
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: nTxGzwzsnM+jQH4yKZUvGe8dbBeXJLqcipFWaLRnjdg=
Subject key identifier: D6:19:CC:E0:C4:38:01:D7:39:20:47:F2:25:91:99:EA:3C:F6:E7:A0
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 0199353761B497926DEA4EB6484BF73961DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 158B
Signing time: Wed 10 Sep 2025 20:00:45 +0000
Manifest this update: Wed 10 Sep 2025 20:00:45 +0000
Manifest next update: Thu 11 Sep 2025 20:00:45 +0000
Files and hashes: 1: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: hCB3Mw/CtWF4wY9/pHA5cOo1trKr2idfDis+w7nCpvw=)
2: lHo6E8O3jVZPWE_3CSGUh-yWmns.roa (hash: EcydcckC44FXLMG0RzB+bDpZsk7fNTw0ZBUYetuTeMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:61:b4:97:92:6d:ea:4e:b6:48:4b:f7:39:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Sep 10 20:00:45 2025 GMT
Not After : Sep 11 20:00:45 2025 GMT
Subject: CN=d619cce0c43801d7392047f2259199ea3cf6e7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:07:3f:f7:43:b4:31:b8:15:4d:42:49:7e:
48:84:1b:36:05:f0:6a:32:e2:ac:52:ad:21:5f:0c:
5b:c0:84:77:ea:64:fb:79:1b:47:a6:18:dc:e8:d0:
56:93:49:75:fd:da:f7:9b:ed:c4:81:78:4e:da:63:
82:4f:d9:3c:bc:92:42:a4:6b:f0:5d:b7:fe:00:ca:
42:94:cc:a9:d1:9c:f8:22:a9:12:0f:52:51:f8:fe:
99:f2:08:fd:09:3d:1d:ce:1d:74:cd:d3:a0:8a:b7:
a9:6e:2d:5e:ff:ce:b0:3b:04:19:61:55:b1:3d:98:
a4:23:20:41:ec:86:1a:ca:20:ef:e5:8e:6c:55:f9:
0e:66:59:e9:30:c1:47:dd:64:ae:87:3b:36:1d:2c:
44:e3:1d:3f:1c:f9:f1:db:76:2e:77:5b:9d:76:45:
05:42:1c:41:65:75:6f:58:c4:bd:4d:42:16:a9:44:
9f:70:c5:e6:61:e8:60:6b:9c:08:5f:17:db:0b:f6:
e2:f8:b4:9e:20:8f:5c:1c:f6:c6:09:eb:67:8d:55:
d5:88:12:f7:62:c7:53:40:77:92:21:4f:76:81:d5:
31:2a:42:bd:ab:ed:ad:7d:f8:21:1b:9d:9c:e9:2a:
ec:ef:73:58:c6:ed:0a:ae:3d:95:3a:ef:8b:4b:59:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:CC:E0:C4:38:01:D7:39:20:47:F2:25:91:99:EA:3C:F6:E7:A0
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:13:77:8e:55:b9:55:6b:f8:28:73:33:e3:26:68:5e:00:a2:
03:7a:54:d3:ea:ec:49:dd:5a:36:15:7b:0a:c0:f8:dc:bd:37:
af:98:4d:85:d7:50:02:b1:1d:99:3f:7c:0a:ba:1b:50:38:71:
54:5e:28:99:c7:7f:13:e9:95:e9:4e:53:91:43:d1:9c:bc:9c:
7d:7c:90:99:04:b3:1f:10:d0:47:79:45:d2:c7:2e:f8:74:76:
21:3d:48:b4:ba:d4:48:1d:71:0d:34:fe:87:b1:dd:3b:68:e4:
2e:4d:91:e7:c7:45:3b:bf:95:e2:ed:3a:32:c4:cf:a2:e0:dc:
76:51:01:62:34:7d:26:4d:3a:c2:05:07:b6:e7:1c:a1:38:78:
19:ab:40:d7:83:c7:d0:56:b7:43:56:ef:38:29:d3:12:70:e9:
8c:80:f4:76:e2:a6:5d:0d:95:1c:03:5b:a7:14:52:af:65:da:
73:a4:14:01:d8:fa:31:93:b8:a8:bd:1e:3d:0e:be:cd:d7:e5:
7f:ac:b0:ec:37:59:de:81:79:a6:d5:8f:f9:1e:00:c7:27:78:
3f:7d:c2:cb:00:57:e4:78:24:37:0b:3a:28:3a:95:2a:8a:95:
c8:ab:db:c6:23:06:d2:7c:5f:90:ce:bb:35:6b:28:b0:21:7e:
d9:6c:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:56:59 2025 by rpki-client