Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: z6gazDuRBg34QVaUT4v4dInxolSahDx89RPcHvIQGlE=
Subject key identifier: D2:87:A8:F2:E0:CB:45:A3:45:0C:D6:F2:CA:AD:96:0B:A1:7A:E5:13
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 019853B1E8E553C5C0B908EDF249943A7A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0CFC
Signing time: Tue 29 Jul 2025 01:00:25 +0000
Manifest this update: Tue 29 Jul 2025 01:00:25 +0000
Manifest next update: Wed 30 Jul 2025 01:00:25 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: 0m6WM6tq32mGCbYWCajUfaD/PeyVOksMdTwbqUF2tyI=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:e8:e5:53:c5:c0:b9:08:ed:f2:49:94:3a:7a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Jul 29 01:00:25 2025 GMT
Not After : Jul 30 01:00:25 2025 GMT
Subject: CN=d287a8f2e0cb45a3450cd6f2caad960ba17ae513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:0f:c2:28:42:70:ca:b5:9f:50:9c:3c:ce:
bd:74:fd:9a:d0:6d:3f:94:f3:c8:80:33:17:06:1c:
e9:d7:24:f0:63:b7:c2:e2:9e:03:b0:02:6a:ff:3a:
82:9a:a6:f8:1b:e6:c6:2b:1e:85:c7:1f:b4:37:c5:
3a:a7:41:1e:a7:3e:0d:51:53:9a:84:1e:57:aa:60:
47:d8:1f:07:19:5d:2a:ab:13:53:74:8a:7e:5a:41:
d7:43:4d:c9:07:f1:c2:c1:50:b8:76:e0:19:e3:4b:
0a:5c:55:95:2e:06:4e:a2:c5:83:e8:5d:a4:56:c1:
7f:b2:93:3c:35:a9:8c:18:da:ce:b7:a6:22:5d:c1:
05:8a:e1:00:74:d1:7c:a2:e8:61:79:f4:42:37:5f:
9d:97:40:89:73:fe:cf:b9:b1:7e:6a:34:1c:45:c8:
fe:4b:b7:9e:35:39:fc:75:cd:51:c4:ff:c0:54:38:
4a:f8:46:c3:94:5c:1d:ce:60:00:75:a8:1b:fa:31:
b1:b0:70:3c:ec:35:8f:4b:54:bc:7b:c2:7e:29:f1:
5c:15:70:8e:1a:2a:cf:93:8b:33:ca:17:b0:72:63:
6c:be:0c:76:b6:a9:bf:94:61:5a:90:a2:95:0b:8e:
b9:05:37:26:a2:c4:b4:2b:3d:aa:0e:ec:b6:f5:68:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:A8:F2:E0:CB:45:A3:45:0C:D6:F2:CA:AD:96:0B:A1:7A:E5:13
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:45:b5:b0:19:59:15:45:48:b6:f7:6e:12:18:11:d9:50:86:
a2:4e:39:0c:ab:0f:09:ce:21:05:74:b1:a0:16:b5:11:27:c5:
1c:44:6e:c9:b3:2e:66:54:b2:f2:6f:fe:71:b3:f7:5e:66:6b:
35:cf:d4:36:75:fb:5f:de:2e:31:99:4a:fa:21:b3:64:92:a2:
6e:68:d4:46:8d:06:08:58:d1:07:30:3a:d0:bd:b2:87:64:09:
7d:c0:0e:66:d3:b5:30:f0:e2:da:e7:bc:a5:14:b6:73:5c:42:
a0:52:6a:ae:33:de:d6:51:70:63:70:df:ef:80:e0:60:eb:a9:
70:9d:f4:40:e4:94:f8:7a:8d:a2:c5:11:aa:44:8d:f7:ac:00:
4f:ca:7a:e7:9c:2d:81:21:c7:f8:07:a2:e7:bf:35:29:0b:5f:
a6:37:12:a8:a6:c7:3f:44:f3:4c:b1:34:0e:b0:2a:97:0b:f7:
45:65:3b:2e:16:73:78:1a:3f:5a:f8:2e:7a:d1:3c:7d:f2:a1:
70:c7:4f:c5:69:a2:67:6d:09:ee:1c:f1:6d:36:bf:1a:7f:24:
66:23:10:ab:67:15:a5:d1:3b:cd:02:ec:4d:86:70:eb:37:a9:
64:e4:91:a9:f1:fe:7b:40:cf:e3:c0:5d:fa:bb:7c:ac:ab:bd:
ae:6e:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:33 2025 by rpki-client