Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: bAQTNIxVffXem7hjg1uKg4axnjhD+tRuss1Z6ci2HQs=
Subject key identifier: 0C:D2:89:08:C7:B1:80:63:84:A7:94:90:1C:E6:0E:1E:F7:8B:CB:2A
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 0198432C1D41E403F45D3292F46BCB9886D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 013C
Signing time: Fri 25 Jul 2025 20:00:21 +0000
Manifest this update: Fri 25 Jul 2025 20:00:21 +0000
Manifest next update: Sat 26 Jul 2025 20:00:21 +0000
Files and hashes: 1: 2hDPatYNHQhIPlvymgRA-xmm86U.roa (hash: 8kdVjJKDXzBN5JG+XGLJqwndIaq/0FXixJOUEgyTy9Q=)
2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=)
3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: IU6lHygxHsWyzi3Lan/xURsHjrGUtenCgqXV1KPKNec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:1d:41:e4:03:f4:5d:32:92:f4:6b:cb:98:86:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Jul 25 20:00:21 2025 GMT
Not After : Jul 26 20:00:21 2025 GMT
Subject: CN=0cd28908c7b1806384a794901ce60e1ef78bcb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:cb:c7:e9:7e:a3:b9:ea:b2:97:b0:f4:b5:
3d:20:66:a8:e5:f3:12:45:b6:f9:4f:46:52:4b:88:
17:2a:97:6d:4a:d3:42:c4:11:8f:17:ba:74:5e:fb:
4a:fd:2c:08:a2:26:6f:68:49:8b:01:8f:f7:a0:1f:
00:04:70:14:34:91:9f:d0:ae:d2:d0:66:73:b7:23:
79:19:12:d3:c7:50:ed:a6:12:1e:18:53:c7:b9:33:
69:78:0e:27:03:d2:32:6c:bd:8c:f9:31:29:b7:f5:
4b:ed:cc:9d:39:6b:bd:7a:be:33:20:84:3e:b1:87:
71:55:7d:63:c0:79:a7:0e:b1:40:17:67:ce:38:05:
6d:ec:48:6e:8a:e5:c7:9b:d7:67:97:d7:c8:6d:f6:
fd:4f:b8:f1:86:be:0c:b1:c2:bc:d2:ed:82:b6:3c:
b7:11:22:a3:45:80:da:b4:46:31:dc:23:09:b6:8a:
ee:53:fd:5d:8a:68:9a:ff:0e:4c:ed:d3:ec:6e:57:
ee:3b:0b:13:c6:49:43:0e:33:6b:fa:fc:08:35:24:
b4:bf:53:0b:f9:df:3a:f1:b9:a0:48:b9:f6:7c:43:
27:db:d6:93:0a:77:2f:61:33:95:5b:bf:cc:15:01:
f3:bf:b1:0b:65:34:8f:f2:97:a0:e1:f4:66:62:2d:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:89:08:C7:B1:80:63:84:A7:94:90:1C:E6:0E:1E:F7:8B:CB:2A
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:73:b6:c3:c7:53:80:03:53:43:7d:bc:38:10:1e:e3:6e:
64:ba:79:df:49:99:2f:0c:6a:14:91:de:20:33:2f:73:f0:be:
e7:9f:17:f5:80:4c:11:ff:3e:f0:53:66:cc:50:1b:90:e5:86:
bb:3b:83:60:79:1b:ee:64:4e:8b:cf:e1:04:85:eb:0d:97:54:
4b:be:59:79:aa:bd:64:3b:f6:d2:00:15:82:37:68:d0:4d:af:
11:1d:7a:6e:c8:1a:b7:5e:b1:88:ba:d6:f0:1a:3e:e8:a0:18:
3f:43:e6:a9:56:c8:2d:74:75:d3:5a:66:23:54:07:3d:73:03:
02:9c:75:31:ea:29:a6:7d:17:6a:44:b6:dc:5c:30:93:6c:67:
67:07:de:0a:af:14:d3:5e:65:01:6c:f2:81:ab:90:bc:8c:ac:
5c:03:72:eb:bb:67:a2:00:d3:b0:02:8c:01:af:a2:64:be:72:
61:c6:55:36:76:e5:78:ce:ae:b9:fb:fe:a5:a7:f9:ef:52:50:
5c:12:e1:a3:e0:52:64:1b:d9:79:c0:f5:77:f3:40:f1:fe:9f:
05:50:0f:f0:e0:12:0c:76:cf:54:34:25:08:7d:c7:11:e8:bb:
cf:46:4e:41:4e:71:94:71:bb:af:65:94:3d:11:37:82:14:6f:
24:28:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:15:38 2025 by rpki-client