:93:1d:65:a5:35:97:b4:67:
31:47:f3:30:5f:16:5f:14:06:03:f8:84:91:be:39:6c:39:ce:
b6:f5:99:e9:b4:58:e0:b0:61:2f:61:eb:0a:fc:85:eb:29:11:
b1:17:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:42 2025 by rpki-client