Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: DhCQyFj7YcVv/pmDfKAzLuC/JeFLcoaJUCbMm6HxS7s=
Subject key identifier: E2:BF:74:1E:9F:C5:44:EA:92:B5:71:D3:96:D2:6B:52:4D:96:19:78
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0198729827284FD4889F211C6CAD7243D834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 01:00:30 +0000
Manifest this update: Mon 04 Aug 2025 01:00:30 +0000
Manifest next update: Tue 05 Aug 2025 01:00:30 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: o+YlJv7QQMwC4NYXPtF74SVYifwWe8Ch287MbkBUCDo=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:27:28:4f:d4:88:9f:21:1c:6c:ad:72:43:d8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Aug 4 01:00:30 2025 GMT
Not After : Aug 5 01:00:30 2025 GMT
Subject: CN=e2bf741e9fc544ea92b571d396d26b524d961978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:7e:51:db:35:a6:97:b3:b6:ef:d3:4d:73:
82:69:c5:d4:71:1b:cc:f0:1e:f9:12:a0:81:27:c5:
9a:10:c1:d8:26:a0:81:39:f2:ca:e0:24:ee:ca:36:
b9:31:ee:34:76:82:b4:50:db:41:05:f6:b6:49:8e:
8c:60:59:4d:bf:59:8d:12:9e:a2:e9:4c:16:e2:b9:
78:34:31:a2:7b:11:3a:dd:b0:41:77:11:2b:b4:eb:
9c:b0:06:06:29:30:78:3d:e8:bb:c9:39:5e:10:e8:
ba:46:e5:6a:01:01:4b:60:83:05:5b:e9:a5:71:19:
ce:9e:94:af:b1:c4:68:43:41:33:6b:39:08:b1:df:
e8:27:5f:aa:2c:1e:41:22:14:1c:03:70:62:0d:56:
76:4a:51:5e:5c:b5:5d:df:e7:b0:1a:2d:38:ed:f4:
d8:28:c3:bf:62:e7:c5:fe:ec:8f:b4:7d:65:df:f7:
b9:b4:1d:2d:5c:8e:e1:4d:6c:65:73:70:3f:67:cc:
e4:52:33:05:35:91:37:fc:1d:02:88:39:73:83:e5:
51:11:0b:31:9b:7d:27:2a:cf:74:3f:07:98:28:c1:
19:6a:01:53:5a:22:60:d5:7f:c3:b9:d9:66:2b:52:
9c:15:d9:f5:95:9e:b2:2e:f5:aa:fc:83:fc:29:b7:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BF:74:1E:9F:C5:44:EA:92:B5:71:D3:96:D2:6B:52:4D:96:19:78
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b1:e1:19:ba:73:63:70:73:39:32:98:85:ac:4a:d9:b0:19:
d6:b7:17:73:ff:7a:da:2b:19:8e:fb:85:c2:91:8a:e9:14:bf:
21:a5:13:5e:39:c7:fc:59:1b:86:6e:c5:c8:ab:46:36:6e:83:
71:f9:80:46:0c:89:e3:ef:c1:09:26:bf:f8:fb:b4:65:b3:60:
7c:f7:dd:dd:16:08:40:1c:d4:5d:17:2d:e7:02:42:5f:22:8d:
58:0b:2f:35:69:74:ba:8d:6c:71:bb:31:97:a7:f6:a5:a6:10:
1a:1c:0c:b3:7d:d5:6f:fe:b4:c0:ff:86:d6:b9:9f:aa:4a:ac:
46:03:d6:3a:62:a1:c2:96:5a:54:fc:bf:f0:fe:fc:74:aa:f0:
85:ba:89:a2:96:64:74:1b:33:37:99:57:f1:d1:10:fb:c9:f9:
c0:78:8b:3a:ca:7c:30:01:6a:ac:44:8c:b8:05:6d:8e:53:0b:
6d:c4:77:ea:c2:58:44:e9:59:e4:49:3a:7e:04:1e:b9:84:f1:
b7:e2:af:09:5f:82:0b:0b:fd:58:2f:3f:97:a5:5c:b7:0c:13:
0d:0e:a1:46:79:29:42:64:d4:84:2d:32:4c:4d:f1:67:7b:2e:
c0:e9:5e:2b:88:04:93:a0:ed:59:e7:ca:4e:dd:52:81:04:8b:
65:c0:86:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:03 2025 by rpki-client