Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: xCzCqSEdT+x+QgJCZR7XcRZiEe+YUcF74Il5bheUuLY=
Subject key identifier: D4:A9:86:DF:9D:16:7D:E3:9A:A3:B4:98:BD:DD:FD:77:FB:26:C3:BA
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 019916F5DAA5B2B9750540C72E886FBC4D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 13A6
Signing time: Thu 04 Sep 2025 23:00:34 +0000
Manifest this update: Thu 04 Sep 2025 23:00:34 +0000
Manifest next update: Fri 05 Sep 2025 23:00:34 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: dit8mrz9DLBMdNqd5P9mrmGEueoDyrxseAiJafyLHHw=)
2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:da:a5:b2:b9:75:05:40:c7:2e:88:6f:bc:4d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Sep 4 23:00:34 2025 GMT
Not After : Sep 5 23:00:34 2025 GMT
Subject: CN=d4a986df9d167de39aa3b498bdddfd77fb26c3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:31:36:48:ff:cb:09:52:a7:0f:8e:e6:ec:
8d:bb:50:f6:5e:e6:d5:b5:6a:b4:1f:80:e1:35:79:
dc:be:4e:2a:25:4d:89:58:c3:ad:7c:fc:35:e5:14:
dd:bb:a5:6b:8a:9e:79:55:dc:4f:d0:be:60:0e:c2:
2b:39:4b:91:2b:e9:e4:e5:5b:d8:4d:69:52:b1:b6:
25:cc:b2:4b:ba:d5:2f:7d:73:ec:8f:36:bc:23:ec:
27:67:2d:a4:af:55:95:f7:65:ef:c7:0a:57:b1:b2:
4d:a5:7b:6f:90:eb:47:d1:40:60:5b:8b:4b:8a:fc:
54:6b:c6:e3:49:14:4a:e8:7e:16:86:53:05:e9:55:
62:eb:db:d0:9b:b6:d3:5e:1e:16:70:4b:b4:c8:a8:
6e:d7:5f:e8:23:e1:55:34:96:45:53:81:00:9e:57:
e0:9e:f1:da:ba:9d:52:e3:e0:ef:55:bf:bf:e5:9f:
68:d1:23:77:dc:0a:65:b0:3a:51:fc:6e:3b:17:7d:
c5:a2:07:91:73:5e:de:b2:8b:d3:ec:37:10:2b:b4:
f6:11:eb:0c:65:89:ac:1b:e6:cf:71:ba:e6:43:a2:
c7:a6:ca:b6:db:25:94:2c:64:35:f8:c4:a3:62:15:
19:5a:e2:71:c7:0e:1b:62:95:2b:cc:b5:a3:f4:fe:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:86:DF:9D:16:7D:E3:9A:A3:B4:98:BD:DD:FD:77:FB:26:C3:BA
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:40:79:6f:55:77:30:a4:41:74:ce:de:5c:67:be:80:5e:32:
69:e2:a1:f8:9e:98:00:32:ea:80:7e:db:e0:4c:1b:4e:5e:d7:
2d:23:e2:0f:de:eb:00:56:a7:e4:f1:d4:99:45:e0:de:c8:f9:
d7:d2:b1:5c:43:72:d4:95:c4:32:8a:d5:4d:6e:36:1b:16:3c:
c4:47:11:a0:2e:95:85:65:29:75:3f:dd:c9:d9:50:d6:66:24:
5f:fe:74:eb:39:b7:41:98:f7:38:1c:8c:ec:dc:9c:80:c7:93:
a8:2a:6e:45:dc:9e:e1:38:31:66:dc:40:aa:f7:4d:f5:7c:46:
92:2f:17:24:82:ed:31:dd:eb:a1:fe:d7:7f:af:8e:3d:c5:7e:
37:c0:f8:6d:29:13:fd:0a:2e:cf:39:4a:df:2a:37:69:e7:48:
41:f9:ac:82:f7:55:12:71:4b:82:93:db:c7:dc:65:65:13:9a:
d6:92:e5:61:f3:cb:ae:6a:f6:df:0b:a1:3f:88:9a:25:3f:d9:
52:5b:8f:72:9d:ec:5c:58:78:6d:1b:26:2a:06:ba:f3:e2:d5:
9e:7a:95:56:61:26:5c:65:1c:b2:58:cc:ee:99:ee:a5:4f:12:
26:ea:a9:3e:01:a5:68:cd:43:e8:44:fb:f0:44:92:7f:16:c3:
37:a8:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:31 2025 by rpki-client