Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: WAKTy2n61E11vcmI62/At7ong8jAr3Q7RmeN6cVHs84=
Subject key identifier: 45:C5:E1:BF:53:04:4B:0A:88:9C:02:0E:44:DD:95:9B:89:1A:72:09
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 01987A1BD76557EA9914926AB7642BA42230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 12:01:41 +0000
Manifest this update: Tue 05 Aug 2025 12:01:41 +0000
Manifest next update: Wed 06 Aug 2025 12:01:41 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: eehGxgdzB+U7rXvJACIZzUp7IiWTs3n71C4C4/SBBD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:d7:65:57:ea:99:14:92:6a:b7:64:2b:a4:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Aug 5 12:01:41 2025 GMT
Not After : Aug 6 12:01:41 2025 GMT
Subject: CN=45c5e1bf53044b0a889c020e44dd959b891a7209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:18:9e:d0:9d:90:98:7f:a3:26:10:7e:d7:
59:00:6a:dd:db:af:76:79:a8:a8:d3:e9:d5:41:d2:
4f:96:27:40:b9:9d:69:c9:3f:7f:2e:71:3f:02:3b:
92:15:cb:a2:00:89:21:dd:61:55:de:6a:00:41:fe:
e3:5c:1b:3a:e7:82:8a:9e:c1:8e:c9:e1:4d:d9:6b:
72:07:61:de:11:a4:01:ea:e5:5e:6f:01:b3:ee:e2:
91:65:0c:59:c2:99:b4:7b:36:07:f8:64:2a:08:39:
d1:b6:d6:e6:dd:22:b7:f0:7e:a5:d6:60:17:5f:c2:
a4:97:3f:25:33:2b:80:2a:1f:79:8d:a7:03:80:0e:
af:ac:97:e8:95:2c:75:e6:82:98:c2:ba:99:44:de:
6f:74:da:fa:21:82:53:04:ed:d5:8a:20:7d:a0:a8:
9c:55:7d:c9:bc:34:28:3b:5e:8d:08:61:8b:57:82:
30:66:4a:2c:6c:c8:fa:c7:84:c6:23:9f:bf:ba:02:
48:d3:1b:78:ff:f0:2f:c0:69:bf:9e:c8:e8:5f:fe:
82:8e:a5:c7:61:24:d3:d7:d9:9a:dc:a0:37:27:b2:
86:af:b0:ed:c9:57:1c:87:e0:ff:ab:74:39:70:10:
4e:77:01:76:fa:0e:5b:2f:14:ba:e3:02:57:08:62:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:E1:BF:53:04:4B:0A:88:9C:02:0E:44:DD:95:9B:89:1A:72:09
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:26:8e:0d:b7:3f:72:f2:8b:35:4b:dc:cf:c6:a8:fe:61:6f:
89:d5:4f:b7:c0:96:72:a1:b7:95:dc:87:38:b8:0d:ad:02:24:
18:d3:9c:f4:e4:5e:09:96:ff:46:bb:a4:f1:ee:a1:b0:b5:2d:
fb:4c:2e:91:eb:58:12:b6:fc:f2:16:8e:79:d5:7e:70:da:f1:
60:bc:7a:70:ce:de:f4:c1:34:1e:74:80:3b:65:85:74:ef:7b:
f7:14:3c:12:3e:62:f6:ac:ec:6d:92:a2:0c:71:e8:f3:33:c4:
6b:2b:cb:5e:cf:cf:ad:dc:f3:69:06:e8:2d:56:df:da:5e:14:
58:c3:02:57:a7:de:12:d1:c7:87:f5:c3:e1:96:e1:68:a6:07:
64:ba:d0:6d:c9:8d:19:4d:2a:3c:4d:3e:32:f5:61:24:b8:04:
7b:c2:66:fc:f0:e1:e6:4e:b9:28:f7:c6:ff:d8:31:97:40:8f:
3f:f4:09:63:67:c3:5c:04:4e:76:74:93:94:f1:b7:87:04:b0:
d7:de:c2:ea:93:a5:fb:99:37:48:5f:6c:f6:9d:05:77:ef:b7:
a5:1b:a1:b3:0f:af:81:e6:05:14:6e:f7:2a:b3:5d:df:21:9f:
55:a4:16:68:b9:74:a5:de:ec:ee:f3:f1:e9:9b:ba:71:5f:c7:
c6:88:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:08:28 2025 by rpki-client