Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier: KVZ+xXCV9yalpbYghKLY/YTtsgTApD2DlCQ+5gjmOcI=
Subject key identifier: CD:C1:9E:F0:F5:E3:4B:C9:8B:29:F2:E1:E9:1F:BC:98:A7:D5:AA:82
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 01984B53965620C0C5A145DFB579D3D89D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number: 063E
Signing time: Sun 27 Jul 2025 10:00:25 +0000
Manifest this update: Sun 27 Jul 2025 10:00:25 +0000
Manifest next update: Mon 28 Jul 2025 10:00:25 +0000
Files and hashes: 1: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: q3y0UcGkUCiHNP3gpsNEerBdkbhlAT72i8T4Y7mnHEg=)
2: z_g_oyYscLU1IVMsubV8om2IHIM.roa (hash: TMMjkM/DLDsCF3bsXeBPNo5kbzaCJniVgP9Feba83Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:96:56:20:c0:c5:a1:45:df:b5:79:d3:d8:9d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Jul 27 10:00:25 2025 GMT
Not After : Jul 28 10:00:25 2025 GMT
Subject: CN=cdc19ef0f5e34bc98b29f2e1e91fbc98a7d5aa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:08:38:ca:0c:f2:4f:41:04:66:42:8c:15:
da:f7:cf:57:5f:d3:11:fc:0e:09:ee:07:47:82:02:
f9:6e:16:6a:7b:fe:4b:a7:99:30:f6:84:42:ed:c7:
6c:db:41:f6:53:67:d2:1c:ac:37:9f:92:21:fa:58:
39:97:4d:a2:c3:65:17:b1:e3:da:a2:2c:78:66:84:
b8:6b:b3:c6:36:74:92:0b:a3:e8:32:f3:ba:ef:72:
0b:85:2d:c5:02:90:d8:17:19:7b:62:2d:70:a5:bc:
10:ce:62:72:7f:c4:32:4d:0f:c1:0a:05:6c:5c:53:
21:90:93:5d:4e:e2:03:11:97:d0:1f:5c:47:32:34:
c0:0b:f9:0e:16:de:af:98:b9:4b:26:d0:f2:62:ac:
13:7e:26:fa:e6:b0:c5:29:fc:44:bb:56:41:65:4b:
89:1a:d2:a1:18:00:fc:2b:61:00:f0:c9:d3:e1:e5:
0b:48:05:0f:cc:c6:e0:c7:b3:1e:45:2f:28:d8:37:
b8:5d:3f:d2:74:bc:fe:b1:1e:e2:11:ba:09:dc:19:
8c:d6:66:e5:0b:94:5c:17:39:2f:df:9f:2b:05:94:
06:bd:34:42:60:2a:d2:b9:83:22:45:dd:39:2f:ac:
a0:8d:19:8a:c7:15:44:37:98:fa:d6:af:c0:81:59:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:9E:F0:F5:E3:4B:C9:8B:29:F2:E1:E9:1F:BC:98:A7:D5:AA:82
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:8c:b2:eb:6b:8c:41:1e:c8:f0:ed:a0:8b:38:e5:1e:3d:ed:
d3:61:5d:31:17:7a:2a:72:10:71:07:4b:ef:6f:16:99:03:19:
b9:1c:df:aa:a3:27:52:21:8a:f2:a0:ba:7a:95:d3:81:ea:9a:
8d:b3:e9:3a:9c:7e:1b:8a:f9:8e:28:a3:1e:e5:36:d3:15:de:
77:57:6c:32:82:f7:1e:13:fb:4b:90:6f:3a:8b:af:0b:6b:df:
c7:46:e8:03:7a:7a:8d:42:e8:b6:bc:de:d1:a4:f8:e0:b5:29:
0e:34:87:37:5d:9a:b5:91:01:20:6a:26:09:a9:18:f6:e6:73:
6c:49:dd:ba:68:5f:63:7a:a3:d4:7a:f7:09:20:aa:3c:97:57:
ff:f7:89:cd:14:33:2d:72:72:7b:ad:a8:1e:cd:d7:b9:39:22:
1c:8c:c7:a4:d4:25:69:b9:4a:c0:fd:13:0c:74:fd:68:f1:6f:
35:10:f3:fb:50:a6:fa:24:d4:57:8f:75:ed:57:2e:f5:67:a6:
6b:9f:c6:0b:0b:3c:c3:ac:31:b0:fe:8b:3f:62:d3:e8:04:08:
5b:9c:71:fa:58:ce:40:05:e1:e5:35:90:ce:da:f8:03:90:aa:
6b:a2:d5:71:e1:9c:87:b8:98:c1:f3:a6:a7:7c:43:3b:d9:1e:
24:33:4e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:36 2025 by rpki-client