Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: UytSxbEOPtt3jb+iSO0CJaAuPOdrfAl89XP1s7lbDPo=
Subject key identifier: 0E:70:A5:DE:2A:57:64:1C:C0:F6:06:FA:45:17:3F:AA:CD:63:EE:2E
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 0198481B8318ACAE697E88FAE1711433CD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 0669
Signing time: Sat 26 Jul 2025 19:00:19 +0000
Manifest this update: Sat 26 Jul 2025 19:00:19 +0000
Manifest next update: Sun 27 Jul 2025 19:00:19 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: 2EMqzjukT+TGtxp39mtoWXLg0By0aFpcL6kEcxVkD64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:83:18:ac:ae:69:7e:88:fa:e1:71:14:33:cd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Jul 26 19:00:19 2025 GMT
Not After : Jul 27 19:00:19 2025 GMT
Subject: CN=0e70a5de2a57641cc0f606fa45173faacd63ee2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:71:47:cb:38:9e:13:72:d4:51:bb:4f:42:
27:65:1b:ad:2e:b6:99:a1:16:df:a9:c5:5a:91:af:
08:2e:73:73:75:f8:12:7a:83:e0:1d:e2:d9:1c:14:
56:3c:2b:53:6e:05:d0:e5:a1:a1:ec:9f:a1:08:82:
f9:64:c0:49:a6:ad:b0:bd:0b:a5:08:85:b3:64:8a:
28:e4:d9:af:e7:4e:50:af:3a:af:94:57:15:08:b1:
d8:8a:f4:b2:ed:0c:c0:ae:18:d5:59:99:d1:fd:cd:
9c:b1:cc:8f:f8:29:51:aa:28:1e:2b:fc:ac:83:4c:
4e:18:5a:fc:9c:33:08:97:00:d5:c6:60:b7:a1:95:
20:81:86:46:ed:f2:fd:6f:24:44:7c:b6:f0:42:66:
9f:36:48:f2:eb:0d:ec:30:61:e7:7a:5c:ed:f1:9e:
84:81:a3:c7:b3:8b:ba:21:39:e4:08:6e:bd:61:0e:
3f:b1:64:8f:5f:8b:82:e3:0f:0c:5a:f7:d1:5f:5e:
e4:8c:d1:a5:0a:3a:92:15:30:dc:29:96:d9:87:0e:
3c:53:8f:a6:ea:8b:87:2f:69:ad:ce:6a:52:06:fe:
14:4f:b8:d5:d8:4f:89:8c:3e:37:36:38:32:2a:ea:
c8:c2:09:2d:6b:1d:56:0c:1f:16:d7:7a:51:c1:17:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:A5:DE:2A:57:64:1C:C0:F6:06:FA:45:17:3F:AA:CD:63:EE:2E
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:96:ef:ea:65:3b:9d:0b:82:f2:6a:71:00:1e:34:49:2e:d4:
5a:99:b6:4e:f3:08:98:2f:82:61:b6:2b:a0:c3:d1:75:80:c2:
0e:18:41:ac:89:71:58:31:b7:d4:93:18:9a:4f:38:e9:d8:b5:
46:9f:90:48:c8:87:c2:5f:2c:2b:5e:cc:64:77:17:4d:cd:74:
3f:a2:8e:1e:fd:08:67:8c:72:29:fc:a6:6d:59:96:b4:08:71:
4e:ad:08:7b:cc:a4:ba:ed:b6:03:26:63:6c:9a:02:8a:ed:ff:
d5:9e:ac:ec:83:ab:3a:0c:9b:54:f5:ad:1b:92:98:61:95:e6:
49:8b:b7:38:87:f8:f4:de:19:d8:f0:a7:b4:de:ec:33:1a:44:
9a:34:0b:20:68:a5:6f:05:26:b9:bc:6c:6a:0d:9d:20:f4:79:
b4:be:4b:31:33:f5:e0:64:cd:1a:d6:5c:27:a5:61:d6:45:1c:
8e:40:d5:bf:38:35:92:a7:2c:c3:e5:e7:61:16:55:26:03:e7:
45:ed:83:91:cd:8a:a4:d4:80:54:f9:52:09:72:27:7d:3a:76:
5b:1b:17:4e:e4:a0:80:4c:1f:96:0a:56:5d:ec:56:2b:e0:06:
e0:97:f0:8c:5e:3b:d8:2e:e4:2a:34:8c:da:92:dd:15:ae:32:
d1:ab:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:21:58 2025 by rpki-client