Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: MN3GFuD1ZySLlDxN9q1+EsznnORdw9yJ2KBP+cAuL2Q=
Subject key identifier: 4D:4C:17:D0:62:EF:45:CC:46:FE:DB:4B:CD:C3:B5:80:FC:AD:5C:6A
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01992E90390D0AE34C14CE54E4F20AB6F94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0B39
Signing time: Tue 09 Sep 2025 13:00:27 +0000
Manifest this update: Tue 09 Sep 2025 13:00:27 +0000
Manifest next update: Wed 10 Sep 2025 13:00:27 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: CzNxGgiWCKPMFnHkvWAzPzFzGHXWmu/tUzvo0VZ2l74=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:39:0d:0a:e3:4c:14:ce:54:e4:f2:0a:b6:f9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Sep 9 13:00:27 2025 GMT
Not After : Sep 10 13:00:27 2025 GMT
Subject: CN=4d4c17d062ef45cc46fedb4bcdc3b580fcad5c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:32:19:7b:e1:9d:f0:e4:53:aa:2d:95:39:
bb:fe:bd:ff:a2:17:83:2b:47:a1:f5:6d:72:ab:a4:
13:c0:73:92:d3:fe:2e:16:b8:90:5e:03:b6:2e:8a:
eb:ed:65:67:50:2a:f9:1b:24:4e:60:08:4e:7d:73:
5c:72:50:a4:b4:e1:98:18:c4:6c:b4:3d:3c:16:3c:
95:8b:f7:b4:7b:4c:ec:bc:6e:13:44:65:d3:04:5b:
47:ff:cf:cd:8f:e9:87:40:10:6c:56:dc:82:34:23:
c3:e0:1e:31:b3:a8:93:63:98:56:bc:27:ef:97:c3:
03:d1:00:c5:67:bb:3e:e0:ca:7b:45:c7:4c:f5:ea:
40:cc:92:3d:0b:f6:2f:b2:35:b1:80:0d:89:3b:e5:
49:c3:a8:f9:1c:62:22:61:b5:49:b5:1b:25:a1:1f:
4d:ca:e2:4c:b5:03:b1:f2:a9:88:05:b4:b9:2b:6c:
93:25:ff:a0:ac:1b:bc:35:1a:42:e1:1b:65:1a:c5:
e4:91:3d:a3:d3:eb:9d:09:58:82:fe:82:3f:ab:d8:
d7:a3:4c:9a:40:1f:b1:cf:28:6c:e7:6e:e2:7e:4a:
aa:fb:dd:20:4d:7d:9c:e3:59:d8:8c:60:b9:7b:ea:
ed:91:e3:af:42:b8:2e:3d:ec:d5:68:fa:e1:60:68:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:17:D0:62:EF:45:CC:46:FE:DB:4B:CD:C3:B5:80:FC:AD:5C:6A
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dc:d2:fe:b9:3d:d7:5f:a4:d6:9e:54:31:46:16:4c:84:28:
69:a6:84:4c:53:a9:ea:08:6a:f8:33:4d:f7:82:6f:18:13:75:
09:04:e2:25:5f:e3:b0:7a:91:03:ff:16:55:55:83:2c:3f:21:
52:aa:33:21:50:df:a2:a0:1a:6e:05:af:19:85:db:5b:db:a0:
11:19:ef:db:a1:f9:0a:13:25:ef:c0:59:1f:77:4d:88:37:8e:
37:55:ff:f3:6f:a1:ab:8e:be:86:e2:4b:ff:2f:15:5b:04:ab:
25:c0:4f:87:47:2a:cd:7a:0e:92:8d:79:f7:e4:39:b0:4d:ca:
95:13:73:93:38:3c:1b:d5:16:7e:1d:ed:ed:60:86:bf:38:00:
d1:f4:6d:fc:d9:4c:74:29:bd:3b:11:37:71:7e:97:05:62:f5:
de:61:37:95:30:67:1e:94:9e:d3:da:62:d7:ff:a6:b5:d2:93:
45:34:4f:1b:fc:bd:c8:be:c2:82:7e:6e:d1:93:cf:37:01:8d:
76:92:d5:c7:d3:4d:69:51:60:4b:cb:bd:13:19:15:60:6f:4c:
3f:a4:08:b1:00:d1:aa:81:2b:5f:5b:15:64:9f:aa:4a:2b:71:
a5:c9:83:15:14:fa:23:f3:84:7f:58:2c:fa:c5:be:3e:0d:07:
b8:16:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:43:16 2025 by rpki-client