Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: DEDqJmLKG/WKdPyKov2KjrmjMtraYGHR8HVvtfLp/Qk=
Subject key identifier: 34:C9:8B:FE:97:D4:16:21:C5:1E:83:E7:2D:8C:3B:31:BA:7E:6A:3E
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 019896A5C3E67A0A8D33A62B03CB22D0CBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 01BF
Signing time: Mon 11 Aug 2025 01:01:42 +0000
Manifest this update: Mon 11 Aug 2025 01:01:42 +0000
Manifest next update: Tue 12 Aug 2025 01:01:42 +0000
Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: RxWTb7LjEGRWKyqe6T3/TpjHrjuU2VBpDn+7cb1I9Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:c3:e6:7a:0a:8d:33:a6:2b:03:cb:22:d0:cb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Aug 11 01:01:42 2025 GMT
Not After : Aug 12 01:01:42 2025 GMT
Subject: CN=34c98bfe97d41621c51e83e72d8c3b31ba7e6a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5a:92:3e:ad:5a:b0:03:42:c3:bd:f4:ee:d2:
bf:6d:85:49:df:91:9b:93:7e:f5:22:2e:c6:98:f3:
24:50:42:53:3a:4f:cf:63:30:11:3f:e3:e5:8c:df:
82:d4:c1:a0:c4:65:84:1d:25:19:be:41:cd:9e:b3:
00:cf:ab:e3:8e:ac:b1:ce:16:b5:a2:90:bf:c6:37:
9f:fd:68:3a:de:3a:5b:60:fe:a9:7a:93:3b:8d:b1:
8d:d7:21:16:a4:cc:86:66:60:7b:09:68:77:ee:80:
10:2b:08:72:10:ef:70:04:32:14:09:48:a1:ce:7f:
fc:72:1e:69:ed:38:65:10:1e:4b:0e:2b:d0:0b:45:
c1:d9:f8:c6:37:db:64:77:f1:af:58:99:86:20:a1:
f6:31:9b:e3:05:1e:82:da:b6:66:63:9d:e7:cf:e6:
ce:9f:28:f8:41:5b:f3:90:eb:14:16:3d:9f:49:4b:
88:90:dd:18:9b:e8:f0:3a:22:3c:3f:e5:be:60:2f:
63:81:7e:17:ad:34:bb:44:ab:d1:a9:81:50:34:f9:
bf:cd:62:ec:56:00:06:4a:37:b3:4b:7a:14:bc:eb:
33:47:12:b6:31:55:04:d6:44:31:e3:cc:bb:ea:04:
a5:0d:04:82:13:ca:a7:07:6b:98:8a:02:76:c6:11:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C9:8B:FE:97:D4:16:21:C5:1E:83:E7:2D:8C:3B:31:BA:7E:6A:3E
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9a:93:49:24:ec:7d:e4:e7:d4:be:8d:07:92:94:10:ec:30:
4a:86:4b:a2:f6:4d:0f:ee:e9:2f:77:55:1d:65:21:d8:af:f6:
c8:b0:0f:3f:7d:46:57:2d:69:e6:1d:01:57:84:45:7d:93:cb:
39:26:03:72:0f:9e:99:f1:e4:37:50:71:58:69:ac:0e:86:14:
43:7e:36:50:c4:8c:8f:1e:9a:23:80:6a:1b:ce:f3:ed:4a:e8:
3a:fc:50:f8:a0:db:9e:1f:12:0b:b1:7d:5b:b1:c8:86:aa:bf:
fd:c2:db:82:3c:fa:d8:3d:07:6c:9a:99:00:ac:26:b2:eb:59:
d4:e8:d8:f4:6d:ec:d8:48:08:96:d4:6f:7f:80:d1:dd:8e:d0:
96:7c:52:ca:48:4b:28:c9:d8:dc:2c:e1:c9:63:30:45:12:e6:
50:1f:8d:c5:51:08:fb:7d:95:43:86:5e:38:dd:66:4d:59:c2:
22:86:df:24:c8:64:90:9a:44:28:c9:e6:a2:3e:88:a6:d5:86:
fc:41:b8:3e:da:0b:51:4b:98:53:c6:84:6e:fe:6b:a7:4f:d8:
f7:3e:17:8c:7d:b0:c0:00:4a:16:17:32:55:44:33:60:c5:b6:
d1:18:a7:32:98:fe:55:1b:4a:04:d5:44:9f:c4:3a:cb:66:6a:
9a:27:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:49 2025 by rpki-client