Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: eLI6OcOCz5Smu52Q1aT/9VA4nrsBdahuLOptw29GzFk=
Subject key identifier: 99:91:36:29:8C:77:13:F9:09:32:CE:41:FE:78:64:4F:BF:42:8C:F2
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 01984475B3BE8FF2D7B942CA411E8C443264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 04F9
Signing time: Sat 26 Jul 2025 02:00:21 +0000
Manifest this update: Sat 26 Jul 2025 02:00:21 +0000
Manifest next update: Sun 27 Jul 2025 02:00:21 +0000
Files and hashes: 1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: Lw03aXImyvG/6HnK5Aa2YbuCqceiJhxUyw3U+9+sbAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:b3:be:8f:f2:d7:b9:42:ca:41:1e:8c:44:32:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Jul 26 02:00:21 2025 GMT
Not After : Jul 27 02:00:21 2025 GMT
Subject: CN=999136298c7713f90932ce41fe78644fbf428cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:62:df:97:1d:63:2c:61:b8:69:50:11:9e:
6b:ea:87:78:a0:25:c3:2b:33:dc:80:bc:bc:67:10:
1e:84:36:06:8f:4a:49:63:0a:f2:f2:4c:55:43:7e:
57:50:c5:f8:85:bc:f7:3e:51:d8:1a:e3:6d:85:c1:
d6:9b:8a:c8:77:d4:a6:f0:25:8d:98:c4:5a:25:06:
30:c9:bf:73:d6:78:41:55:2d:e3:bc:aa:11:76:1e:
1f:17:17:29:85:1a:00:72:40:b7:e5:33:3a:9c:3c:
dc:e9:ab:56:a8:17:c6:9b:61:1c:de:3e:3a:0e:fa:
96:70:64:5a:8c:a2:2e:84:b7:e1:08:e2:fa:5b:76:
8f:2c:89:eb:84:40:7b:01:83:aa:15:3f:f5:f4:bc:
e1:67:01:fa:22:ac:d0:d6:4b:85:db:b3:61:de:65:
0e:16:02:5e:7b:a1:1e:e6:d4:68:82:df:5a:79:bf:
1e:7f:c9:07:b7:bd:19:fd:f6:8d:6d:27:c6:d0:ef:
d9:bc:f8:13:d9:43:89:13:a5:75:53:f6:82:7b:70:
44:0a:3e:5a:89:7e:7a:16:98:b1:44:4b:01:9d:89:
ed:88:7a:a8:29:1c:ab:9a:73:5a:6c:6c:7b:09:61:
bb:48:c7:8d:75:7d:25:49:a0:2d:41:37:91:2e:92:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:36:29:8C:77:13:F9:09:32:CE:41:FE:78:64:4F:BF:42:8C:F2
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0c:e5:25:ab:80:b4:08:00:60:94:77:89:d1:e4:b9:3f:59:
f4:a2:a4:8d:b3:08:30:f3:24:7d:03:a1:e0:42:52:85:e4:8a:
57:f0:97:7e:35:86:85:d9:da:76:18:00:ea:18:42:d1:d2:62:
3e:27:82:05:aa:ce:98:f9:ea:2e:71:b3:14:35:5b:43:15:f2:
b9:66:93:f0:32:b0:b9:5c:26:e8:e0:c6:66:e0:82:87:59:36:
41:67:2b:fb:31:85:4a:8d:d5:74:f9:33:cd:2b:31:52:e0:78:
36:93:58:e8:e5:70:9f:ea:70:81:06:55:66:f6:bb:26:00:96:
7e:38:6b:c6:5e:22:65:12:d4:14:39:98:d9:28:22:85:15:2f:
46:df:d6:f2:11:c2:f9:6a:bb:01:fa:b4:91:34:d2:cc:0a:8f:
13:14:b5:46:1d:51:5b:17:ba:a5:3f:2e:69:e5:fd:df:63:d7:
cf:90:85:ac:40:20:a8:cb:5d:b2:3a:48:31:e7:25:f2:34:5f:
73:21:96:e6:b9:cb:0c:c9:25:e9:8d:e9:5b:70:6f:bf:f2:6f:
40:fa:25:fb:c8:ef:14:f1:ae:02:80:93:92:8e:24:86:77:3f:
62:c6:fb:66:0c:b9:08:65:dc:8b:70:f8:ee:76:31:fd:51:a0:
7b:85:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:53:33 2025 by rpki-client