Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier: XG9Wozu0ax63qPslX6dgNNRfinD1FarGbUKvh8OxfjQ=
Subject key identifier: AF:7A:16:94:CE:06:4A:84:52:21:EF:68:FF:89:F2:2B:2D:E0:23:D3
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 019921B11F3276F3F470C8A1A78B259F0D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 01:01:19 +0000
Manifest this update: Sun 07 Sep 2025 01:01:19 +0000
Manifest next update: Mon 08 Sep 2025 01:01:19 +0000
Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=)
2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: P1E6OgqL2zP9iXFNAhloK3EOkVszNWVb0wvR5T270mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:1f:32:76:f3:f4:70:c8:a1:a7:8b:25:9f:0d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Sep 7 01:01:19 2025 GMT
Not After : Sep 8 01:01:19 2025 GMT
Subject: CN=af7a1694ce064a845221ef68ff89f22b2de023d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:18:f3:dd:f9:bb:77:d6:7f:ef:fb:2e:e5:
b0:aa:02:80:b5:59:c7:a4:ce:b2:6f:a5:c1:44:3c:
65:5b:17:ff:9b:1a:06:fb:7f:7d:1c:ac:0a:d1:85:
eb:34:a0:1e:99:fa:24:16:45:98:f2:5d:c7:c1:d1:
fb:b9:e6:29:1b:17:ae:de:94:e8:76:8f:38:90:d8:
65:71:82:e2:95:19:ec:76:58:39:c4:c6:84:1b:df:
de:d4:88:4d:88:3f:26:4c:07:84:65:d9:06:85:89:
04:0a:6c:88:10:b9:d8:5f:94:ec:20:a8:00:0b:05:
35:02:9e:39:75:8e:3a:27:b4:33:69:9c:49:be:99:
97:cb:9c:ba:bb:b1:b1:ee:84:7d:9c:66:e9:58:e1:
8c:43:de:ff:fa:6c:7a:f2:86:c4:b9:a9:42:fc:35:
51:89:10:50:45:b4:11:12:3d:65:2e:a3:6f:17:99:
ef:8e:89:85:02:77:71:1b:7b:21:1a:aa:d8:72:cb:
90:63:53:5e:c8:da:3e:29:3e:e7:aa:7f:d3:be:e6:
0b:03:bc:6d:ad:6a:28:c6:3a:15:a2:3b:7f:5b:ba:
13:44:6c:24:6a:fd:61:7b:eb:a2:bb:0e:b0:23:25:
de:7c:4e:9f:f0:bf:54:b3:85:4f:b9:8c:72:90:ad:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:16:94:CE:06:4A:84:52:21:EF:68:FF:89:F2:2B:2D:E0:23:D3
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:01:28:43:41:ad:50:77:0e:e7:0d:20:88:ea:42:ce:3d:
aa:f1:89:78:de:85:c4:8f:93:21:7a:bf:cc:47:e9:07:29:76:
b2:ef:c8:2d:f8:14:ad:52:24:f0:21:08:6e:3f:95:76:d0:9a:
74:c3:3e:05:d3:6a:43:93:7b:af:fc:47:93:74:89:49:b8:dc:
81:34:0d:6e:ad:12:76:d6:f8:bd:d0:20:2e:b1:1d:12:c5:2a:
f6:87:f9:38:65:7e:e6:f1:ef:95:07:dc:a3:b6:2a:c6:ed:5a:
d0:87:e4:2c:1c:08:9f:aa:6f:58:c3:f5:e5:5d:da:51:39:ef:
37:17:ca:b8:74:a8:9c:05:81:f2:23:54:72:44:b4:a9:47:33:
94:f8:45:3c:62:d7:1e:a7:94:c2:6a:d1:8f:4d:8e:16:e9:33:
d8:4f:d5:ea:57:37:4e:e8:80:52:bc:f2:f0:eb:1c:e5:ac:91:
cd:de:59:6d:23:3a:14:9b:4e:76:56:08:ee:1c:80:89:1a:bc:
91:7e:b1:1e:a5:2d:6f:d5:0b:05:c1:00:61:56:72:a8:9e:49:
30:02:6a:39:e0:27:a6:b1:84:36:07:02:da:d1:1d:3b:cc:16:
f8:24:02:19:0e:4e:6d:29:97:96:39:3d:d4:af:8a:c5:bc:d8:
6a:24:07:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:06 2025 by rpki-client