Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: WXAvdHWtXibV7Z5CF4/pkkPsAfJmd8aL2jpJB0MQ1lU=
Subject key identifier: 01:18:F7:B8:40:53:D3:26:DF:A4:17:B8:1A:57:D4:E2:1E:43:E3:12
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 01984E1E4AD91E48D846005B2F9F5C6A234B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0C18
Signing time: Sun 27 Jul 2025 23:01:04 +0000
Manifest this update: Sun 27 Jul 2025 23:01:04 +0000
Manifest next update: Mon 28 Jul 2025 23:01:04 +0000
Files and hashes: 1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: 8HDxI3JF2T4I0RfMGMns5iAKGbxduSrVvda5mJwntk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1e:4a:d9:1e:48:d8:46:00:5b:2f:9f:5c:6a:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Jul 27 23:01:04 2025 GMT
Not After : Jul 28 23:01:04 2025 GMT
Subject: CN=0118f7b84053d326dfa417b81a57d4e21e43e312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:d0:06:11:74:4a:e0:d7:5a:34:bb:5d:5e:
24:57:4d:f2:9b:d5:9f:8c:53:f1:b9:03:52:63:4e:
49:8f:54:cd:e2:ff:f5:6c:69:6a:ae:08:84:ff:5e:
5e:4f:3c:56:f8:44:58:29:03:33:a5:1a:97:c5:5a:
82:9d:0d:2a:1a:48:94:91:67:02:f5:68:19:92:51:
a3:6d:88:7f:df:09:a1:ad:9a:f2:e3:99:11:2f:d9:
7e:fa:7b:67:cd:7a:2b:af:25:01:3f:78:18:e7:7f:
b3:2d:e0:f5:6d:dd:b5:ac:2a:7d:29:55:b5:92:a3:
0f:12:be:b0:32:8b:c6:4b:ee:90:11:10:43:2b:c8:
0f:d8:3b:c4:e6:2d:6d:9b:c9:29:d1:1b:c1:60:83:
b0:78:96:ff:58:05:2a:88:c2:ab:02:cc:c9:af:c8:
96:1e:72:5f:4d:22:1b:03:61:9f:61:79:06:0d:aa:
90:27:97:c7:27:6a:ca:b3:f5:d5:a3:ff:f3:cb:65:
d1:2f:8b:30:d0:51:f0:aa:04:b0:80:77:7b:12:f2:
66:fb:67:d0:0f:d6:23:83:88:37:d2:f5:43:fe:1b:
e7:2e:ef:b9:72:0b:13:9f:d6:9d:39:5e:57:da:07:
e5:46:b4:d1:25:1c:0b:3d:79:bc:ca:1a:8d:82:15:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:18:F7:B8:40:53:D3:26:DF:A4:17:B8:1A:57:D4:E2:1E:43:E3:12
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:04:25:c0:7b:a0:18:69:0d:3f:ed:62:01:4f:a5:c0:22:9e:
42:fb:44:c3:eb:03:c6:47:56:6e:70:8e:8c:4f:a8:72:e9:75:
6e:80:fc:7b:fa:7b:d5:46:d5:bd:6f:b5:a8:97:75:56:cd:3f:
92:d8:9f:14:f5:03:3c:3c:82:8b:98:1f:f2:d2:9e:8a:39:24:
f0:48:63:31:ab:68:80:0d:22:55:10:4f:79:b9:61:bc:c9:43:
66:e9:50:a3:c0:0b:63:fd:eb:dd:e5:bf:44:ae:35:1e:77:ee:
ad:d0:03:b1:29:68:10:af:c6:92:d6:2c:0c:10:0b:d9:ac:34:
67:18:56:fb:69:50:91:dc:a3:eb:36:1e:b6:09:1f:0b:fa:54:
7b:7e:5a:c1:b6:ad:dd:cd:39:1d:96:ad:ff:6d:eb:b4:1d:4b:
39:dc:3d:d9:05:5b:59:3d:ae:93:cd:3f:c8:2a:f5:4b:64:a8:
97:c3:cb:1a:4b:17:d2:b2:99:c0:f2:db:b5:ff:61:34:9a:45:
2e:c9:38:8d:7f:ba:e0:36:7f:3f:d9:cd:4e:47:a0:cd:b7:ff:
15:1f:94:69:08:1b:d8:71:15:16:39:16:07:a4:32:0b:f6:e8:
43:fb:10:76:28:16:39:da:19:24:4a:12:88:31:48:36:44:d1:
87:19:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 08:44:08 2025 by rpki-client