Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json)
Hash identifier: W54Y9y8Hnf3LYpOSG4+wOLeP2hfQq4UKUt/auvj5InY=
Subject key identifier: C4:B8:3F:C8:AC:DA:F8:36:24:D0:F7:8E:18:1B:5C:02:20:F5:FB:ED
Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Certificate serial: 0198A1288E9498AD39558328944E20540D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
Manifest number: 162E
Signing time: Wed 13 Aug 2025 02:00:46 +0000
Manifest this update: Wed 13 Aug 2025 02:00:46 +0000
Manifest next update: Thu 14 Aug 2025 02:00:46 +0000
Files and hashes: 1: NJmmW764rdnW_zIUswA3g-8-n2M.roa (hash: uNbv9sZggt1kjUfoR4Ji7KAa4WT9RRySZVjN33ZdWTA=)
2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: AzIiPPygFkw/okpQ81v8TLII+fqX9TdsU431smQh814=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:8e:94:98:ad:39:55:83:28:94:4e:20:54:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Validity
Not Before: Aug 13 02:00:46 2025 GMT
Not After : Aug 14 02:00:46 2025 GMT
Subject: CN=c4b83fc8acdaf83624d0f78e181b5c0220f5fbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:05:ea:1e:d0:94:df:dc:8e:d7:45:c4:3c:85:
b8:1a:70:b4:1f:27:d3:67:46:ab:1d:8a:63:f3:85:
8e:03:2f:be:ac:9b:8d:80:2c:16:c1:f3:35:bf:c7:
bc:08:20:2c:1b:34:cc:c7:88:5f:25:61:9e:42:94:
3a:8a:75:1c:cb:78:ec:57:87:4c:e9:69:45:8a:51:
af:e6:86:91:8e:e1:40:17:d6:3c:e8:e4:e9:cb:ae:
27:dd:ea:d4:03:cb:06:de:17:cf:8d:c4:e3:12:96:
75:d0:bd:c7:92:25:87:bc:1e:3c:62:cf:28:88:26:
66:59:72:d0:a6:66:bb:63:c7:35:df:e5:29:3e:03:
5e:7e:ec:da:64:c9:ca:94:81:52:6f:07:39:2d:66:
22:50:4b:b4:57:fa:b1:4a:c1:ab:56:f2:7c:dc:0e:
cd:47:83:bf:b9:9e:e8:e2:2d:44:62:7f:db:19:b0:
4f:b3:9f:f9:92:ac:6a:f1:13:05:df:e0:a1:61:fc:
37:f2:2f:eb:9c:a3:46:90:40:70:fb:94:0c:be:a1:
04:4b:6f:5a:6a:8b:e8:3e:f3:78:b0:58:ec:83:32:
f3:b9:c7:b2:57:f1:3c:d5:9e:bd:2e:55:38:3e:71:
b4:5e:9d:2b:66:a5:f6:16:be:63:3e:ba:57:4f:91:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B8:3F:C8:AC:DA:F8:36:24:D0:F7:8E:18:1B:5C:02:20:F5:FB:ED
X509v3 Authority Key Identifier:
keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:24:cd:c9:3f:89:6b:95:72:40:9f:04:af:ed:d3:38:a8:
44:8c:26:ef:d5:22:ff:b5:f6:be:2a:f3:8c:11:b1:64:51:47:
50:e6:c1:56:ee:e9:ad:3c:11:fb:bf:c9:ca:cb:7c:04:4c:e2:
ae:a5:1c:0b:f1:b3:e7:c4:a0:20:32:36:d4:4a:92:b5:15:02:
cb:5b:54:6b:fe:0d:6f:6b:2b:0c:1b:d2:8f:f6:1c:16:0b:37:
93:f7:c4:2c:c6:35:ab:49:68:f1:70:f1:e4:cc:76:01:df:85:
f6:b9:65:6d:46:c8:50:d1:cb:d2:1d:d1:43:ed:54:eb:8c:1d:
a3:7f:44:dc:b8:a2:f1:36:89:81:2a:e6:ce:ba:0d:c3:9e:20:
aa:51:05:08:f6:3c:14:00:40:c8:fe:db:02:d6:16:6c:4b:d6:
20:dc:22:7b:b1:76:1e:92:48:5e:f7:46:ea:d9:b9:26:06:8f:
df:64:0d:b4:23:db:51:5c:fd:fc:9a:8e:7e:9e:0f:f4:75:fd:
ab:3c:3a:6c:a0:40:c6:43:3c:c3:c6:75:a7:29:7d:11:0b:4c:
21:b5:f0:ef:d1:cf:93:38:eb:85:a5:58:a9:85:cd:9a:98:17:
db:95:df:63:a8:b6:b2:f4:5b:08:ec:0a:0c:4e:af:3a:3e:08:
6d:ea:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:15 2025 by rpki-client