Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: 6KFpLDpNBlYdvQS7LtT/2YAEpwOQaCwO/+EUuWDitQs=
Subject key identifier: A2:B7:23:45:21:E9:8C:04:92:99:6E:25:14:55:DB:CF:C6:A7:85:82
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 01992FDA3790B5D695882CDF6B0F8FB86F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 167E
Signing time: Tue 09 Sep 2025 19:00:53 +0000
Manifest this update: Tue 09 Sep 2025 19:00:53 +0000
Manifest next update: Wed 10 Sep 2025 19:00:53 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: XteteSTOXWZXfdi8i7yG18huM1dXQRxpJypfwnjTY6U=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:37:90:b5:d6:95:88:2c:df:6b:0f:8f:b8:6f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Sep 9 19:00:53 2025 GMT
Not After : Sep 10 19:00:53 2025 GMT
Subject: CN=a2b7234521e98c0492996e251455dbcfc6a78582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:58:74:18:28:fd:49:37:6a:c8:3a:af:ca:
42:76:26:ee:d4:63:0e:22:22:08:26:72:d9:66:a3:
d8:99:9b:c4:50:9c:a2:cf:4e:01:a9:35:26:b6:db:
96:a2:b7:c0:66:56:02:72:02:02:c3:0f:63:17:73:
17:0e:3d:13:37:ca:78:35:87:a6:16:a3:3c:7a:c1:
70:e1:f1:25:c4:39:0c:8b:52:c7:ec:65:de:f5:ff:
93:74:fe:ef:92:4d:77:9c:19:77:98:0c:3f:e9:a1:
44:95:aa:fb:45:fb:95:55:8d:2c:b7:65:79:3f:36:
f1:6a:03:8f:4b:7d:3d:70:1e:1e:bb:c0:44:5e:67:
50:8e:aa:da:20:42:c1:af:21:43:7f:2a:af:9f:1d:
53:40:9d:ec:13:fd:13:b2:05:98:b5:3e:a6:25:bf:
da:17:dd:1f:e6:00:5a:57:ce:d6:dd:fa:b4:ce:df:
bf:e3:29:44:be:08:48:85:03:bb:04:9a:16:42:ee:
72:0e:c8:57:ab:b0:85:0e:e3:93:b2:84:83:04:24:
01:40:21:52:12:38:f6:7a:69:7f:fd:53:80:69:bf:
ba:87:8f:7e:4a:9b:10:45:96:f6:d0:de:d1:e1:d6:
11:3f:b4:88:66:e5:27:b2:72:7a:b6:94:35:52:20:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B7:23:45:21:E9:8C:04:92:99:6E:25:14:55:DB:CF:C6:A7:85:82
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1e:8c:e2:20:64:61:d8:ec:5d:4b:6f:bd:49:c3:48:e8:b7:
fb:34:ca:80:a3:91:84:cd:15:30:39:5e:6d:67:8c:51:d5:61:
8b:08:79:7b:10:95:50:02:26:29:12:b4:f7:19:93:d2:ec:a1:
46:7c:12:c8:dc:bd:87:e2:6d:fd:32:62:53:ad:01:16:88:bd:
a2:a9:a3:f9:7b:e7:92:77:80:b3:b1:35:33:24:d2:12:69:73:
55:51:8a:bc:38:64:9f:26:c4:a5:08:45:5f:44:e3:de:81:4b:
62:ab:cd:a4:d1:e0:63:d1:7c:fa:01:5f:21:50:3b:e9:b2:62:
47:d8:b1:2f:af:2a:77:a5:d4:62:3d:7d:fc:48:02:67:ac:8c:
d2:25:eb:c6:6a:e1:90:df:31:cf:30:bf:53:81:08:cf:48:5f:
8f:35:ef:fa:fc:41:c7:f6:cf:7a:35:86:21:0c:8e:74:9f:0f:
f5:1f:7e:c5:81:40:7e:8e:52:dd:8f:af:16:ec:b3:4b:cb:20:
58:29:6e:ba:5c:06:e1:b6:84:42:2c:23:55:c3:60:cc:d2:c4:
e6:1f:e3:71:f6:08:dc:21:e0:64:c3:db:2c:60:17:92:d0:6f:
97:24:75:f9:76:12:60:21:fb:21:53:93:92:d3:fe:2c:2e:a3:
a4:db:2e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:29:31 2025 by rpki-client