Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier: EHUuCUHeGqUCXehZCGOfGor6EfBiW3Ajz1/w+dzFoPo=
Subject key identifier: 26:C9:A0:11:22:01:4D:3D:AE:4F:87:5C:D4:98:77:DB:0F:8E:4F:F7
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 019873E235B379133D627FE98F19CA80B4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number: 0653
Signing time: Mon 04 Aug 2025 07:01:01 +0000
Manifest this update: Mon 04 Aug 2025 07:01:01 +0000
Manifest next update: Tue 05 Aug 2025 07:01:01 +0000
Files and hashes: 1: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: swdzHJtQuoW6/sUPaFE0V87Ly+Ya6jx2DU/wD7tsGRc=)
2: z_g_oyYscLU1IVMsubV8om2IHIM.roa (hash: TMMjkM/DLDsCF3bsXeBPNo5kbzaCJniVgP9Feba83Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:35:b3:79:13:3d:62:7f:e9:8f:19:ca:80:b4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Aug 4 07:01:01 2025 GMT
Not After : Aug 5 07:01:01 2025 GMT
Subject: CN=26c9a01122014d3dae4f875cd49877db0f8e4ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:c3:f5:83:af:11:2b:75:48:ad:7b:01:f4:
72:6a:7d:3c:ad:c1:10:4c:81:01:57:d4:31:32:15:
10:f1:dd:6a:df:fa:19:6b:e5:47:46:3c:66:3a:fc:
e6:4c:2f:7f:72:16:19:34:c1:ce:64:81:d3:e5:b8:
96:5b:c9:94:a5:0a:05:85:de:8a:27:19:6a:9e:48:
aa:f4:47:92:e5:17:44:0f:5a:c4:38:91:3f:40:e0:
bf:9e:90:cf:68:2b:1d:1d:71:21:f5:e6:93:1a:d2:
11:ab:c0:90:dd:0f:cf:8a:55:a8:03:08:ad:9e:fc:
ff:51:bb:77:d9:5d:a6:ae:46:c5:84:00:d9:12:b4:
17:ed:0d:92:30:28:ea:23:03:aa:b8:c7:03:2d:67:
e5:17:a1:12:24:8b:30:ff:c1:a9:2c:95:4e:0c:33:
6f:46:e4:0e:47:ac:11:55:64:db:c9:d7:69:0c:b0:
a5:96:76:d4:7a:32:ec:cc:16:4a:98:77:6f:2e:0a:
bf:49:48:66:58:0d:f8:e1:bf:ee:81:0c:9f:80:8f:
ec:77:20:90:6f:89:58:d6:29:13:d2:ff:4d:1b:9e:
08:2e:22:a5:a4:1b:1e:a4:59:2d:8d:80:13:a4:85:
5a:0d:a5:83:0c:aa:5e:e3:56:95:20:8c:a7:6b:41:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C9:A0:11:22:01:4D:3D:AE:4F:87:5C:D4:98:77:DB:0F:8E:4F:F7
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2a:07:62:b4:fc:db:50:cf:81:c8:b1:5c:4b:7c:0f:e8:b4:
95:08:6e:42:ff:f2:e2:f2:a9:dc:c9:3e:09:f4:11:8b:7f:16:
fa:ca:a1:23:8e:44:4c:25:87:61:43:ac:5a:4d:63:65:96:e7:
83:bb:a3:68:9b:6d:8a:50:74:0b:e5:15:70:2e:1e:e9:9e:82:
fc:b2:47:da:70:ac:b3:91:b6:bc:eb:65:46:31:22:03:1e:6d:
84:28:b2:5b:ee:3c:16:94:b1:dc:5b:0a:a1:ef:ce:7c:f9:10:
75:51:22:ea:32:10:0a:39:57:ff:9c:75:aa:e7:b2:f9:61:14:
a5:86:fc:8e:d0:d5:0c:bd:ca:a4:de:22:d7:b7:e9:08:d7:c3:
1d:47:e3:34:38:cc:a7:b7:7b:56:f6:7c:96:2f:91:a5:92:fc:
55:4b:be:94:27:2b:bf:f5:76:8b:ea:05:13:74:6d:52:80:73:
0a:3d:b1:07:d1:6c:22:0f:bb:ef:ec:7a:2c:73:a8:87:af:0b:
a8:29:78:f5:e2:77:71:0d:fd:28:38:d4:ec:ac:3e:4c:4d:2c:
30:2b:1d:df:23:ef:5d:27:41:52:d8:0c:79:6c:25:51:58:52:
f2:f6:ec:3f:69:ad:46:40:1b:fb:96:8b:c0:fb:c7:07:ae:72:
7b:27:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:50 2025 by rpki-client