Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: oxLmLKbZ/wMOAI+C2Pz+pbLeNpjVsE3TkMGHUgW/y+c=
Subject key identifier: 45:9D:0C:C8:7A:36:27:59:7C:2C:E5:9A:0E:13:B2:62:00:16:AF:86
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 01987F0A786A96B93EF63D9D5662A5EDD789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 142C
Signing time: Wed 06 Aug 2025 11:00:49 +0000
Manifest this update: Wed 06 Aug 2025 11:00:49 +0000
Manifest next update: Thu 07 Aug 2025 11:00:49 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: Nj8BWD6pY7gvAeTzK/UVjKeGAJpN2vHdeXtDXeKRoXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:78:6a:96:b9:3e:f6:3d:9d:56:62:a5:ed:d7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Aug 6 11:00:49 2025 GMT
Not After : Aug 7 11:00:49 2025 GMT
Subject: CN=459d0cc87a3627597c2ce59a0e13b2620016af86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:de:59:d4:c9:69:40:6a:71:9c:6c:94:42:
6c:b7:79:3d:62:7e:ec:10:9d:2d:e0:d5:cf:06:95:
71:c4:6e:b4:b4:3d:ac:18:6d:ad:90:3f:e0:fd:b6:
03:ce:8b:ac:e0:5e:73:87:5e:d1:90:a8:18:0a:4f:
64:22:86:63:74:cb:27:db:13:82:07:35:6d:e8:39:
87:eb:fa:12:8b:21:59:b0:1d:53:a2:06:bb:5e:b9:
d2:c2:b7:dd:6f:af:82:47:87:99:b8:82:67:3d:91:
8e:a5:16:8f:a2:63:c3:8f:36:a0:e3:5a:a6:93:ec:
c2:37:0b:e7:44:5c:1b:5c:9a:73:27:8a:69:ef:77:
d5:f1:16:3f:29:f9:02:c2:74:a1:22:50:1f:bd:37:
4c:c4:cc:4c:aa:07:5f:cc:30:b7:e9:3f:4a:7d:2e:
98:c7:88:0a:c2:bb:ef:58:50:9e:e3:50:77:f0:6f:
14:9c:cc:b4:73:cf:77:e8:87:bf:2c:e8:5b:3e:38:
02:13:9e:fc:e4:d0:d1:f4:df:af:3e:45:d3:5d:bf:
46:76:17:69:06:d5:df:b3:4a:13:c6:60:04:55:67:
12:81:a9:60:88:e8:ab:15:61:0b:8d:a9:67:02:ea:
fb:5b:b8:24:d4:d8:28:a9:71:49:27:02:84:c0:65:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9D:0C:C8:7A:36:27:59:7C:2C:E5:9A:0E:13:B2:62:00:16:AF:86
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4a:ba:34:03:87:5a:35:33:59:76:b5:84:22:69:5b:8a:79:
4b:09:3e:4a:e7:6f:6b:e7:47:87:bc:9d:62:9f:cb:11:21:82:
25:6a:98:e3:87:88:2d:ab:7c:07:5f:44:ca:fe:4c:43:6b:e3:
e4:3c:f8:5f:dc:30:ff:76:98:44:db:90:5f:43:70:8f:e0:3b:
40:e3:77:52:fe:fc:18:b4:08:9f:1f:00:6c:90:76:39:09:44:
14:56:6b:25:70:d2:5b:48:a5:9f:b5:6f:fd:68:1e:df:0f:91:
b5:4f:0e:aa:d3:e6:c1:fe:23:39:df:16:f3:57:01:d2:7d:9f:
ef:71:f8:72:16:9d:90:a9:73:d6:e6:38:d6:2d:c7:27:88:a3:
31:fb:e1:c5:82:a1:04:3f:f0:d6:c7:44:b2:ed:5a:48:11:18:
9f:84:80:46:dc:be:69:a7:4b:1d:71:05:8d:e0:2b:91:14:65:
d2:0d:57:74:21:96:5a:e4:93:55:07:e3:21:77:f7:17:92:d3:
32:32:3f:a0:5a:6e:36:1d:26:5d:76:90:7a:bc:5f:43:3a:ba:
50:65:31:66:08:9a:30:af:b2:c0:29:ec:f9:c6:6e:7e:62:b2:
ba:8e:d2:03:37:b6:7d:5e:ba:1e:c1:6a:1d:1a:bd:6a:5a:fa:
09:79:45:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:34 2025 by rpki-client