Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: 1+8kw0q2wmAfcGWv/dcGCOcSFZOS/qBAGgp3NtOPef4=
Subject key identifier: A2:32:8D:76:68:AE:FB:B6:40:2F:DE:74:C7:A7:4D:97:C2:66:A1:67
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 01984B8A61F66315DF831D1E533DB6EECE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 1512
Signing time: Sun 27 Jul 2025 11:00:16 +0000
Manifest this update: Sun 27 Jul 2025 11:00:16 +0000
Manifest next update: Mon 28 Jul 2025 11:00:16 +0000
Files and hashes: 1: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: odZjxo+R0ru/2LLPOLhRZ+mSl/k63o3RkuZAab9/PUI=)
2: lHo6E8O3jVZPWE_3CSGUh-yWmns.roa (hash: EcydcckC44FXLMG0RzB+bDpZsk7fNTw0ZBUYetuTeMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:61:f6:63:15:df:83:1d:1e:53:3d:b6:ee:ce:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Jul 27 11:00:16 2025 GMT
Not After : Jul 28 11:00:16 2025 GMT
Subject: CN=a2328d7668aefbb6402fde74c7a74d97c266a167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:3b:ec:1e:0e:11:b8:a3:4c:96:e3:1c:5b:
cd:98:cb:24:28:51:32:20:b0:00:57:60:49:ea:63:
74:b8:8e:5e:58:19:40:5c:a4:e1:2c:23:cd:e7:02:
13:9a:09:d4:8e:d3:a2:b7:50:73:63:6a:a0:13:97:
e2:94:9e:6b:67:d9:11:e2:b7:54:e4:09:86:55:8e:
92:00:98:ea:ed:d8:28:28:90:21:a0:b1:e7:d9:3a:
8d:ba:b6:60:4f:d5:25:b3:bc:03:9a:8f:fb:d1:b4:
ef:c4:4c:2b:74:65:d1:a8:3e:23:a7:47:77:95:ce:
22:e2:cc:a2:ac:20:31:3f:70:a0:6d:41:1d:64:11:
76:b4:2e:45:94:7b:86:39:09:32:c3:31:48:54:65:
5e:cf:5f:c5:bf:d0:92:30:dc:d5:d9:65:66:d2:bb:
ea:42:6b:07:83:50:ae:26:ed:90:75:9c:c2:e3:a4:
ed:f2:8b:b1:06:0f:fd:fd:b2:03:b3:a6:31:ab:dd:
e8:0d:2d:84:bc:88:01:83:fd:6c:d7:d7:dc:b6:59:
9f:19:73:0a:89:26:8e:f7:10:02:15:e1:06:38:fb:
da:a1:d3:d3:f9:40:f4:9e:eb:50:e8:a8:2b:a1:81:
2a:7d:5f:ac:f2:9e:99:6b:65:bf:47:cb:db:05:8a:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:32:8D:76:68:AE:FB:B6:40:2F:DE:74:C7:A7:4D:97:C2:66:A1:67
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fe:53:f0:cc:95:25:fe:f0:22:64:37:8e:e9:0c:53:d4:01:
ff:da:ea:8b:4d:32:b2:86:02:0f:c1:0b:b9:a0:4a:84:97:5c:
c8:f7:79:26:5f:2c:9b:34:71:33:80:f8:16:70:26:74:28:a3:
15:22:82:ff:f1:37:45:d0:ce:fa:4d:1c:83:65:ae:5a:7b:a6:
b5:e7:64:67:c6:d8:57:b7:d3:75:95:e9:d2:b2:90:4c:e4:38:
bc:ed:27:8e:1e:2c:e8:f4:e7:7c:63:47:e8:0e:cd:f2:82:b5:
12:22:51:47:c3:46:2d:f2:7e:62:a8:27:a0:3d:5c:fa:5f:cd:
12:09:9a:4c:9c:94:dd:7a:be:00:04:8c:5b:16:07:2b:15:e4:
88:37:89:a1:52:17:f0:d5:60:7b:89:7c:ec:a9:c9:ca:2e:8d:
d5:59:13:a7:95:e6:49:30:03:16:47:6a:eb:6d:71:b7:36:99:
b4:dc:42:4a:12:79:6d:86:24:4e:67:6d:47:42:61:c6:a2:71:
d6:22:61:2d:da:3e:e8:d0:47:33:16:12:b0:9f:99:67:dc:ab:
24:8d:94:ee:0f:7d:03:82:b0:a2:98:97:ab:e8:46:02:a3:8f:
d8:a7:71:4b:db:c5:d1:a9:f7:e1:7c:1b:d4:9c:de:50:d6:f8:
33:e2:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:19 2025 by rpki-client