Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: mUBBXmO9d97SAAixctPOXp0sAVv3+BoDEJopaVwy+rU=
Subject key identifier: 16:3B:87:F1:9D:13:7C:6E:08:FD:32:53:37:10:D5:16:92:D2:2F:53
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 019896374A1A74B89FDB8D7530C321DDDBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 23:01:02 +0000
Manifest this update: Sun 10 Aug 2025 23:01:02 +0000
Manifest next update: Mon 11 Aug 2025 23:01:02 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: gLu6iXuWfjyoqhIUc5xis0+5mpomcl4meSkF3Jjw1V4=)
2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:4a:1a:74:b8:9f:db:8d:75:30:c3:21:dd:db:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Aug 10 23:01:02 2025 GMT
Not After : Aug 11 23:01:02 2025 GMT
Subject: CN=163b87f19d137c6e08fd32533710d51692d22f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:5f:20:08:b6:1d:bb:fd:02:52:a1:5d:34:
da:f5:3b:7f:8c:69:5a:5b:c6:85:20:b3:f1:cb:58:
56:ab:35:7e:ed:55:fc:23:c7:f0:59:a9:d5:50:12:
a5:62:67:3b:b8:9b:5e:a9:65:bd:e3:16:b3:b7:74:
33:de:ca:4a:43:23:b2:8f:9b:58:79:cc:09:31:b7:
c3:9a:d6:07:35:b8:5a:7e:fc:13:70:4b:bc:ad:85:
bb:fe:8f:e9:85:21:60:7a:52:f8:f9:e2:26:31:cc:
38:a7:ce:27:7e:4e:06:d0:43:e5:71:0d:93:49:f8:
49:8d:af:2d:36:08:ee:34:b1:cc:03:0c:54:7c:0e:
2f:51:a6:f5:19:ce:b5:82:0a:af:82:7d:9e:7c:90:
7a:14:5a:0b:3a:70:37:ad:f2:a9:cd:46:54:0b:cc:
a8:b1:79:54:d2:7a:11:68:30:6a:85:58:f8:ed:4e:
65:4b:ec:9b:71:a3:f4:35:33:9d:d7:43:57:9d:ac:
48:e1:a4:f5:32:9c:05:f1:ce:c8:65:3d:9b:ca:3a:
35:13:18:f1:d6:7b:2c:5a:c9:c9:58:a1:ea:96:63:
e1:8e:46:ea:a9:2f:a9:89:b5:2f:fa:b6:27:0c:ae:
a8:9d:f0:4d:80:da:cb:ac:e0:3d:7c:cd:87:c7:b3:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3B:87:F1:9D:13:7C:6E:08:FD:32:53:37:10:D5:16:92:D2:2F:53
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:14:54:f5:fa:bd:ab:9f:73:e9:9f:39:fe:64:e3:d5:72:f0:
2f:ee:2e:f0:e6:21:e4:d2:ed:d3:41:e1:ef:9a:fd:50:c1:b6:
12:d1:5d:7e:38:5c:d1:42:ba:3c:53:2e:7c:55:7c:ef:98:95:
08:b7:72:7e:76:23:20:d2:cf:63:a8:76:34:06:89:2b:91:44:
b1:2c:7d:78:bc:05:4c:a0:a1:5b:fd:58:68:a0:5d:36:05:34:
04:e8:d6:2a:00:95:38:25:8c:af:68:cf:e0:dd:38:12:7c:17:
ca:88:33:e2:ed:f4:da:2f:b9:c7:36:ad:06:4a:45:e3:10:d6:
30:c1:f2:0c:58:a4:eb:eb:ce:d9:f6:7b:9b:e9:64:58:09:34:
0c:6a:e5:d0:68:cd:38:68:2b:27:c7:38:fb:53:95:5e:5e:3e:
77:ed:df:6c:a8:dc:40:53:b7:02:08:ec:e9:82:85:6f:43:a1:
d9:42:d4:4c:02:69:99:23:92:2f:48:5a:fd:06:d0:ab:28:e0:
fb:ce:6a:a0:49:76:a4:d1:36:a8:50:36:ed:14:8c:7c:94:9a:
3e:d1:41:d8:53:fc:41:a2:34:2c:e5:8b:e6:81:f1:c6:c0:57:
81:3d:c6:96:d8:3d:45:a6:a8:91:da:36:75:d0:2e:ff:a2:02:
93:e4:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:29:38 2025 by rpki-client