Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: t+j5cIodUFwYZDon9ZsUidse3qPSmiSGtIka9D5klZM=
Subject key identifier: 06:E8:9B:69:47:30:1F:DC:9A:39:29:4B:24:72:49:68:C2:92:8A:4E
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 01993500A24DB08F1D89C6CD24E2C40885EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 19:00:57 +0000
Manifest this update: Wed 10 Sep 2025 19:00:57 +0000
Manifest next update: Thu 11 Sep 2025 19:00:57 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: QqyVgDvbGzIhZ19nDxzmM6qtiHexBNCRA3OMkdRRxKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:a2:4d:b0:8f:1d:89:c6:cd:24:e2:c4:08:85:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Sep 10 19:00:57 2025 GMT
Not After : Sep 11 19:00:57 2025 GMT
Subject: CN=06e89b6947301fdc9a39294b24724968c2928a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:22:0c:97:cd:2c:21:a8:5b:40:4e:07:4f:
82:de:67:85:36:15:bb:89:95:9c:e0:18:d0:1b:43:
4e:78:87:4a:92:40:19:c1:59:5e:cd:dd:fc:af:32:
a9:d3:45:fa:07:27:ab:1a:44:9b:53:cf:f0:1d:9f:
c7:7a:67:29:97:f2:2a:2c:a4:9e:b9:5d:4b:ad:f3:
52:82:e3:44:50:0d:56:fd:58:fd:c1:cc:a8:df:a5:
d7:79:e7:63:62:4e:42:cd:42:4a:d0:64:00:2f:b1:
f6:00:da:57:df:d2:8b:19:a4:5f:f8:cd:bb:3e:9b:
88:17:18:ee:12:c9:79:de:1e:0a:7a:23:5e:ae:2d:
8e:9c:2a:d3:0f:74:20:e1:0c:65:78:85:76:24:80:
17:f9:9f:0d:7a:e3:fa:02:f1:75:6d:4b:ed:b4:25:
ce:f9:34:25:84:88:a5:c4:c8:68:44:5c:b4:56:4b:
00:fb:bf:bf:55:00:f1:e0:3b:46:9e:e9:8b:af:21:
5e:4e:bd:db:5b:c9:24:92:3d:99:17:8a:57:b8:33:
45:5a:c3:73:64:d7:21:02:b9:a4:12:29:6b:8b:c9:
f1:d6:b1:dc:7d:66:b4:f8:b1:a9:7c:d7:19:fe:8b:
f7:55:90:7d:60:2d:53:51:e6:6a:5f:8a:23:b8:94:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:9B:69:47:30:1F:DC:9A:39:29:4B:24:72:49:68:C2:92:8A:4E
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5c:5f:43:d6:cc:7e:eb:fe:92:62:96:21:af:c0:15:f5:2b:
e3:3f:b6:ae:c0:7d:69:5d:7b:09:28:51:04:91:03:6c:ce:40:
88:81:c9:ba:2b:c9:c1:0f:39:b2:a9:a1:a7:fc:c5:b4:41:73:
e4:3e:4e:4f:0e:6d:0b:30:8d:db:d9:dc:af:8c:70:0e:76:82:
2a:67:c2:52:70:57:15:7c:e7:e8:b1:ff:b2:92:92:1a:46:21:
af:ea:f8:95:12:c3:00:58:6a:3a:b9:84:ce:31:9c:99:59:81:
87:8d:52:54:3e:6e:aa:2a:a2:dc:8a:a5:a4:7c:c5:d5:88:1e:
f0:9d:6a:a6:c4:26:96:66:fb:19:01:4a:2f:78:b9:b4:92:b6:
de:d3:d3:2a:09:d6:ae:fb:e2:ac:3d:f0:eb:27:74:5c:d0:4e:
18:db:43:4e:2e:e8:45:e8:59:7f:83:94:15:71:49:70:97:0b:
c8:8f:99:0c:f7:b3:3f:29:41:a0:2a:c3:ed:98:c3:39:81:cc:
05:f6:ee:0a:46:93:66:e3:2b:02:19:68:73:70:52:1e:55:f9:
41:1c:2e:ca:33:73:dd:cf:9d:da:d9:61:46:51:9c:da:8b:3a:
7a:7d:b7:8c:c3:51:8a:fd:b1:4a:b4:01:7c:ab:8d:95:dd:7d:
02:c6:d2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:07:45 2025 by rpki-client