Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: byq+PfzjF1rSKnE7quVENy/sGSw57a4b2Mx5IyybXzw=
Subject key identifier: 68:12:4D:3A:F6:82:9B:0F:D8:7A:C4:B8:55:85:63:7D:0E:BF:68:FE
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 01988FC6DDFAFA96A50F023E2308E22C6306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 0520
Signing time: Sat 09 Aug 2025 17:00:31 +0000
Manifest this update: Sat 09 Aug 2025 17:00:31 +0000
Manifest next update: Sun 10 Aug 2025 17:00:31 +0000
Files and hashes: 1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: xfjHyIPBK533GUta34pvsDYnRGNGtnQSDyRARONZ3ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c6:dd:fa:fa:96:a5:0f:02:3e:23:08:e2:2c:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Aug 9 17:00:31 2025 GMT
Not After : Aug 10 17:00:31 2025 GMT
Subject: CN=68124d3af6829b0fd87ac4b85585637d0ebf68fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:2c:55:c6:46:4e:93:82:95:23:0b:0c:52:
7e:f1:d8:ea:20:17:79:2c:7c:12:58:f5:8d:ba:ca:
88:d8:ac:b5:36:17:8a:2d:a6:05:35:3b:c1:3c:4a:
ec:5b:0c:9b:1a:71:44:0a:4b:21:8e:6d:e4:4b:10:
3f:94:be:4b:2d:72:e0:58:39:ca:52:8e:40:4a:a4:
bb:be:05:09:ca:40:0f:67:66:24:bd:1d:de:0d:5d:
62:ad:46:f5:88:ac:e9:a4:e6:5a:6f:ee:3b:72:8f:
c5:e5:2f:84:10:0e:ec:97:38:97:68:4f:f9:4d:ae:
40:7e:3e:ce:88:c6:91:f9:82:e3:31:8f:7a:a0:4c:
c5:63:87:15:2f:c8:2c:af:73:a0:99:7e:10:b0:f3:
c6:be:99:06:fc:77:4c:93:d9:05:8b:c8:7a:fd:17:
43:12:f1:50:bf:54:79:dc:e3:56:8d:91:10:2b:ab:
a4:ac:d9:a1:ba:ab:25:3b:2f:c0:92:64:8c:38:52:
f7:b0:16:a0:ea:42:3e:61:12:37:c0:ea:81:34:79:
36:9b:17:38:24:58:e8:11:fd:80:3b:24:94:31:69:
5f:af:32:ef:db:b1:f5:ff:38:a6:b0:ba:ff:e0:f4:
e2:d9:d8:46:4c:bf:61:fb:3e:d1:b4:79:74:24:2f:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:12:4D:3A:F6:82:9B:0F:D8:7A:C4:B8:55:85:63:7D:0E:BF:68:FE
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f7:b6:e0:36:d6:ae:f2:91:f8:a7:e5:00:16:b1:48:81:78:
01:cd:28:07:2e:f0:e3:37:84:cd:1d:3a:ac:f3:5d:06:1f:0e:
86:b9:00:ef:89:ea:e4:13:34:75:93:41:19:3f:45:67:87:81:
8c:a4:8d:84:07:95:17:58:06:fb:ee:97:a2:25:27:c8:e8:81:
3b:c4:55:c9:56:2e:a8:87:d2:42:7a:4e:35:b9:e9:86:eb:f1:
8c:4e:03:76:23:f2:ad:e5:35:b5:e2:21:c1:c7:1a:af:fa:92:
3c:66:52:19:35:eb:a3:ae:a1:99:d9:8e:47:c8:ed:c1:6c:d0:
16:ea:01:eb:ee:ab:17:c5:49:6d:c7:aa:0f:4a:44:65:d8:f7:
24:36:a5:ba:4b:57:96:0f:1c:fd:48:56:dd:1e:69:f4:07:4b:
99:4b:35:11:3b:2f:97:ac:3d:1e:14:45:3a:92:20:2d:ff:dd:
82:76:80:68:d9:80:32:b2:9a:d5:e4:00:58:ee:2a:75:97:94:
ce:13:25:f4:ae:68:d2:3a:b2:37:62:1e:cd:28:c7:61:c5:e0:
8f:a9:3b:49:de:77:ac:e8:34:f2:9e:be:78:5c:66:29:74:52:
75:1e:5b:32:bc:42:b7:54:ea:94:65:e5:2f:74:9d:83:60:91:
7b:71:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:45:32 2025 by rpki-client