Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: 4UXnAq4mR4sVu5ApbEdnFtDHCx2fCWPxO1SwIgU7xi8=
Subject key identifier: 00:FA:00:37:4A:1B:C0:5D:2E:73:CC:79:D6:4F:16:F4:E3:A4:EC:74
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 019874F4EFB828AB156FBE3B0AB6F1309688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 12:01:05 +0000
Manifest this update: Mon 04 Aug 2025 12:01:05 +0000
Manifest next update: Tue 05 Aug 2025 12:01:05 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: CLtF9iz/pVs6UIwAozSP0fR6zNxruHW7PdS3u/Kxavo=)
2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:ef:b8:28:ab:15:6f:be:3b:0a:b6:f1:30:96:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Aug 4 12:01:05 2025 GMT
Not After : Aug 5 12:01:05 2025 GMT
Subject: CN=00fa00374a1bc05d2e73cc79d64f16f4e3a4ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:47:40:ca:b9:09:5a:f3:2d:2d:ac:0b:9f:
77:cd:f1:5f:81:fc:16:e0:d5:3f:38:0b:8e:32:08:
e4:78:f2:bf:56:c8:28:27:5e:f3:17:a6:d1:d7:53:
4c:7d:c0:d5:da:c2:63:16:09:16:b3:df:e5:c6:30:
1c:7e:f5:22:55:22:4f:2b:4f:b2:ee:ff:c9:70:ee:
4c:ba:1c:9f:ee:ce:6b:3f:3a:5e:27:d5:13:00:b7:
35:1a:39:8f:3f:4c:f4:f1:ee:b3:27:5b:12:3c:40:
11:0b:4c:71:05:ba:cc:c2:a6:7d:50:5a:17:f1:e0:
b9:6f:3f:e5:bc:da:eb:b0:29:d8:ee:68:5b:91:dc:
da:9e:1d:38:c4:c5:c8:77:d4:48:0f:45:25:ea:04:
64:0f:d6:36:11:a3:ec:8a:91:76:12:df:f0:e8:0b:
24:4e:32:ac:8b:c9:c5:37:f4:b8:b1:e5:bf:44:66:
d6:51:7d:4b:fd:a4:c9:74:9a:48:0a:81:bd:dc:2e:
65:f7:b0:5b:88:f4:bb:3b:7b:d3:ec:97:3f:53:e9:
fb:0e:3a:90:12:2f:8a:58:89:8a:78:d6:61:93:18:
37:d3:2f:ee:00:0a:97:e0:9d:8b:e1:92:6c:f1:e2:
f3:d5:66:31:78:70:a9:eb:89:8b:82:d3:ab:c3:d3:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FA:00:37:4A:1B:C0:5D:2E:73:CC:79:D6:4F:16:F4:E3:A4:EC:74
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1f:fd:f9:24:19:60:15:f5:8e:93:b0:e5:1d:fe:aa:27:6c:
48:68:92:af:f6:f3:07:c9:11:59:eb:68:b6:1d:22:69:c9:31:
87:8d:c7:8a:32:53:73:19:e0:22:0a:96:c0:fc:c9:1e:fc:71:
c4:65:8a:a4:5e:32:19:87:3d:e4:7f:04:77:ca:3f:dd:27:ee:
36:61:8a:68:db:63:05:77:3f:d4:cb:ac:8b:4b:88:92:ab:58:
53:96:a9:17:3f:02:b7:f6:ae:ea:33:87:b8:2b:13:12:a2:da:
36:b3:24:73:e5:80:6b:0f:9f:9b:8c:dd:97:9c:90:f3:2e:fe:
da:c1:17:57:f9:3e:e9:db:2d:b1:83:44:da:a1:b3:bb:07:c4:
06:29:e2:dc:a8:da:3d:fc:02:e0:1d:0f:3a:53:e3:e3:8d:58:
59:34:d0:58:33:3f:42:db:55:3b:5b:79:30:07:aa:96:4f:b8:
9f:b7:72:88:14:9b:2a:07:5d:45:a6:3f:c7:50:8b:4a:e7:ea:
76:21:e2:48:03:ac:4a:da:1a:2e:08:d6:14:f6:84:77:90:45:
3e:d0:ab:18:69:c9:af:76:b4:6c:06:a0:91:57:7b:bd:60:23:
1d:31:f8:be:52:3b:ca:33:69:73:13:3a:cd:18:3a:03:47:e1:
15:5e:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:48 2025 by rpki-client