Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: SD7mEPc/WIeg06o7nTsT/X48ZGwWU51WG/L7jBX8muk=
Subject key identifier: 2F:1D:DE:3B:2B:37:6D:C5:B7:92:AF:E2:14:D3:CD:CF:06:93:D4:C1
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01984106EE6EF209140AA0E677EC16CD0FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0ABE
Signing time: Fri 25 Jul 2025 10:00:29 +0000
Manifest this update: Fri 25 Jul 2025 10:00:29 +0000
Manifest next update: Sat 26 Jul 2025 10:00:29 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: FFZEPdwvPiZTDxva04Xmwe7MixWT5+w0EYF5TduWaiQ=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:06:ee:6e:f2:09:14:0a:a0:e6:77:ec:16:cd:0f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jul 25 10:00:29 2025 GMT
Not After : Jul 26 10:00:29 2025 GMT
Subject: CN=2f1dde3b2b376dc5b792afe214d3cdcf0693d4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:e6:91:e1:dd:30:c7:82:33:c4:e8:d3:22:
87:c0:00:5b:94:04:57:66:5d:09:3c:aa:6d:45:13:
58:2d:8b:dc:3c:71:34:94:82:96:7b:12:53:fa:55:
bb:3a:37:35:6e:de:d7:3a:9d:30:7f:60:f6:12:ec:
fe:28:62:14:2c:43:8f:8b:3d:34:5f:56:a3:fe:37:
e9:57:f6:9a:a0:08:da:3d:40:c7:ca:1c:80:0f:ed:
eb:96:d2:91:13:78:f8:9a:ab:a9:84:96:6a:34:40:
b7:f0:4f:9e:a2:72:ce:20:9e:68:27:01:62:32:67:
ff:85:d4:9e:28:1b:59:2f:30:9a:83:38:6f:78:38:
8a:d2:85:69:e1:43:43:a6:8d:6c:5f:8d:24:56:72:
b8:3b:75:0a:a0:af:a5:7b:8e:60:2a:dd:13:dd:f3:
09:ab:7d:7e:46:97:72:cc:27:06:30:b5:df:7e:77:
ce:c1:6c:86:54:b3:99:41:ad:97:54:53:9b:1f:d3:
07:2a:1a:5a:8c:c0:80:3c:9c:d0:3e:04:ba:9f:fc:
5d:5e:6b:69:15:a4:f8:97:b2:61:db:b8:b6:a7:b6:
6b:24:2b:11:a5:18:ee:28:a3:8c:dc:58:9a:05:e3:
3e:a6:a1:66:1e:a1:b1:0f:15:dc:f8:b4:fb:f5:dc:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1D:DE:3B:2B:37:6D:C5:B7:92:AF:E2:14:D3:CD:CF:06:93:D4:C1
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:73:97:16:f0:8f:11:34:37:15:5c:87:a0:c0:a7:10:a7:
06:ec:fe:50:fc:7b:d3:79:ee:58:4f:6d:7c:3c:35:6b:b8:e4:
26:3f:98:9c:6a:61:a8:a4:5c:a7:13:4c:c1:39:7e:f5:72:fc:
8d:5c:1f:2e:de:44:ed:62:58:8b:b8:57:6e:e1:46:dd:d4:35:
89:b2:33:54:40:ca:89:f8:51:e6:84:53:09:35:ea:14:e9:78:
a8:ac:c3:71:dd:f8:39:8e:e9:09:21:58:c2:a6:7c:8a:26:c6:
cf:4a:43:1f:b7:64:68:5d:ed:96:9a:f2:3a:14:aa:95:84:9c:
a3:98:01:f5:b7:02:15:b9:21:d1:98:6d:2b:81:a3:17:43:a0:
85:11:2a:a2:76:53:7f:36:c1:8a:05:0b:1e:a3:15:56:c9:3e:
51:93:21:76:0e:db:44:86:a2:27:2d:85:ad:d0:28:f4:27:20:
37:01:44:91:38:7e:33:e1:81:37:c7:57:ad:3a:bb:fb:39:86:
20:b8:7a:73:9a:91:55:ab:dc:01:b6:8a:d5:ee:c9:74:c7:14:
e6:75:1d:db:95:f6:1e:31:9f:23:fa:b8:86:0d:73:8f:fa:a7:
7f:ab:87:df:d1:81:e5:41:41:4e:07:00:d5:f3:1c:7a:fe:92:
ce:5b:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 14:42:38 2025 by rpki-client