Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
File: Z1Zd_fZrIS4XodmKf14rCzJkza4.mft (raw, json)
Hash identifier: oUAazTQ4oAmaY5d9Xkt3/C5h0vM0fDqaOraVl4foMcI=
Subject key identifier: D0:D3:BA:AF:6E:2A:CE:C9:08:D6:C0:A5:D7:E6:18:3D:F5:B9:DC:40
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial: 0198CACAE11C1B4123A8DCB210AD950C54C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
Manifest number: 1645
Signing time: Thu 21 Aug 2025 04:02:30 +0000
Manifest this update: Thu 21 Aug 2025 04:02:30 +0000
Manifest next update: Fri 22 Aug 2025 04:02:30 +0000
Files and hashes: 1: Z1Zd_fZrIS4XodmKf14rCzJkza4.crl (hash: j2yLW1unWQja1t9P7n35vpF8mnTXe5EacNkANx2cZwk=)
2: edLAr30NQ2j1eS2szlFoVf6cZ6k.roa (hash: YX6gw5+qXpVJdrJ3QtQM0C2faqlrGQ4u2zGhs6Hy6CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 04:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:e1:1c:1b:41:23:a8:dc:b2:10:ad:95:0c:54:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Validity
Not Before: Aug 21 04:02:30 2025 GMT
Not After : Aug 22 04:02:30 2025 GMT
Subject: CN=d0d3baaf6e2acec908d6c0a5d7e6183df5b9dc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:32:31:03:fa:5c:3c:f7:46:9f:96:33:d5:
42:7d:d0:d4:df:5c:92:d4:c1:80:88:fb:bb:61:13:
6d:05:72:76:96:df:37:b2:a0:9b:03:c6:f6:35:63:
5e:b4:cd:a2:21:68:23:b3:cc:be:0b:2c:18:6b:27:
fe:e0:80:b3:0f:d8:cb:ce:87:88:00:0f:9a:9a:71:
95:9f:5e:cd:f3:b9:95:11:b6:1f:c1:15:fc:82:73:
b9:c5:7e:c6:eb:77:25:b9:68:b1:41:64:d0:5b:63:
cf:e1:db:1b:68:84:23:1f:87:a8:19:a4:3a:6d:87:
62:17:db:d9:a0:c3:1c:3b:fe:77:10:bb:22:12:2c:
b7:2f:2c:99:f1:87:65:3d:64:d4:17:38:89:a0:2a:
52:f1:e9:38:b6:a6:f0:c1:35:f0:45:f9:a2:97:52:
6b:2a:72:9f:63:b9:9e:5c:bb:0f:b9:d1:c6:a0:c2:
c9:ee:0b:93:bd:2b:66:33:5e:1b:80:eb:66:7e:d9:
5c:d8:98:78:d5:63:a0:7b:67:fb:9e:a3:f1:bb:d4:
8c:01:53:bd:c8:15:7f:b9:07:36:41:da:08:7b:70:
33:6d:02:20:23:de:66:d5:e7:42:86:18:79:dd:fb:
ff:37:8b:68:f7:d3:98:dc:02:6f:34:1f:9f:52:84:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:BA:AF:6E:2A:CE:C9:08:D6:C0:A5:D7:E6:18:3D:F5:B9:DC:40
X509v3 Authority Key Identifier:
keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:61:b7:58:96:80:ab:90:ae:36:b0:1e:e9:f2:c1:f4:63:42:
b2:cc:59:f3:97:8b:b4:6d:71:61:ef:55:19:6d:24:7b:19:41:
91:66:a1:11:df:f9:56:c4:45:97:02:a6:fb:d0:c8:17:77:e9:
44:85:4f:fb:fa:f2:de:26:d0:41:65:5d:9d:59:70:40:4f:a7:
9e:84:be:01:96:1b:c5:7f:4e:5d:3f:b0:ca:1b:f1:9a:73:c6:
12:ba:61:5f:29:d3:79:44:50:f8:d8:76:7c:1a:5d:ff:4a:eb:
db:d3:b8:c4:87:70:71:15:b3:8b:b8:06:28:50:8d:04:20:46:
51:74:01:4e:9c:cb:be:cf:a1:1b:b1:64:36:cd:05:c3:10:37:
4d:b4:51:2e:ed:42:ec:40:d3:f5:c7:9c:26:0e:71:9f:7e:02:
13:b4:14:c3:9d:3e:ec:a8:b2:37:5b:20:47:41:52:63:91:58:
df:05:35:80:e4:96:e7:17:7f:0c:b9:42:47:9e:f8:29:28:18:
82:4b:b7:82:3e:02:17:56:b4:a4:26:e3:ea:b9:fd:c0:14:ac:
fd:33:79:ee:25:f2:d8:98:82:de:e2:6d:99:17:8f:80:4d:48:
34:0a:ac:7e:e8:fa:a9:5b:08:d1:17:1d:6d:7d:1c:34:15:0b:
e7:62:34:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:42:40 2025 by rpki-client