Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: tsSgTvb+bNyfVW4HID+Q2eEZIFpIC9zd8DsQlwh8KXQ=
Subject key identifier: D3:50:1B:F6:51:DA:0A:38:BF:D8:43:12:61:BA:90:EE:BE:B2:B8:7D
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 0199375D90A53111FBB7EF64591D78D7A0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 06:01:42 +0000
Manifest this update: Thu 11 Sep 2025 06:01:42 +0000
Manifest next update: Fri 12 Sep 2025 06:01:42 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: bB8vYYp6JW5yyArOpiWnkJgGJI0QawYLMorBrGY/7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:90:a5:31:11:fb:b7:ef:64:59:1d:78:d7:a0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Sep 11 06:01:42 2025 GMT
Not After : Sep 12 06:01:42 2025 GMT
Subject: CN=d3501bf651da0a38bfd8431261ba90eebeb2b87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:9c:8d:66:8d:1c:46:57:8e:f1:0c:80:f8:
34:f1:fe:00:cc:da:d4:d2:07:7c:09:2e:23:63:d1:
46:ca:3b:f4:8a:4d:f9:df:54:2c:85:ce:c6:76:b3:
3f:60:21:4c:2d:91:bd:be:84:57:b0:08:f7:49:80:
4d:ff:c7:a5:29:b8:47:3e:cf:0c:6b:2f:ec:c1:85:
42:74:1c:0d:6a:7c:12:2b:6f:f3:de:30:1e:81:32:
5b:53:b4:73:5d:03:e1:44:f7:b5:1e:47:0d:72:8d:
54:f7:0a:b0:b0:26:03:8d:7a:bb:6b:20:22:40:ee:
47:3b:7f:31:ff:98:ac:f6:a4:84:57:d9:7b:4c:f6:
38:68:ae:76:1b:e8:f8:be:02:48:8a:ba:e6:d9:c5:
6e:33:78:15:6e:bf:b1:df:df:1e:8e:89:8a:cd:b1:
18:1b:86:66:d2:c1:6e:01:ed:62:97:bc:4e:06:87:
3d:b6:73:71:dc:27:90:41:7d:e4:16:13:b4:75:61:
5a:05:e6:74:a9:56:11:a9:23:25:1c:b0:9d:cb:6b:
6f:1c:7c:18:c1:cb:ae:96:cb:c0:00:a0:27:aa:5d:
b0:57:db:77:59:47:84:31:d8:d1:c2:79:2c:86:a6:
99:86:71:31:5b:7e:74:54:1d:20:7e:ae:8c:1a:88:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:1B:F6:51:DA:0A:38:BF:D8:43:12:61:BA:90:EE:BE:B2:B8:7D
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:06:2b:fa:01:17:a8:bf:04:f2:da:b3:9a:3b:7d:ae:c7:
7e:60:51:69:20:7d:ef:85:6a:88:aa:28:ee:56:9f:2c:d0:d5:
71:6e:8a:6f:31:7e:18:51:7e:95:59:ee:8c:13:f0:8f:bc:cd:
62:01:a0:b0:a8:20:a7:96:35:c4:4f:6b:43:54:79:7d:e7:bd:
95:02:62:bd:00:4f:dd:c5:76:21:04:a3:15:1e:33:8b:db:fd:
45:09:dc:17:86:62:f2:83:c9:1d:51:4c:a3:cd:af:35:86:15:
40:fb:6f:87:d8:21:0b:e6:42:cd:17:fe:5b:51:52:7a:7a:88:
e6:0f:d3:1c:22:11:5a:b7:bb:4c:66:b0:e5:8b:e4:96:e5:c0:
15:ff:1d:3d:bd:e3:7b:4f:00:68:51:1e:1a:d6:75:f4:8c:b0:
e2:d3:fb:64:e7:76:7f:79:a2:f7:66:80:4e:a3:cb:19:76:68:
18:b4:8c:4d:c0:a8:6c:be:3a:d1:5f:14:cc:af:1d:94:57:d4:
bc:46:63:a9:a3:f6:0a:18:c7:54:a1:d8:f2:e5:52:aa:2a:a5:
6d:01:20:eb:14:ac:17:55:a7:85:94:2a:54:d6:97:94:69:f2:
1d:56:2d:2c:80:8f:dc:3d:5e:75:92:5e:84:56:5a:22:33:32:
68:81:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:00:40 2025 by rpki-client