Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: gC/Kb0CsYoknJgZ+TpMG8QGzcnPTs5iXKqLZK1UKExU=
Subject key identifier: 62:FC:49:12:06:EA:0A:B1:45:C0:5C:21:66:5D:33:D8:14:76:14:AB
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019859473B54F6B02023F5B387D44E494471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 160A
Signing time: Wed 30 Jul 2025 03:01:37 +0000
Manifest this update: Wed 30 Jul 2025 03:01:37 +0000
Manifest next update: Thu 31 Jul 2025 03:01:37 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: HP+sl+rXKorSpl7gSVZOmMsRN/sucDg+9P2zQ45jjU8=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:47:3b:54:f6:b0:20:23:f5:b3:87:d4:4e:49:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jul 30 03:01:37 2025 GMT
Not After : Jul 31 03:01:37 2025 GMT
Subject: CN=62fc491206ea0ab145c05c21665d33d8147614ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:d1:64:b9:50:d1:4a:be:d4:27:b2:08:9d:
1a:6f:7b:02:7e:d1:21:84:49:6c:cf:6b:ed:d9:07:
bd:7f:60:20:95:43:74:94:f0:89:21:19:ae:ae:a2:
b3:02:21:6f:05:f6:48:ce:34:68:26:e4:b5:e9:34:
e1:46:01:45:6d:13:a2:ba:9c:6a:b2:63:ae:38:09:
be:34:b9:9d:72:4e:9d:13:ec:11:3e:56:07:15:3f:
a7:20:26:be:84:56:73:24:f5:68:fe:fa:fb:5b:dd:
f6:79:c5:df:90:2d:42:9a:1b:92:f0:90:fe:4c:0a:
f7:c3:ae:7d:43:6f:d7:b3:2f:5d:96:16:97:8c:1a:
61:e6:40:f1:db:43:47:10:ec:0e:82:04:00:d2:1f:
21:43:ac:06:d5:e9:85:9b:ab:16:2e:a0:42:0e:55:
57:77:ef:5a:cf:7e:f3:cf:53:a1:4d:cb:49:af:91:
48:28:b3:f7:35:29:e2:6a:f6:dc:d9:2a:bf:50:cf:
db:e3:75:73:bf:ae:e8:ce:c9:cf:6c:8c:ae:fa:21:
7f:02:9e:29:4f:51:90:c3:88:69:fb:aa:d3:ca:58:
9b:7b:14:91:9d:9d:8b:f7:07:4f:b9:cb:d2:1f:29:
57:6a:b8:be:63:79:be:d3:de:72:9e:e1:62:26:d3:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FC:49:12:06:EA:0A:B1:45:C0:5C:21:66:5D:33:D8:14:76:14:AB
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:87:9e:c1:38:4b:88:51:3e:b2:a9:5e:d6:a5:5d:cc:74:35:
2f:d2:b9:20:54:e5:31:ac:4b:fe:20:31:04:26:a2:02:82:9c:
c3:c8:4a:af:95:54:52:3d:f6:5e:e4:c6:f5:6e:53:5c:53:bd:
77:88:04:75:b1:d3:8f:8e:1e:6a:19:4e:f7:11:c0:23:dd:41:
46:29:67:b4:24:47:19:6a:07:0b:bb:56:0b:10:f0:bb:f9:d9:
23:1e:04:ef:2c:76:23:18:f1:1a:14:ad:b9:f5:a1:b7:56:fe:
06:44:88:29:7e:b9:b5:f0:8c:37:80:ae:95:9b:b8:fd:b9:1a:
12:a8:e1:6d:80:b7:c8:9d:97:da:a6:36:28:0f:ef:7e:be:84:
23:49:e0:c9:f3:47:a5:c5:3f:40:bf:13:30:14:ad:34:a7:55:
c1:49:33:49:cf:9f:f2:96:ec:4f:ef:7f:4a:e9:ba:8a:5f:71:
b7:11:00:72:b4:db:75:9d:88:cc:1d:8f:a2:5e:00:dd:3f:bb:
f0:97:50:54:b4:6c:2a:7a:e7:17:99:5a:d9:7f:5c:9f:4f:f9:
94:d0:9a:b6:7a:eb:8b:1a:70:8d:f8:85:4c:e9:46:a7:32:34:
cc:ea:6b:75:b5:5d:5c:8d:f4:aa:4c:22:98:00:73:ba:c0:28:
41:f2:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:19:57 2025 by rpki-client