Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: /j1MHkq1fGkO+9XtECoXoYQNmJcWQl6PhvreJ7RDhHY=
Subject key identifier: CE:F7:77:CC:3F:DC:E2:03:4C:F6:1D:20:F0:B3:03:52:B4:E0:B7:41
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0198443F34C4CBEB2B8CA4F2B69D7D51CF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 01:00:49 +0000
Manifest this update: Sat 26 Jul 2025 01:00:49 +0000
Manifest next update: Sun 27 Jul 2025 01:00:49 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: 0XtwGRcWHgIzoFXnAuYOthu9VIfYywJraTbPGrORp74=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:34:c4:cb:eb:2b:8c:a4:f2:b6:9d:7d:51:cf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jul 26 01:00:49 2025 GMT
Not After : Jul 27 01:00:49 2025 GMT
Subject: CN=cef777cc3fdce2034cf61d20f0b30352b4e0b741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:1c:59:77:e5:b7:5f:ca:92:8a:a9:9c:ed:
c0:8f:9b:0e:19:23:1c:ab:36:7a:bb:fb:c3:b5:f6:
22:b2:a4:ba:d0:c5:e9:3d:14:17:08:fa:df:9d:27:
72:df:33:f8:55:f5:c7:64:f2:e7:53:dc:8f:9e:51:
ad:7b:72:90:dd:83:85:b5:08:df:1f:ca:5b:16:96:
8b:be:7a:c5:2b:b8:fb:2e:8f:a8:a8:9d:8f:cb:d8:
99:68:49:d2:74:4e:97:76:0b:3c:6a:b9:14:bf:0d:
3d:c5:8d:85:a6:26:f4:79:1e:d4:26:34:b5:cb:44:
77:d1:cf:ad:7b:07:f2:98:5f:68:47:ef:38:5a:ce:
31:a9:54:42:48:19:e7:3e:3a:7b:fb:17:6f:41:9b:
67:90:d2:93:cd:86:d9:0f:1f:ae:b4:af:34:aa:49:
3c:ad:95:57:16:06:47:70:58:4d:d1:8f:3d:d3:27:
d2:3d:43:56:5a:d7:c5:bd:16:9c:0b:dd:8f:ea:da:
ef:ec:2c:90:1a:32:ae:4e:2e:17:09:1f:5a:ec:e7:
1f:d8:aa:e1:3f:7b:62:e4:7c:76:9e:f2:55:c3:b3:
44:4e:26:de:a0:36:71:ab:d5:ae:82:2d:2d:0c:d2:
fe:23:eb:13:87:fe:1b:0d:f2:b2:56:5e:c8:b2:97:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F7:77:CC:3F:DC:E2:03:4C:F6:1D:20:F0:B3:03:52:B4:E0:B7:41
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2a:9f:1c:2a:e5:34:b0:10:8d:dd:bd:1b:4d:f2:38:e6:f7:
05:ae:e9:6a:44:12:e5:06:14:d5:08:9e:fd:11:85:3a:f1:a9:
d3:0c:76:63:bf:5c:93:21:3b:93:c1:82:b4:e0:14:eb:d2:ee:
54:38:12:bf:9d:1b:28:d2:70:c9:e4:4c:59:58:1c:f5:d5:cd:
87:68:64:3a:c4:ee:ce:88:bb:76:10:3f:f1:20:5f:ce:44:5c:
96:d3:61:46:c1:d8:a9:90:bb:05:3e:c5:1e:e8:ee:42:22:0c:
20:84:3d:94:c5:57:aa:27:c8:d1:e6:ee:cf:2d:0d:c0:ec:d8:
eb:ae:e1:53:da:1a:98:ad:be:74:d0:98:8e:63:63:61:50:2f:
a4:fc:55:e3:c0:99:af:60:81:32:1d:19:1a:4a:1a:4a:3c:3f:
b0:75:cf:ed:fd:f9:d3:5f:f5:96:0d:40:54:31:09:00:71:62:
30:8e:3a:09:cc:9b:af:ce:aa:57:cb:94:3b:ef:a7:61:c9:5b:
b5:4c:d1:9f:53:a2:19:6f:36:76:39:9b:59:12:05:91:49:23:
6e:fd:80:2d:dd:90:4e:1e:e2:6d:51:86:59:fd:84:e7:33:84:
bb:02:bd:5a:c0:23:ed:25:1b:27:76:f4:0c:69:09:48:08:d3:
24:2b:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:31:17 2025 by rpki-client