Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: fLZwLDvtJXZ8vfooU1FRGwMcvqSr9JeMkAaBJdv6CWs=
Subject key identifier: 8E:B5:7C:74:AC:86:25:07:EA:2E:A3:35:58:9B:57:1F:FA:A9:7A:E2
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019933B6F98D6A94B743FF52860E2E13C4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 160B
Signing time: Wed 10 Sep 2025 13:00:53 +0000
Manifest this update: Wed 10 Sep 2025 13:00:53 +0000
Manifest next update: Thu 11 Sep 2025 13:00:53 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: BbW022TOLdIVDJxAuWRjz4V+En/uN4eKm+KVwUe2Q+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:f9:8d:6a:94:b7:43:ff:52:86:0e:2e:13:c4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Sep 10 13:00:53 2025 GMT
Not After : Sep 11 13:00:53 2025 GMT
Subject: CN=8eb57c74ac862507ea2ea335589b571ffaa97ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:04:d9:ef:6f:a1:be:92:a0:19:18:65:92:
4b:87:9e:5b:b6:b5:36:57:4b:94:5a:c9:d6:ae:7f:
99:69:37:3d:04:b0:2f:84:18:64:0b:e8:58:d2:5e:
2d:a7:27:81:73:26:84:77:53:90:14:e9:bc:bc:56:
86:35:76:75:8f:2e:5f:ca:aa:60:e9:b5:b6:7b:2a:
3e:e5:39:c6:7a:63:76:43:20:6d:7f:35:ca:13:8a:
41:68:09:dd:38:b6:48:2d:77:81:54:b8:96:c1:69:
87:5d:d0:c4:0f:73:1d:1d:a7:9e:d0:a4:97:13:b9:
f1:a6:19:2a:7a:bf:03:10:2a:40:05:ba:f2:fb:29:
6f:fe:48:7f:93:67:10:32:1b:a6:d1:a8:9e:11:dd:
72:a0:1b:c1:82:4e:67:6c:13:4b:04:4f:95:70:fd:
5e:d0:ba:51:63:67:57:2d:c8:b9:c7:ee:8c:59:a8:
05:31:c2:54:d3:95:f9:3a:85:29:b6:ec:f8:81:ab:
27:19:bf:9a:63:97:41:83:1e:26:e8:73:91:58:91:
c5:56:cb:1d:07:48:b5:dc:6b:fa:94:4c:4d:61:d2:
66:f8:b7:90:e0:47:a8:05:dc:eb:d2:b0:c2:78:ab:
13:68:99:af:63:b9:00:ed:1f:a5:8c:8c:fc:c1:8c:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B5:7C:74:AC:86:25:07:EA:2E:A3:35:58:9B:57:1F:FA:A9:7A:E2
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e1:a3:4d:c8:57:9f:cd:2e:f3:02:9e:5b:1b:1b:07:d5:13:
ce:20:f8:c6:52:e2:77:5a:17:fe:c6:28:a7:36:ae:df:f7:b8:
3c:f1:14:40:21:7b:48:45:bf:3c:8a:ef:8b:88:11:66:5f:71:
74:ea:93:5d:71:3f:13:45:53:e9:75:5f:c8:a5:93:2f:93:a8:
0d:60:8c:c0:11:dd:8a:ce:ae:56:d4:4d:f1:db:53:e2:d6:8b:
a0:69:d1:86:e7:3b:e6:57:c6:82:7c:b7:25:5f:50:8c:6f:93:
2c:4e:1d:cf:19:5c:fb:0d:da:de:68:fe:82:c6:18:c8:4c:6e:
20:35:ee:6a:13:b2:74:a1:f5:a9:21:82:49:32:fd:06:e5:42:
c6:86:93:10:9b:16:b4:78:37:77:13:ca:04:b0:14:3e:d8:f3:
44:6d:5a:15:06:82:91:ea:23:5d:07:64:34:78:5a:84:f2:17:
ef:05:56:0c:ca:07:25:04:29:1c:33:97:31:7c:66:6d:10:1e:
88:4a:3c:99:4b:70:58:bd:c1:50:74:a3:f6:52:f5:2b:99:a0:
f5:1e:b9:56:3c:4d:3b:ce:69:50:a2:a7:8d:02:cd:05:65:52:
a0:65:e0:5b:1a:26:99:48:64:1c:75:29:96:69:6d:88:82:2d:
d6:17:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:52:19 2025 by rpki-client