Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: IsvoVSzZhuUF3qACch3BbufLg1sC6u9jzMJv5EsTDoM=
Subject key identifier: 7B:F5:CD:2F:6D:74:60:4A:62:07:B8:DB:4C:6D:18:8E:9B:80:71:89
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 019933EE4FAA45DC4A61145ADC78D0028117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 14:01:19 +0000
Manifest this update: Wed 10 Sep 2025 14:01:19 +0000
Manifest next update: Thu 11 Sep 2025 14:01:19 +0000
Files and hashes: 1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: y6F+mTB4A4C0LPnqfILlIEce8gErPAXbCkUIpe9LBEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:4f:aa:45:dc:4a:61:14:5a:dc:78:d0:02:81:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Sep 10 14:01:19 2025 GMT
Not After : Sep 11 14:01:19 2025 GMT
Subject: CN=7bf5cd2f6d74604a6207b8db4c6d188e9b807189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:b6:e9:70:69:f3:13:ee:68:e9:e4:31:96:
b6:c5:54:11:91:bf:24:53:1b:dd:f8:b7:02:75:63:
e0:25:c3:cd:26:ae:bf:0a:70:32:a3:99:56:ab:44:
c8:1e:38:3d:fe:8f:d1:1b:52:af:2d:90:4c:32:2b:
69:89:ba:c7:e2:47:6d:24:c3:bd:dc:cf:7f:4e:b5:
b1:89:f0:ea:2b:39:54:45:eb:2c:03:4a:4e:bb:45:
67:2c:c3:43:18:55:05:d1:e9:80:46:6b:c9:70:0f:
aa:21:03:67:f8:da:9c:6f:fc:9f:00:54:9a:0e:7f:
87:3b:4c:c0:92:ed:46:34:41:07:41:fc:06:82:59:
0b:be:87:cb:0d:dd:e7:4c:d7:d7:f6:7a:6e:2b:01:
fb:86:ce:85:65:bf:fc:02:c6:78:bf:b5:96:2b:15:
89:05:1c:75:21:b1:76:85:ea:dd:82:f9:2a:64:e5:
2a:ca:0b:52:17:a6:07:ac:b4:1c:f4:5b:f6:06:34:
a5:ca:0c:25:f4:26:7e:97:c3:9e:27:3e:be:4f:df:
da:78:39:01:c1:72:28:a5:af:1b:83:b4:ca:52:c2:
b5:ee:82:72:b7:39:08:07:5f:78:0f:a3:30:c1:cd:
38:9f:20:2d:78:31:ef:75:12:45:18:d4:d3:47:94:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:CD:2F:6D:74:60:4A:62:07:B8:DB:4C:6D:18:8E:9B:80:71:89
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dc:9c:d6:e5:81:54:17:be:3c:42:06:b8:ab:67:52:84:7f:
2a:96:53:98:57:6d:65:bb:d3:2b:27:53:36:87:d2:23:25:df:
f6:f0:90:b2:3c:67:9e:06:e4:22:18:0b:da:db:ab:ef:64:8f:
85:c4:8d:32:df:d0:d6:ec:d8:a0:81:1a:a1:d7:8a:98:de:8d:
8b:a9:b3:ff:78:40:b2:60:67:55:ed:64:a9:a9:fb:b6:e6:3b:
da:98:a8:c7:37:66:f5:d6:1f:28:3b:78:8c:b6:1d:79:fb:be:
07:b6:07:e2:3a:87:f3:20:9a:d9:77:6a:64:58:a8:99:8c:ba:
85:ef:2c:44:83:07:66:8f:70:cd:25:09:9e:00:d7:e4:88:c2:
5e:8d:e9:96:e7:e6:2e:b1:bf:58:d0:f4:c3:a1:6f:4c:ef:bf:
bb:07:51:ed:73:aa:fb:24:3c:19:4f:3e:17:61:87:34:c6:ad:
74:05:9c:6f:aa:02:38:6d:d7:44:d6:a0:6c:e5:db:0c:7c:97:
79:53:d2:82:a0:90:ea:0a:25:e7:06:a8:2f:01:75:ce:79:28:
34:85:89:b8:5a:cb:fa:bd:95:db:e9:3b:a1:78:c1:18:fa:bf:
ed:d8:83:c1:3c:32:47:b4:ed:cc:ae:5d:ca:ec:9b:b5:65:b7:
d0:c8:16:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkz7k+qRdxKYRRa3HjQAoEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YmQ4MmJhMTg4MWFkNjRmNTI0ZTMzZWNlMTJhZGE0YjNi
NWQ1N2YwHhcNMjUwOTEwMTQwMTE5WhcNMjUwOTExMTQwMTE5WjAzMTEwLwYDVQQD
Eyg3YmY1Y2QyZjZkNzQ2MDRhNjIwN2I4ZGI0YzZkMTg4ZTliODA3MTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9S26XBp8xPuaOnkMZa2xVQRkb8k
Uxvd+LcCdWPgJcPNJq6/CnAyo5lWq0TIHjg9/o/RG1KvLZBMMitpibrH4kdtJMO9
3M9/TrWxifDqKzlURessA0pOu0VnLMNDGFUF0emARmvJcA+qIQNn+Nqcb/yfAFSa
Dn+HO0zAku1GNEEHQfwGglkLvofLDd3nTNfX9npuKwH7hs6FZb/8AsZ4v7WWKxWJ
BRx1IbF2herdgvkqZOUqygtSF6YHrLQc9Fv2BjSlygwl9CZ+l8OeJz6+T9/aeDkB
wXIopa8bg7TKUsK17oJytzkIB194D6Mwwc04nyAteDHvdRJFGNTTR5R9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv1zS9tdGBKYge420xtGI6bgHGJMB8GA1UdIwQY
MBaAFGa9groYga1k9STjPs4SraSztdV/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMt
YmEyYjkwZDQ5NTQ3LzEvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMtYmEyYjkwZDQ5NTQ3
LzEvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtyc1uWB
VBe+PEIGuKtnUoR/KpZTmFdtZbvTKydTNofSIyXf9vCQsjxnngbkIhgL2tur72SP
hcSNMt/Q1uzYoIEaodeKmN6Ni6mz/3hAsmBnVe1kqan7tuY72pioxzdm9dYfKDt4
jLYdefu+B7YH4jqH8yCa2XdqZFiomYy6he8sRIMHZo9wzSUJngDX5IjCXo3plufm
LrG/WND0w6FvTO+/uwdR7XOq+yQ8GU8+F2GHNMatdAWcb6oCOG3XRNagbOXbDHyX
eVPSgqCQ6gol5waoLwF1znkoNIWJuFrL+r2V2+k7oXjBGPq/7diDwTwyR7TtzK5d
yuybtWW30MgWfw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:50:51 2025 by rpki-client