Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
File: Z2JE3gGQpt1aiZorN7ACua5jLIY.mft (raw, json)
Hash identifier: 3MwsOtkuL+Jvb9+zVDzLIrhEqWwrpIlLDs44+sb/m3s=
Subject key identifier: 99:F4:BA:FA:B8:D9:4A:E1:CD:F0:0A:23:73:78:E1:A0:0B:FC:43:48
Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
Certificate issuer: /CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Certificate serial: 01988B0FEF859F834406C4C54D77A635AB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 19:02:14 +0000
Manifest this update: Fri 08 Aug 2025 19:02:14 +0000
Manifest next update: Sat 09 Aug 2025 19:02:14 +0000
Files and hashes: 1: 21cAYiN5jMpqkJRdEkHSMeQVgkY.roa (hash: KwzUXQv1pIgCUyqyYd3vxndo9n20A9iWRxEC49c1pqI=)
2: Z2JE3gGQpt1aiZorN7ACua5jLIY.crl (hash: oUfEtoye7La0rLl7/nyoMgaPKZ0GYrQu64nX71GMK7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:ef:85:9f:83:44:06:c4:c5:4d:77:a6:35:ab:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Validity
Not Before: Aug 8 19:02:14 2025 GMT
Not After : Aug 9 19:02:14 2025 GMT
Subject: CN=99f4bafab8d94ae1cdf00a237378e1a00bfc4348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:a4:2a:9f:85:86:d2:59:10:7d:db:5c:2a:
70:ac:68:82:c1:d5:67:d9:50:c5:6f:10:b1:ab:51:
f4:d3:16:a6:56:78:6c:49:b4:e0:f6:75:4d:ed:d2:
c3:aa:dd:31:85:60:62:ba:4c:6e:9d:7c:28:2c:61:
cb:de:2e:08:9a:e6:8a:7b:2b:94:13:d3:e1:3e:f5:
32:5d:87:06:c6:53:f2:16:b9:3b:7d:88:20:32:1a:
3d:af:19:82:39:17:4e:09:b0:a5:7e:6c:36:71:db:
63:59:bb:ab:a2:20:4a:7c:4b:54:ec:7b:70:bc:8d:
fe:93:a9:17:4e:23:9c:f8:42:c1:3a:a8:23:d9:c6:
e9:46:56:55:56:99:05:47:15:3e:39:49:91:58:e7:
f0:57:05:a2:f0:3a:f9:87:50:8d:02:70:eb:65:0c:
92:2d:3f:1e:f8:3f:82:b1:b9:b7:04:69:ab:00:82:
4c:14:b0:77:11:9f:aa:f9:19:0a:44:55:d8:3f:78:
ea:8c:a1:14:06:21:33:2b:b6:44:aa:b8:ed:5a:d4:
c2:79:bb:d9:6b:1d:6c:94:b5:bd:26:ea:55:cf:e2:
d4:9c:7a:f5:42:b0:bd:08:dc:f3:b7:0b:c8:9a:51:
4d:55:b8:b5:b6:6c:6c:49:28:08:30:0d:c8:8c:aa:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F4:BA:FA:B8:D9:4A:E1:CD:F0:0A:23:73:78:E1:A0:0B:FC:43:48
X509v3 Authority Key Identifier:
keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bf:86:6f:4c:31:a8:8b:a3:44:46:50:ff:29:a2:ae:3a:d4:
85:07:dc:51:c9:5b:88:02:8f:cd:3e:ad:05:21:94:e1:ce:c0:
23:22:54:82:36:dd:83:9e:3c:53:ce:d0:48:2d:2c:44:4f:a2:
ee:d0:a0:16:e9:c1:bd:21:46:75:13:03:c5:7b:3b:a6:5c:ce:
a9:dc:b7:dd:46:4b:e8:ab:d5:d7:61:48:48:86:7f:e0:22:20:
fc:10:9f:9b:8d:aa:eb:e2:e1:8a:79:7d:ea:be:72:89:fb:21:
9c:04:5f:d5:8e:26:94:d1:ba:75:ce:c0:0b:c3:db:21:8d:78:
25:7e:d7:7e:b3:eb:31:05:b7:59:48:f4:1d:d1:2e:8a:88:e7:
82:39:ef:ac:af:c4:a4:1e:dd:9e:99:26:6d:8c:47:d4:e0:70:
d6:69:c9:d1:33:28:c3:9e:23:22:3f:80:4b:7f:4c:7d:26:4e:
47:5c:5c:46:8e:7f:f5:2d:56:06:cc:a0:19:41:27:2f:85:a1:
1a:42:44:dc:c2:41:69:d2:94:f4:70:81:d0:b7:bf:1b:72:b9:
da:a3:e6:b3:cc:3e:a4:71:6b:64:5c:47:74:9c:da:03:b9:db:
5a:76:18:9d:4f:d9:b6:10:f1:ea:90:e1:b5:73:b1:e1:4f:8f:
d0:dc:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:16 2025 by rpki-client