Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: RzsOwexgkN8o4pligq8cLaHX13jwnEOLtaOzV/69OOo=
Subject key identifier: 12:C8:4B:08:35:1B:4D:1D:6F:25:3F:3B:F6:9D:70:2C:F9:10:FE:19
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 01988769180709E51AF3220FBB91CFA0D1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 01EC
Signing time: Fri 08 Aug 2025 02:01:08 +0000
Manifest this update: Fri 08 Aug 2025 02:01:08 +0000
Manifest next update: Sat 09 Aug 2025 02:01:08 +0000
Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=)
2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: 5XZTZE/foks6uhF1gqBQmPhXTKGk+MBhEPzci2xdK6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:69:18:07:09:e5:1a:f3:22:0f:bb:91:cf:a0:d1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Aug 8 02:01:08 2025 GMT
Not After : Aug 9 02:01:08 2025 GMT
Subject: CN=12c84b08351b4d1d6f253f3bf69d702cf910fe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:0e:a4:12:92:fa:bd:9f:47:f1:11:0f:d8:
83:35:c2:41:fc:54:ce:ec:6d:9e:df:cf:60:c4:e5:
2b:f1:e0:33:14:4b:db:60:6d:c0:36:db:70:96:81:
82:bc:ac:23:78:33:af:dd:af:b5:34:f9:96:a4:0d:
49:01:4f:19:37:63:d7:f7:56:bd:75:0e:77:bf:b1:
53:5f:13:2f:e1:ce:cc:81:45:1c:6f:4c:60:40:4b:
ad:b1:db:10:79:87:f5:4b:70:26:39:8c:5f:f2:83:
0a:29:4d:3c:82:49:ad:fd:c7:df:5a:ce:c7:0f:38:
95:61:4a:e5:f9:8d:7f:de:75:b5:9f:b7:67:85:fc:
23:30:4d:85:f4:75:1e:54:d8:fc:b0:31:eb:28:f0:
93:d0:f3:81:0e:d2:f8:da:82:69:3b:6a:45:0b:1b:
65:30:23:ff:2a:23:61:96:7f:ca:be:5e:d4:9b:bc:
94:cb:c9:3b:b3:34:d4:fb:df:2b:24:6f:ae:bb:4a:
b6:8b:1b:0b:25:78:ea:0b:f1:36:e2:8d:eb:61:12:
c7:a2:31:d6:2f:13:16:f6:95:45:4d:54:fc:42:d0:
51:4a:d8:33:22:b4:5d:79:d7:49:42:41:df:e6:a1:
0e:84:a7:12:68:0a:81:03:d1:65:14:25:fd:ba:9c:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:4B:08:35:1B:4D:1D:6F:25:3F:3B:F6:9D:70:2C:F9:10:FE:19
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:83:08:3f:3b:08:ef:de:21:8d:fe:48:c5:a7:4e:c0:08:69:
48:ab:c1:99:e9:60:4b:da:10:55:4c:b2:e4:b6:6b:2c:88:1f:
ec:b2:bc:ba:04:ed:dd:7b:50:b2:07:d3:df:db:1c:08:ca:32:
49:07:03:14:26:9e:df:a2:ee:29:6c:b0:c3:5d:96:02:1d:c3:
1f:47:03:e5:9a:1b:f6:b2:8f:cc:3a:41:80:fc:05:02:8b:84:
67:1b:16:66:f3:43:e9:c9:2b:38:52:80:60:2b:64:68:e0:84:
6d:f2:18:b7:48:d6:6a:86:ed:2e:c9:2d:b1:4b:bd:20:51:bc:
da:3e:07:a6:3c:07:02:f8:20:18:3d:87:e9:3e:36:a6:51:62:
94:0f:c5:bc:63:f1:b1:f5:dc:0a:04:6f:be:ee:80:4e:b9:ba:
a8:b7:f8:4f:f1:8e:c9:85:6e:b5:33:95:4a:b0:cf:13:13:28:
97:8d:7b:4d:3d:a0:f4:e2:c4:b7:69:9b:b5:a4:e2:11:8b:1e:
53:82:05:d9:50:13:11:65:ff:01:1e:6a:82:61:25:b3:42:70:
fd:36:4e:e0:47:8d:a8:22:4d:87:58:23:d8:29:2c:e9:7a:ee:
ac:00:1a:bc:8e:d9:f3:89:c0:f5:b5:3c:77:70:81:ef:43:94:
b8:68:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:18:19 2025 by rpki-client