Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: dnaR89fQLVwerCXMSKZY66Su+uEI98OzAO2WsIHdt30=
Subject key identifier: 56:61:BF:65:E5:E2:08:D9:77:23:89:11:26:59:D0:F3:7B:B6:4D:CA
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 0199233181362B5FB2F8D78FD4EEAEA64BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 08:01:10 +0000
Manifest this update: Sun 07 Sep 2025 08:01:10 +0000
Manifest next update: Mon 08 Sep 2025 08:01:10 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: 2LHVGqEKAqDH6mP/AmejmM8oahXA+K2+o87Z0wHdQjM=)
2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:81:36:2b:5f:b2:f8:d7:8f:d4:ee:ae:a6:4b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Sep 7 08:01:10 2025 GMT
Not After : Sep 8 08:01:10 2025 GMT
Subject: CN=5661bf65e5e208d9772389112659d0f37bb64dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:77:0c:7a:6d:83:b4:68:fd:67:00:45:a3:
eb:9a:69:00:00:10:6b:fe:5e:7b:6d:f3:a7:ab:48:
6b:8a:cd:5f:ce:4f:76:11:3c:81:6f:5d:63:97:2c:
c8:9a:f7:cb:6d:bd:8d:dc:85:02:6a:d0:98:9e:70:
bb:e6:1a:cb:d7:8a:04:4c:55:53:70:59:7d:0b:b4:
b8:af:a0:66:d9:2b:81:56:dd:eb:ec:21:b0:15:c3:
9d:83:68:da:00:19:2a:fd:e4:ac:a7:2e:18:ff:b8:
52:c6:19:d6:88:1e:74:1f:83:5b:73:62:b8:73:80:
c3:80:f6:4c:a4:a4:8c:04:91:9c:25:f7:6a:d4:1a:
71:5c:13:2f:fc:43:0a:13:1b:c3:47:98:06:a7:74:
c0:d9:4a:5b:ac:23:c7:c1:86:41:bd:97:49:46:4a:
76:15:22:0e:04:4e:a1:2f:2c:4c:b1:0b:22:3f:e8:
9e:72:3c:61:88:c5:f8:64:49:65:1e:20:7a:7d:76:
5c:e1:6d:5b:c7:f1:9f:fc:29:8a:89:59:9e:bd:08:
20:95:3f:29:c6:fc:e3:57:7d:8a:46:af:a7:8c:f3:
56:0f:96:13:fe:68:30:64:2c:57:fe:57:5c:0a:c2:
3f:ca:1b:1d:19:70:0f:a4:db:43:60:33:77:31:25:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:BF:65:E5:E2:08:D9:77:23:89:11:26:59:D0:F3:7B:B6:4D:CA
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e8:4f:d5:c3:f8:d3:6d:18:77:f1:a9:48:72:20:15:71:3f:
4e:5b:10:ae:51:e0:9f:bd:fd:f8:85:d0:cd:03:b4:f0:1a:18:
72:8e:01:50:66:f8:94:2d:76:b4:28:b0:e6:19:b9:8c:62:31:
4f:01:82:b4:2a:bd:d5:48:0e:38:f0:6e:7c:67:8f:e9:07:ba:
80:ac:d4:bb:7e:57:40:57:3b:80:0f:c6:51:20:59:98:5d:cc:
33:54:f3:46:7b:a9:b6:2a:36:5c:6e:2c:65:78:3a:58:07:69:
31:eb:0a:1c:f0:09:4d:62:7c:3a:9d:55:40:e7:29:5c:59:c9:
51:81:49:53:1a:a9:36:ff:8f:b2:59:cf:ab:06:38:0b:0d:f5:
39:4c:16:ac:f5:4f:82:0d:2c:74:67:47:5f:1c:6c:6b:69:e7:
2d:00:65:0c:56:0f:66:c6:3b:5a:a4:b7:37:4b:7a:f8:a0:8f:
b4:ce:cf:f5:87:24:32:61:93:72:78:b3:d0:5b:3e:8f:d4:73:
b0:70:79:1a:86:25:c5:d3:d9:53:8a:d3:31:3a:ca:f4:b3:4c:
97:6f:26:94:25:bc:d6:0e:5a:7a:cc:23:d3:3b:61:27:d7:a7:
09:4f:11:cd:b6:01:f7:9f:4b:23:b7:f4:11:e8:3a:88:e8:1d:
57:ab:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:20 2025 by rpki-client