Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: bImNhCPCLs3r/j0evW80TaO0TYUmzP06Dn+Fz4xbXaw=
Subject key identifier: 73:F0:18:39:75:FF:11:96:86:5F:B5:E1:75:F6:F3:2A:0F:AD:A6:BD
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 01988FFE4DD610538A8B7989E803E48DF2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 162A
Signing time: Sat 09 Aug 2025 18:01:04 +0000
Manifest this update: Sat 09 Aug 2025 18:01:04 +0000
Manifest next update: Sun 10 Aug 2025 18:01:04 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: 3vhOaDdi3xvFJ011wK8fz5CubxbwZ/Gkv+DrRgLR62A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:4d:d6:10:53:8a:8b:79:89:e8:03:e4:8d:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Aug 9 18:01:04 2025 GMT
Not After : Aug 10 18:01:04 2025 GMT
Subject: CN=73f0183975ff1196865fb5e175f6f32a0fada6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:85:dd:6f:6b:60:9e:53:8e:bc:af:77:23:
ac:c9:0c:b1:a7:a5:c7:1f:95:0a:2e:ad:d6:9f:7a:
0f:6b:41:77:2e:69:59:87:53:df:6f:87:50:1a:4a:
f8:38:ed:f5:ba:81:b4:d2:89:fc:be:22:7d:6d:d1:
dc:68:f1:28:81:47:fc:16:08:0a:38:93:98:9b:c4:
1d:14:4b:43:f5:fe:22:03:0c:de:e6:64:29:9d:aa:
ff:93:8a:27:f7:66:6c:86:16:dc:e9:b7:fb:b6:73:
ac:90:9b:cd:5d:52:e5:4b:d5:c9:e1:60:c7:58:a2:
00:81:d4:7e:08:4e:16:b5:0e:d3:32:38:61:85:35:
8e:c3:64:74:3d:f8:ad:db:09:ba:5d:93:74:37:86:
75:e1:32:e8:c2:e1:ab:9d:26:ad:e7:d7:1d:5f:3c:
b6:0d:b3:a4:a0:3a:65:e2:6b:5d:cb:15:9f:5b:3c:
0c:2c:18:85:0a:f2:9b:ae:9e:e4:4c:60:3c:37:8b:
66:f0:38:b2:69:f5:16:93:e8:5e:e8:b2:8d:98:ae:
fd:69:90:eb:ab:5c:e9:f2:42:52:5c:82:41:3b:56:
68:4e:bc:f3:ce:e0:92:1b:4a:e1:c4:37:b7:dd:28:
80:30:c2:36:fb:f4:01:a9:c9:33:70:76:98:5b:64:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:18:39:75:FF:11:96:86:5F:B5:E1:75:F6:F3:2A:0F:AD:A6:BD
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:04:95:2d:f9:d4:b3:d6:07:93:a1:83:11:3c:6d:c4:4e:65:
c2:54:e7:d3:8b:31:56:53:60:cf:02:ca:a4:03:20:91:3e:7b:
13:ac:82:d6:2a:4c:39:dc:90:55:41:6f:1e:71:2a:51:99:c0:
8b:21:8c:13:fa:10:62:34:c7:98:7d:d9:3a:11:2a:90:38:86:
84:79:a6:55:57:fb:1f:cb:e0:16:7a:5b:e0:e2:ef:d7:d3:60:
00:18:1c:d5:53:15:79:7a:73:6b:4a:ef:20:43:51:cb:e7:77:
61:43:47:6b:a9:a9:f7:e0:ed:75:e0:83:ff:45:ad:27:23:20:
26:40:a0:76:30:9b:22:79:68:a7:40:c7:f8:0a:3d:28:b7:4c:
7a:3e:c3:37:d1:36:de:33:f4:93:4c:fd:6e:67:04:a8:42:b4:
4e:72:e3:51:e9:1b:e6:bb:1f:d1:e8:81:b2:f6:f6:7a:97:c3:
37:e4:f8:00:94:16:0f:13:71:0d:19:da:5c:6c:2f:8d:be:9a:
70:59:1a:c5:3d:b8:75:10:70:cc:2d:1d:31:63:3c:f7:c9:9f:
de:27:4f:db:10:c8:63:79:91:b8:72:4a:05:fc:4d:10:32:a4:
6a:c7:95:20:63:a8:86:4d:13:ca:d4:68:bf:c5:d4:81:86:20:
f3:ea:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:13 2025 by rpki-client