
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File: Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier: 2IlQsKjbdEP5GyuJ2PVu9rT0gLU7VczHuVE69Eb16P8=
Subject key identifier: F2:8A:61:DE:3C:05:A5:34:45:42:8B:E0:1C:47:CD:08:37:08:87:62
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer: /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial: 01987D8AD9D59B757C34E5A8FC090F65B462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 04:01:48 +0000
Manifest this update: Wed 06 Aug 2025 04:01:48 +0000
Manifest next update: Thu 07 Aug 2025 04:01:48 +0000
Files and hashes: 1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: 7fh0CMvUDIEqgExKVqWYdn60+srFT2ecEdlt/2awxFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:d9:d5:9b:75:7c:34:e5:a8:fc:09:0f:65:b4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Validity
Not Before: Aug 6 04:01:48 2025 GMT
Not After : Aug 7 04:01:48 2025 GMT
Subject: CN=f28a61de3c05a53445428be01c47cd0837088762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:ee:1d:70:cc:bb:97:2b:a7:11:5f:44:7d:
4e:b7:ab:d5:9e:92:de:71:d3:2b:9d:26:1c:25:bf:
3b:b5:f5:54:62:68:e8:bf:e6:df:71:fb:51:ae:26:
96:c7:a4:2a:6f:46:ff:16:04:67:64:d3:c4:47:95:
04:61:fc:ae:5d:73:d8:c6:ed:8a:9c:c4:b8:78:71:
be:1d:d6:36:3f:d6:06:53:84:2a:d7:12:05:3b:2b:
f7:d4:36:c2:f4:76:6a:e1:57:03:92:f1:c2:46:b9:
e2:97:19:9f:55:93:5d:d7:3c:95:08:d0:8b:69:53:
75:ba:32:c3:76:67:07:85:80:f1:ea:02:db:a3:57:
df:8a:0c:95:24:20:f8:5e:50:c9:fd:2e:44:b5:b0:
65:41:ba:5a:a4:31:38:ef:df:a6:be:14:2c:43:0f:
65:d9:0d:ba:d8:50:89:f4:b7:cd:5e:f4:eb:95:fe:
37:26:0c:67:ff:6a:12:1d:28:ce:53:2c:fb:bb:e3:
25:2d:91:4a:35:13:c6:56:67:94:9f:5a:1a:7c:0f:
76:8e:5f:6c:3b:2e:30:75:37:57:16:e1:4b:e3:c7:
50:b5:e6:46:70:86:5e:ad:08:d5:d0:6d:27:01:ba:
f7:aa:eb:52:47:55:60:b5:67:0a:4a:c0:d8:2c:d4:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:61:DE:3C:05:A5:34:45:42:8B:E0:1C:47:CD:08:37:08:87:62
X509v3 Authority Key Identifier:
keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f5:85:e9:4e:9a:62:30:29:bf:d0:b0:cc:5c:86:b9:12:e2:
42:ce:73:f9:6d:17:fc:7e:66:86:3f:70:a0:41:04:52:09:1d:
0c:df:e8:88:65:18:0b:48:e4:3d:f7:54:fb:f3:2e:c5:ae:3b:
f7:da:7e:4b:51:a9:82:c9:77:56:61:82:69:1e:51:fe:8b:4f:
9c:94:cb:af:e6:fb:a7:e8:4e:c6:3e:e8:26:db:e6:80:98:ef:
17:b4:bc:22:f7:e5:8a:fe:86:71:46:4f:53:8f:fe:83:5e:8f:
85:b9:f6:88:e7:c1:8d:d9:56:32:32:bd:04:7b:5a:ae:2d:43:
6d:4c:27:1d:87:44:3f:37:ff:54:f7:aa:70:07:bc:ef:c6:ec:
7e:ba:d1:03:9f:d2:a1:62:89:17:d3:9c:67:93:ca:79:c7:99:
56:4d:cf:12:af:c5:2c:58:d9:ce:fa:00:9e:98:ae:26:36:09:
b2:21:81:9a:61:82:2d:7d:6c:cd:56:1f:ee:2d:4b:4d:a6:06:
76:3a:47:d2:a9:45:11:88:4e:6b:fb:48:32:64:a6:34:71:69:
26:03:ca:b5:8c:bd:4e:65:71:65:45:8b:b9:ff:b3:07:31:30:
a7:02:86:df:20:a2:63:b3:d4:df:0b:25:25:31:43:60:b9:98:
ba:55:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:26:38 2025 by rpki-client