Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier: SpsodU6XbHd0j3n3GOmayPBbXVHORgkXpBPoHipAVWc=
Subject key identifier: 1E:E6:57:2D:16:17:FD:7F:AE:9F:E7:DB:CD:F8:09:B3:2C:29:9F:39
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 01987DF7D0EB89F158B2B7FF6CF534B1F423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number: 108C
Signing time: Wed 06 Aug 2025 06:00:49 +0000
Manifest this update: Wed 06 Aug 2025 06:00:49 +0000
Manifest next update: Thu 07 Aug 2025 06:00:49 +0000
Files and hashes: 1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=)
2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: 6Iz/owm73/G+w8WqSU4Fm8uwIuqDMLJx5gr/BEGmA+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:d0:eb:89:f1:58:b2:b7:ff:6c:f5:34:b1:f4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Aug 6 06:00:49 2025 GMT
Not After : Aug 7 06:00:49 2025 GMT
Subject: CN=1ee6572d1617fd7fae9fe7dbcdf809b32c299f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:22:4b:e2:88:b2:e9:61:b8:de:e9:ec:91:
83:4f:9e:f8:b3:33:92:2c:96:5c:1c:97:c8:26:59:
26:47:0f:10:8d:44:1d:03:b9:8b:24:8a:5b:a4:fe:
bc:57:67:b8:f0:fb:6e:eb:79:ab:93:dc:d3:a4:67:
73:b4:a2:3f:f5:c4:de:fa:9f:cb:cf:30:9c:38:af:
b5:d0:01:b7:a9:59:b6:40:72:1f:f5:a9:2a:98:bb:
b5:c6:b3:9f:32:f9:c0:dd:30:f0:c4:94:a7:26:5f:
0b:be:2d:58:45:6b:46:bb:a4:b2:4a:01:6a:65:7b:
5f:7b:4c:e7:2a:a5:91:2b:0f:da:e1:a9:23:7d:a9:
83:f9:e6:ac:39:78:fb:db:76:55:d9:da:cf:7f:6f:
aa:16:28:4f:10:8c:62:1c:db:56:40:ae:f6:e6:34:
c4:3c:1c:bf:19:cd:a9:12:8f:66:2e:17:bd:f0:ad:
3e:33:95:71:2f:1a:04:a6:fc:68:9e:d6:12:81:f1:
8f:c4:b2:77:92:c2:ab:65:47:10:5c:be:c9:fc:23:
f3:7f:8f:7d:76:e1:1f:0b:26:06:b0:05:5e:2c:01:
45:75:a2:51:19:1e:2f:08:34:98:25:28:5e:12:81:
a4:8c:11:e1:9a:21:4d:6d:cc:65:a4:b8:d9:49:37:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E6:57:2D:16:17:FD:7F:AE:9F:E7:DB:CD:F8:09:B3:2C:29:9F:39
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0b:09:d7:2b:41:c2:80:bd:2e:e5:dd:64:85:5c:fe:ac:9a:
4b:ef:5b:78:a0:f4:a2:eb:6b:d7:75:21:89:c9:bc:b8:9e:b4:
d2:c8:e6:87:a7:84:b9:4e:b8:80:34:4d:1a:59:da:ff:c0:48:
df:1f:8c:b1:69:33:4b:68:ff:49:9c:0b:19:c4:40:2b:c7:1b:
70:56:62:ae:1b:a6:2f:0f:68:3f:ac:b3:dc:a9:1c:a9:9d:49:
77:ef:5b:9b:c4:26:22:13:d3:95:bb:54:ee:5d:8e:0d:c1:d3:
0e:2e:5c:3c:78:62:4c:3d:a1:6c:1b:64:40:32:ae:c1:51:5e:
04:f4:c5:c6:b0:d6:79:6b:4c:0d:32:c3:84:0a:60:0c:0e:08:
99:b3:72:c8:b7:71:c3:d6:15:aa:b1:ff:5e:e2:0c:be:f7:fd:
72:07:21:54:6c:d7:53:91:0c:51:97:95:41:f1:5f:05:49:6d:
e2:d5:08:fa:fc:59:8e:6d:31:74:78:f0:ef:6f:d9:cc:b8:c8:
40:f9:c3:ff:fd:c7:1b:cb:57:02:a1:05:bd:da:9e:f9:ac:a7:
a1:2c:2b:db:a0:5a:f2:74:cd:bc:dc:5c:d4:8f:c9:9b:40:48:
98:90:69:24:11:00:67:36:dd:b9:86:7f:bc:35:94:7d:5a:f8:
6a:c8:d5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:07 2025 by rpki-client