Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: 7sKhi10IN2qtoan481ao6JqCu8UAglPWXfT7wCrtLgs=
Subject key identifier: D7:E6:3B:23:E0:55:38:E3:0B:56:BF:9D:57:7C:F3:92:79:83:00:51
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 019933B72E3317134FB13B3B3653D79964B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 116C
Signing time: Wed 10 Sep 2025 13:01:06 +0000
Manifest this update: Wed 10 Sep 2025 13:01:06 +0000
Manifest next update: Thu 11 Sep 2025 13:01:06 +0000
Files and hashes: 1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: 51y8cGbOEfGxLV/hKU/NtEHMXj7Xm1hgjYvpOkK2yyg=)
3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:2e:33:17:13:4f:b1:3b:3b:36:53:d7:99:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Sep 10 13:01:06 2025 GMT
Not After : Sep 11 13:01:06 2025 GMT
Subject: CN=d7e63b23e05538e30b56bf9d577cf39279830051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:1e:f4:9d:9a:c8:1e:aa:bd:83:fd:3b:f9:
d2:7d:73:11:96:28:3a:ba:20:16:09:50:27:bc:6b:
94:9b:18:48:d5:0c:21:7d:2d:77:41:29:0f:ea:3f:
65:16:77:b6:3d:97:df:27:4b:ae:ba:a5:4d:ac:1f:
14:ba:1c:1a:8f:26:46:ab:fd:c5:73:d3:37:7d:a4:
16:6b:0d:c5:36:f8:4b:c5:71:3d:f6:85:d4:4d:17:
28:84:dd:58:22:9c:fa:bc:40:78:c7:b5:38:73:9c:
71:aa:a3:94:ff:03:ac:b3:af:59:1f:a3:1c:ae:9d:
1e:c2:87:ad:9e:70:24:77:55:ef:af:f7:5e:04:db:
17:fa:f5:5c:b3:fe:0c:48:fd:1a:4e:3b:f3:e8:0f:
1e:6f:02:03:52:f3:42:6b:10:4a:29:53:5a:22:12:
60:82:b4:8b:13:a4:1d:c3:b3:08:1c:74:a1:17:3f:
a1:44:b9:70:51:23:13:75:1f:ec:7e:cc:03:f2:fe:
eb:03:bd:00:4d:42:56:09:c1:4c:50:f3:8e:85:ce:
9c:9c:a4:94:c3:31:89:9b:c1:90:58:33:c2:67:0a:
64:68:90:20:23:3d:ec:b2:9d:e3:34:b8:6f:ac:40:
b2:e0:bb:7f:25:d3:67:66:3e:52:03:95:67:be:b7:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E6:3B:23:E0:55:38:E3:0B:56:BF:9D:57:7C:F3:92:79:83:00:51
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a3:33:94:ec:66:c4:ce:d3:4e:63:e7:11:f6:76:09:ec:03:
d0:04:e4:cc:42:89:2e:42:03:0f:23:1f:0a:97:38:ed:2c:55:
98:c0:56:45:bc:8b:f3:e4:72:e7:bb:fd:fc:c5:b5:3c:f7:e2:
57:2c:32:11:ac:77:46:78:ac:cf:6a:fb:c7:8f:f3:de:7c:10:
5e:4d:82:e9:a7:7b:9d:8d:91:2f:d7:ea:b6:a4:54:da:18:9b:
6d:25:1c:28:5f:b6:3f:23:57:7d:93:b1:f5:14:32:d4:31:81:
82:7f:8e:43:b5:44:5d:77:f4:2c:fd:dc:76:8a:62:68:e7:ea:
6b:ab:a3:9e:89:5b:98:c6:d2:b0:ce:f4:22:43:00:41:db:5b:
45:09:b3:38:06:42:30:b4:99:fb:26:46:32:1d:df:7a:3b:d9:
88:d5:f5:ba:b8:61:9e:71:38:60:be:78:70:36:42:99:14:ff:
57:60:9d:4e:68:66:13:29:68:5d:31:4c:f3:eb:3a:fd:1f:11:
d2:eb:80:5f:22:53:8b:9e:e8:56:c3:44:0b:67:77:c2:b8:3f:
c5:d4:e1:02:ce:52:f2:5c:87:4b:7f:49:cb:05:1e:67:8b:53:
ab:01:10:0a:44:ed:3d:a3:cf:c6:59:c5:e5:97:db:0e:bc:43:
ff:02:e2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:23:21 2025 by rpki-client