Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: Tl0fe30LQ0ZIYeOC9vo0sjHlNbvIZsy7IOmevwxXFD0=
Subject key identifier: 25:4E:F4:54:70:F8:D3:D4:10:E0:57:69:1F:B4:8C:2C:34:41:F5:79
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 01984A0A540B7FFB9886B62CC1EC7E91A37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 10F3
Signing time: Sun 27 Jul 2025 04:00:47 +0000
Manifest this update: Sun 27 Jul 2025 04:00:47 +0000
Manifest next update: Mon 28 Jul 2025 04:00:47 +0000
Files and hashes: 1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: xNR01if3NDP5wpsS4WD6JonoTa5pwfdMijQYdklzSdY=)
3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:54:0b:7f:fb:98:86:b6:2c:c1:ec:7e:91:a3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jul 27 04:00:47 2025 GMT
Not After : Jul 28 04:00:47 2025 GMT
Subject: CN=254ef45470f8d3d410e057691fb48c2c3441f579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:6e:19:e3:3e:7f:72:03:d6:a3:bb:ec:a6:
28:0b:bb:16:26:21:14:ad:f8:97:4d:b7:8e:99:27:
31:54:1a:af:51:6e:e9:83:cf:4e:48:41:e7:80:f5:
7d:43:4c:6f:66:6a:85:2d:b2:f3:eb:da:51:97:50:
20:9c:06:9d:e7:77:3e:d6:57:48:de:c9:54:96:b0:
23:e6:13:36:6d:e8:8b:f4:46:97:ce:e4:6c:6e:14:
73:2b:fc:ce:3c:7d:16:33:26:da:6a:2c:55:ad:aa:
3a:0c:c8:79:b2:0d:6a:40:7d:0a:0b:9e:ef:53:ee:
a5:60:3e:20:fd:4d:c3:96:9d:07:d4:a7:b8:00:42:
c7:93:cc:73:c9:4d:e9:b8:0e:d7:d2:30:0e:d6:2d:
95:c6:f9:73:41:69:5e:67:51:ac:63:1c:0f:2d:07:
6b:7b:19:c1:a0:cc:99:c3:8a:71:c7:b1:df:71:2a:
24:51:00:7f:fb:40:a4:4c:a6:7c:e6:ef:88:34:db:
4c:1a:9e:5a:92:db:43:c2:96:5f:f5:7a:30:43:80:
0e:d0:83:ad:8e:53:fd:b5:5f:ae:38:74:46:3c:f5:
95:b4:12:37:f4:51:7e:95:dd:eb:71:fa:09:f0:a4:
4f:45:75:f9:58:92:3c:70:f9:b4:da:c9:82:d7:a4:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4E:F4:54:70:F8:D3:D4:10:E0:57:69:1F:B4:8C:2C:34:41:F5:79
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d0:16:ee:f3:af:28:73:37:bc:ba:02:c8:b7:fc:64:bb:a2:
2e:1b:03:13:44:30:c0:60:eb:03:b1:3e:b7:27:4d:b7:bb:cc:
49:ed:74:12:a1:73:dc:6b:11:5e:0e:a1:54:0c:11:97:6d:8f:
03:ff:4d:f9:94:79:9b:02:ac:66:ff:14:ed:de:1d:aa:9f:c2:
cc:22:8e:23:f9:c8:a9:96:6b:57:0e:07:d4:96:26:b5:70:ce:
23:f4:0c:39:3d:1b:39:c4:18:43:3c:c5:2c:1c:1e:66:78:80:
6e:9f:7e:dd:41:58:95:e6:05:42:08:54:d7:56:e0:5b:9a:fe:
cc:23:76:c9:6b:34:7f:27:ad:c5:ff:a3:4b:9a:44:9d:73:ba:
60:0a:a3:ac:00:69:35:a2:02:a0:89:e0:63:f6:16:28:84:de:
23:05:f9:fd:da:00:ab:9b:8b:a3:57:6c:de:7c:a8:a9:dd:92:
d1:f1:03:47:2a:48:cf:7b:27:59:fb:39:41:af:b6:05:0f:3f:
99:dc:e3:4e:ec:17:e3:31:77:38:46:1b:8c:78:1a:e3:c3:e8:
cc:3a:e3:2f:90:b3:a2:4d:29:a7:49:94:3d:d2:6e:4c:68:f4:
88:ec:93:5a:2f:57:e7:88:1d:fe:3b:f4:8f:9c:29:2a:4b:a0:
ba:a7:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:52 2025 by rpki-client