Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: qedyD/UBTe8BKMXobSVHgWaKUdPsYex30A05rk/7/GI=
Subject key identifier: 5F:6A:EE:52:86:AD:DA:7F:08:60:9E:35:01:F5:C8:A1:22:D3:2C:A7
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 0198530CE9DD7CFC0C45BBDDA39D99C5D26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 01FB
Signing time: Mon 28 Jul 2025 22:00:11 +0000
Manifest this update: Mon 28 Jul 2025 22:00:11 +0000
Manifest next update: Tue 29 Jul 2025 22:00:11 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: 4sGmHK7yGRERNm7GfgLjzBk+KWPmzclEBibgzoyJp8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:e9:dd:7c:fc:0c:45:bb:dd:a3:9d:99:c5:d2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Jul 28 22:00:11 2025 GMT
Not After : Jul 29 22:00:11 2025 GMT
Subject: CN=5f6aee5286adda7f08609e3501f5c8a122d32ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:19:01:34:36:94:11:24:73:03:17:1b:ce:
e1:98:c7:0d:ea:3f:39:fb:53:f0:3c:25:38:77:01:
a6:a8:09:51:23:2d:a8:81:66:35:13:4b:4c:03:ec:
5b:7d:3e:9d:9e:2f:52:31:b1:bd:c9:a1:d8:93:34:
3e:ed:c6:e0:74:76:e8:5f:d4:37:27:5f:c6:a0:f3:
11:4d:50:31:a3:f2:6f:cc:94:19:a1:cc:ff:80:ff:
99:d7:08:10:4c:c3:e7:21:80:b5:87:ce:b2:09:38:
9b:7f:16:25:04:d4:41:a8:fa:ac:3d:21:28:80:9d:
ef:1d:5f:f3:ef:86:79:33:33:54:a6:a3:37:03:a7:
8e:c9:3d:b6:f2:8b:e8:3d:8d:d6:1f:51:29:86:55:
87:41:cf:e7:f8:85:8a:a3:23:cf:d3:b9:69:97:9d:
d6:e2:dd:32:7b:ee:a4:aa:3b:5d:fc:6a:39:38:98:
ef:8d:67:48:65:23:42:13:c1:49:0f:ad:af:45:1b:
98:77:ef:81:93:29:42:65:59:7f:35:37:87:c7:d2:
f3:56:a9:f0:ff:d6:f3:83:88:b0:2a:cf:f9:f3:25:
20:23:d6:a3:71:7d:3a:a3:c3:6f:ea:62:b6:79:1c:
3e:29:cf:a4:78:10:30:b5:4f:fd:98:83:f1:2f:fe:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6A:EE:52:86:AD:DA:7F:08:60:9E:35:01:F5:C8:A1:22:D3:2C:A7
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:13:d7:50:94:f5:dd:1a:9c:69:1e:9e:53:06:80:d1:cd:87:
1a:75:f3:f8:69:78:4a:cb:6d:24:8c:fe:ca:a8:4c:85:26:c4:
33:aa:e7:93:d9:f1:92:fd:b6:41:bd:5b:e2:29:0f:a6:66:7e:
67:f2:7f:65:f5:49:82:8f:dd:52:6f:50:13:6a:c1:f2:4e:77:
93:77:31:6f:f6:85:d2:24:da:61:bd:91:c3:38:6f:44:4a:06:
1e:27:13:75:9a:08:2b:dc:e8:ef:12:32:6b:8d:23:af:df:70:
c5:75:59:73:f0:f0:9b:9b:99:79:91:fb:a9:ae:fa:e6:8b:ac:
7e:42:ff:92:f1:7d:e1:02:97:86:73:4e:d1:48:9b:9e:48:bf:
f5:7d:24:c1:ce:06:72:5b:08:33:61:1c:6e:d5:8f:b0:dd:8d:
52:05:10:3d:df:42:94:33:07:20:8b:af:f8:10:ad:9b:ca:ab:
0d:a7:39:dd:eb:f1:e4:4a:e0:27:8a:17:da:d8:52:14:f7:d2:
bf:49:e3:15:a4:fd:06:82:41:22:3e:23:a0:56:9f:f9:a7:89:
e2:16:24:92:4b:99:57:ca:e3:4b:f6:59:8f:35:94:b5:cc:92:
cc:2d:6d:cf:dd:cc:57:27:35:af:25:7d:75:12:2e:ca:ea:50:
13:71:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:46:32 2025 by rpki-client