Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: r5c1QYpHKyEhutcnRWlRHNQK/tViHJtCtrGFQ0rb+t4=
Subject key identifier: 5B:89:4B:82:43:26:80:9C:12:C7:8F:A4:E1:C0:4F:7F:56:9F:4A:16
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 019922C38B24635EBF16AC900C7D2B3E9E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:01:04 +0000
Manifest this update: Sun 07 Sep 2025 06:01:04 +0000
Manifest next update: Mon 08 Sep 2025 06:01:04 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: vt/j4yege7xEwx1EJUSmcr22l8rXl6yavZk1GY4tmVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:8b:24:63:5e:bf:16:ac:90:0c:7d:2b:3e:9e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Sep 7 06:01:04 2025 GMT
Not After : Sep 8 06:01:04 2025 GMT
Subject: CN=5b894b824326809c12c78fa4e1c04f7f569f4a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:03:a3:a5:6e:ed:73:e7:9e:e6:af:9a:08:
9b:20:99:f3:3a:39:2d:e3:cf:18:d0:cb:43:c0:32:
66:ca:f4:3a:ef:f4:85:5d:45:45:9d:e7:09:1e:c9:
4c:5d:b8:52:df:5f:c0:5a:85:93:5e:b2:df:38:ae:
63:5e:0a:d7:fe:92:a9:86:4c:a0:e5:8d:41:af:9a:
66:b7:5f:85:72:80:b2:92:02:5b:30:11:0b:1d:48:
ab:24:4d:15:b3:ae:b8:53:d8:b9:02:a9:74:ff:ec:
fb:86:c1:9f:55:fc:d9:6a:95:5c:c8:24:e7:70:61:
ed:a4:ea:89:ed:d3:33:5a:a9:af:f2:34:25:34:8f:
4d:cc:64:4f:13:48:cc:7d:f1:79:4b:4e:b7:3f:71:
3f:5b:37:ef:a1:fc:5d:97:e5:67:0f:e4:39:e0:8d:
56:f3:96:87:f3:b5:26:21:70:4a:d8:d7:5b:41:b4:
78:10:6e:5a:9b:ab:0f:26:19:8f:05:18:b4:ba:ec:
7b:51:9d:93:03:e9:da:bf:2e:86:d6:0f:93:d8:20:
b7:b3:63:5a:5d:8d:13:72:65:69:57:c0:32:1e:8e:
6a:0d:23:e0:80:b3:55:70:94:37:58:ea:c5:aa:a6:
3d:1a:08:9c:69:ec:f7:72:29:26:a0:75:88:79:02:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:89:4B:82:43:26:80:9C:12:C7:8F:A4:E1:C0:4F:7F:56:9F:4A:16
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ae:22:2b:6f:d5:81:8b:b0:1d:24:2e:0e:b4:8e:45:8b:be:
82:fe:3b:f3:f0:6f:79:d9:d9:c0:f4:32:9a:d2:bc:23:cb:37:
07:5c:a4:96:d4:15:fb:87:5e:42:6e:8b:c2:c3:00:80:aa:3e:
da:54:b1:c6:38:39:df:4b:d1:37:a9:c8:37:60:e5:b3:c4:de:
b8:ae:0e:30:4f:4a:8d:8b:d4:51:6a:2c:82:8c:91:b3:85:a9:
4a:fb:de:6c:51:f6:87:06:76:e7:c9:4c:57:1a:8a:a4:d4:85:
c0:62:63:88:bc:83:ff:fe:62:7d:04:50:24:5c:5a:77:d9:21:
9e:0c:03:08:68:a3:28:2b:e9:f6:99:15:9d:b4:de:46:75:70:
bb:fd:df:ac:a1:92:38:46:45:b5:17:bf:1d:92:09:1b:a0:3c:
e6:cd:27:e4:c0:da:55:8a:b5:8d:f6:80:b6:8b:81:94:8f:1d:
01:77:4f:2b:ad:b7:da:69:60:81:93:d1:03:8c:bc:7f:5c:68:
6c:dd:eb:84:18:a2:15:56:96:d5:29:92:6f:e4:00:43:66:a9:
c7:56:37:31:8e:79:53:81:3d:65:7c:f2:46:8a:57:c6:94:e7:
ed:18:72:49:a8:86:fd:78:fd:50:26:b6:39:34:4d:30:b1:3e:
34:3f:d3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:43 2025 by rpki-client