Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: mi32DXYfk6X5J5NvDNaATfIDgIv2gBmXPUaYc3Ai0LM=
Subject key identifier: A6:7C:6A:70:A0:0C:EF:29:2B:49:64:8C:52:AD:9F:E6:E7:01:D2:F6
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019849D377DCC584A93FEB955C5496DE8471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:52 +0000
Manifest this update: Sun 27 Jul 2025 03:00:52 +0000
Manifest next update: Mon 28 Jul 2025 03:00:52 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: YlnjDh4m2JdFlLkiISpYQ6B1vTTMqoJWZEowAalkm7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:77:dc:c5:84:a9:3f:eb:95:5c:54:96:de:84:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Jul 27 03:00:52 2025 GMT
Not After : Jul 28 03:00:52 2025 GMT
Subject: CN=a67c6a70a00cef292b49648c52ad9fe6e701d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:f6:64:e4:c6:01:39:5f:56:ac:98:4d:0e:
2a:b1:97:77:1b:5b:6e:4e:51:18:f9:ab:8a:46:13:
ce:01:ee:c4:5d:31:60:f8:93:03:dd:00:5f:2e:c8:
d3:b5:74:5f:cc:ff:0e:fc:90:73:f4:14:b1:1c:71:
f6:4e:31:3b:7f:61:27:92:98:fa:f3:51:5b:84:da:
d6:95:49:98:16:43:ac:51:b2:a5:35:0f:f0:88:82:
cf:b5:83:f7:2d:76:9f:2f:38:cb:e5:47:22:60:ef:
ad:e2:6d:b6:eb:67:ac:4c:b0:a6:11:9d:00:c9:4b:
17:59:be:42:34:58:8c:a0:35:56:bc:c3:84:2f:ee:
b0:b0:da:fc:0c:dd:55:07:2d:7e:87:63:4c:63:73:
b0:a6:a7:b3:e4:4b:81:aa:31:37:2a:1e:7a:77:78:
54:d7:6b:27:9c:55:9d:32:c5:49:7f:cd:26:27:fa:
98:ca:56:63:ca:73:6a:4d:5d:9f:4b:ea:98:9f:7f:
42:c1:60:f8:88:11:7f:95:d3:44:73:95:5f:2a:87:
a0:f5:97:63:5f:4d:66:c7:5b:e5:1f:8c:b8:f8:80:
97:e8:ea:48:64:b4:de:ef:26:2e:a5:47:0a:41:0b:
a9:c2:27:fd:7b:a9:81:46:30:30:32:0d:98:c6:40:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:6A:70:A0:0C:EF:29:2B:49:64:8C:52:AD:9F:E6:E7:01:D2:F6
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4a:2a:36:d9:a6:69:d8:05:ed:2c:62:8b:a9:df:83:14:3b:
0d:b8:62:0c:ad:58:a5:2c:c0:4b:49:3e:7d:d3:dc:ec:3f:6b:
c9:16:07:57:20:2a:f0:10:25:40:a1:06:7c:61:49:7d:e1:84:
15:52:a7:20:f9:a8:5f:82:95:06:f0:4d:e4:3d:e7:6e:14:41:
cc:27:01:fa:2a:09:c5:01:d8:a2:bc:77:d8:f1:c8:04:a2:84:
52:48:ce:7f:78:6a:88:1b:8e:26:fd:91:24:aa:a8:b9:9e:86:
47:cc:e3:56:08:a2:fa:1f:a7:dc:f7:7b:e5:23:4c:2b:c7:3d:
fa:4c:0c:01:58:de:3f:84:ed:56:a7:6d:4d:25:ff:2c:ac:17:
03:19:9a:f1:14:b3:d0:fe:8f:60:b0:24:7b:03:af:fb:cb:e4:
d0:1d:3a:1e:7f:04:92:4a:d6:73:3e:91:33:43:f6:15:30:fb:
43:71:b0:5a:7d:f7:ba:7f:f8:26:06:fc:2e:29:a2:97:db:29:
7a:0a:52:1c:52:b2:62:81:d8:2f:b9:66:c4:8d:12:d9:65:2f:
33:0e:a9:3f:72:32:cb:af:be:db:f3:a5:f2:fb:81:47:4a:db:
87:01:93:21:ca:02:6f:fd:2d:3d:e0:5e:42:e0:fe:e5:56:d5:
73:b8:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:19 2025 by rpki-client