Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: U4Bq2sZrlWQFOwBlHFb9Akim90R2jPA0V93Ioxv7HW0=
Subject key identifier: 99:7D:68:FB:37:1E:CD:19:DA:34:BA:AB:AF:96:09:BF:C2:7E:7E:D2
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 0198A083CC3A099BD92949FAAAAB05C2DA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0C6B
Signing time: Tue 12 Aug 2025 23:00:48 +0000
Manifest this update: Tue 12 Aug 2025 23:00:48 +0000
Manifest next update: Wed 13 Aug 2025 23:00:48 +0000
Files and hashes: 1: GVUeOB4dXXqj9XML1jN57j3Df5M.roa (hash: Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: ADWTbyCf85moxPr9HFkhAY4lILB8VbJcNcAS3/XuF7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:cc:3a:09:9b:d9:29:49:fa:aa:ab:05:c2:da:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Aug 12 23:00:48 2025 GMT
Not After : Aug 13 23:00:48 2025 GMT
Subject: CN=997d68fb371ecd19da34baabaf9609bfc27e7ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:da:25:64:74:6b:f7:99:ea:6f:ab:36:5d:
90:15:29:37:fe:8b:82:14:fd:26:09:12:61:cc:29:
c7:4f:f6:d2:24:e9:a6:91:ac:1f:1c:0e:98:c8:f9:
ea:6f:a7:e7:1b:fb:33:91:5b:30:ce:54:08:35:8c:
94:98:ef:ba:00:f4:0f:d8:f3:59:0e:61:f6:59:53:
21:05:c9:b7:c6:13:d8:55:1a:db:50:66:11:89:4c:
fb:cb:26:68:55:7c:1e:4e:03:a3:2a:68:86:50:28:
ae:54:64:c0:11:ae:7b:73:70:bd:83:85:5b:6e:25:
5a:77:d6:af:e6:15:e9:12:26:04:c4:5c:37:00:08:
e2:c9:6a:57:bf:06:59:d6:5c:f2:34:c9:73:fa:82:
00:c2:4e:a3:ee:f9:58:ce:e9:7f:db:8b:61:5d:25:
56:74:d1:70:69:59:d4:a2:e8:ec:3e:35:b2:c2:24:
ad:23:9f:5b:98:e2:bc:68:16:ee:1a:df:e0:af:f1:
53:71:05:9b:f9:08:7d:07:3f:89:24:bb:f4:82:fe:
6d:3a:84:b2:78:ae:e2:00:7a:a3:9a:51:b9:7b:fd:
44:3e:76:61:9b:4f:d9:83:9e:95:4f:df:7f:71:21:
14:5f:6d:18:dc:e1:d3:9a:03:f3:a2:34:fb:fb:19:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:68:FB:37:1E:CD:19:DA:34:BA:AB:AF:96:09:BF:C2:7E:7E:D2
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:be:0e:4a:c8:b3:0a:94:f0:85:ab:6f:50:73:4e:69:11:a3:
06:1b:3b:7d:61:00:47:2f:63:50:05:7c:33:45:21:25:58:60:
e8:60:5a:9c:94:82:67:63:a0:3c:6b:c1:6a:49:46:e6:23:3b:
8f:4c:a2:45:d7:59:a3:0b:5b:f1:e6:bb:87:ba:42:34:82:de:
15:2a:55:6e:d2:06:92:ab:50:4e:7a:ed:d0:b2:7e:8f:6e:90:
cb:8e:07:27:d3:95:4a:75:6a:9f:58:33:90:68:97:57:d7:de:
43:a6:75:c2:02:60:0d:d3:c4:c3:04:b7:61:d9:2b:d0:c8:92:
36:e8:4c:52:b7:cc:99:ab:cb:48:2e:4f:a7:e3:37:aa:37:12:
72:f2:5c:c0:b4:bd:9f:17:3b:b4:47:fe:0e:14:84:c0:ce:84:
e7:12:5c:45:8a:0e:3e:08:41:c3:d0:45:57:6c:bb:10:26:9c:
0d:e6:03:01:41:70:fb:29:02:1f:40:81:a7:5e:46:7b:b2:d5:
51:ed:dd:00:ec:16:3f:21:55:8c:b6:b9:35:01:3d:7a:96:f2:
8c:34:b8:66:79:bf:0b:c5:7e:8d:5b:90:5c:dc:4f:d4:70:76:
c5:50:6d:70:63:0d:bc:3a:c0:51:6d:2f:0d:3b:48:d1:0b:8e:
9f:82:cd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:23:58 2025 by rpki-client