Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: DPaCKcY/fXu7eAVzJ7EQW0QX01GN9ddEVpeMSw38Doc=
Subject key identifier: 7B:9C:03:91:71:A7:60:78:5A:E7:1B:35:34:69:97:2A:2C:60:6C:43
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019845891DE3353DC1E6F1A700B755296C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 1350
Signing time: Sat 26 Jul 2025 07:01:10 +0000
Manifest this update: Sat 26 Jul 2025 07:01:10 +0000
Manifest next update: Sun 27 Jul 2025 07:01:10 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: DHaCaM8Qk2VaNPZ8AnLV6x2zLIPg/Ao4XBTCpYp8J28=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:1d:e3:35:3d:c1:e6:f1:a7:00:b7:55:29:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Jul 26 07:01:10 2025 GMT
Not After : Jul 27 07:01:10 2025 GMT
Subject: CN=7b9c039171a760785ae71b353469972a2c606c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:d0:57:07:ee:a2:dd:7d:2d:b1:6e:85:0d:
50:fb:9e:e3:26:7d:b6:db:71:5a:12:d3:13:67:09:
dc:a8:e7:8b:b9:c4:d9:3f:3f:23:53:f9:25:fb:9d:
19:59:1d:b1:35:1b:1c:66:b8:0a:f9:8a:e4:91:95:
0d:40:2a:78:35:27:f4:91:04:8f:71:1c:3f:11:42:
77:ee:7d:34:36:8c:ca:3b:51:97:d8:ee:06:32:d4:
90:27:58:46:e8:e4:31:5c:fe:ef:5d:bf:a6:21:91:
61:fd:90:d9:54:e7:a3:e7:2c:02:6d:c9:72:a5:e6:
e7:fc:b7:f0:a9:38:34:9b:d6:86:c2:f0:85:b5:62:
70:ec:ab:9b:e4:29:dc:88:31:9a:18:67:f1:fd:d3:
86:24:c3:35:a4:5a:f1:6f:6e:8c:a0:a2:ec:33:95:
5d:8e:76:ef:e1:c2:c0:8f:bb:53:32:6f:92:7f:f8:
95:a5:64:d4:1f:74:a6:d7:33:7d:53:ef:24:07:15:
fe:1c:51:cd:59:68:66:4d:f8:69:93:d3:e8:8c:1c:
d7:51:e8:83:21:d9:02:7a:69:f3:ac:0e:7b:06:39:
0b:31:ee:00:c8:1c:21:95:5b:aa:3a:37:78:23:f3:
a8:4e:1d:ab:68:66:88:22:c6:82:c6:09:44:2c:4c:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9C:03:91:71:A7:60:78:5A:E7:1B:35:34:69:97:2A:2C:60:6C:43
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:53:44:65:6b:b4:32:01:c7:01:e5:65:eb:4d:89:46:59:
84:f7:1a:9d:d7:b7:e3:fd:83:e1:8e:2b:11:bf:c7:d3:3e:8d:
16:e6:5c:9c:3b:fe:30:27:54:99:4f:ff:22:a8:a6:8f:4c:35:
af:7d:27:fe:8c:b7:87:4f:e3:5e:55:5b:ad:5b:74:97:fc:90:
36:af:bf:2a:aa:82:5d:07:a5:30:7e:91:85:88:d9:fc:f0:2d:
9f:5d:aa:2e:fe:20:02:66:8f:9f:20:e8:77:55:c6:6f:4f:fb:
c4:14:a8:e7:4d:e6:86:a5:b6:7a:ff:09:50:16:96:8b:dd:eb:
4a:21:88:80:1f:ce:bc:f8:cb:b1:59:25:b6:7c:66:b4:13:1f:
a1:39:4f:d5:e9:eb:76:81:26:ab:13:f9:cd:78:ed:cc:8c:f5:
8b:e2:53:2f:d8:14:f1:68:d3:a2:90:86:d8:3a:f9:70:6e:fe:
32:91:f7:09:e4:e6:dc:e4:0d:47:d7:11:ca:b4:7d:6d:bd:d4:
00:f8:c0:42:96:10:72:ff:1c:a2:ca:a4:5f:90:7f:81:b6:b4:
e3:e1:d3:64:d2:89:4d:41:98:9b:60:f9:16:0f:e3:29:e1:66:
3c:9e:4b:c1:dc:5e:5a:99:53:2c:53:47:c5:bb:13:d5:a1:6a:
2a:64:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:13:33 2025 by rpki-client