Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: qbVJbJ9jJdrufeNm0x63rFtVtP5ZDb2CDa/3MVSFZDU=
Subject key identifier: F7:BF:E2:33:D4:5E:1D:74:3A:E0:85:47:A2:B6:8F:52:25:1D:7F:0F
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 019939B94B657BF05F2CD1A28F849CF4D0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 038B
Signing time: Thu 11 Sep 2025 17:01:08 +0000
Manifest this update: Thu 11 Sep 2025 17:01:08 +0000
Manifest next update: Fri 12 Sep 2025 17:01:08 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: TWQRcyJ6sTN/yUmfw0+lsVoN/YCyKR6f4WrTzR0VegA=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:b9:4b:65:7b:f0:5f:2c:d1:a2:8f:84:9c:f4:d0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Sep 11 17:01:08 2025 GMT
Not After : Sep 12 17:01:08 2025 GMT
Subject: CN=f7bfe233d45e1d743ae08547a2b68f52251d7f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:ef:94:f0:2a:13:0a:cb:ef:f5:ef:3b:c1:
42:c4:e7:34:d4:d9:0c:06:42:c8:19:68:f7:92:8d:
b3:90:70:ca:d8:39:47:2f:30:9c:4e:b2:98:19:0e:
c9:96:df:1d:ea:85:b1:e5:99:e3:2b:d6:b1:18:cc:
a6:61:9d:db:8c:26:5f:b0:c4:db:54:5d:11:98:97:
11:45:ad:ca:05:70:24:e9:8f:83:49:cf:b0:87:ab:
25:9f:e6:f3:19:98:62:98:00:60:4b:d2:da:dd:d9:
09:23:79:5d:98:ce:cd:a6:c8:7d:ca:66:7a:9b:e0:
cb:09:c0:47:ed:5c:1b:80:65:cd:ba:6c:fa:c2:d5:
ef:7f:8a:7f:0e:a8:4b:9b:35:09:ce:3b:9f:54:d7:
d7:62:14:3e:4c:fc:e9:a8:ba:6a:17:c7:85:ad:03:
87:50:43:58:08:cc:0b:dd:b4:32:85:95:87:53:6b:
b0:b5:02:97:ae:f9:cc:f7:8c:77:d8:17:4b:60:73:
be:f6:49:71:7a:32:75:9a:cf:a3:68:f9:a5:04:2c:
27:06:ee:cd:85:04:f4:21:c3:b9:b5:c8:89:d5:c6:
27:c4:85:4f:1d:17:48:85:a2:87:df:d9:04:92:ca:
05:5d:d6:ae:22:99:52:00:18:39:ec:5b:3a:fc:4b:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:E2:33:D4:5E:1D:74:3A:E0:85:47:A2:B6:8F:52:25:1D:7F:0F
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f0:45:a9:e7:0a:1a:f8:d2:7e:88:54:e1:ff:57:52:fa:1a:
0d:81:35:5f:18:6a:c4:bc:aa:28:f4:30:37:44:c9:ba:d7:5f:
43:ca:e5:10:36:97:cf:03:77:3e:96:c4:f1:25:ba:bd:f2:96:
b2:1a:25:84:37:97:c4:31:42:c7:f0:ee:14:9e:4d:07:ad:8e:
60:92:c8:7f:b8:08:7e:f5:48:77:8e:86:c8:a5:ee:9c:75:c6:
1d:6d:58:d3:bf:53:75:ac:08:91:2c:96:ee:86:07:89:17:40:
6b:47:39:cc:37:f7:7b:01:66:8e:bd:d5:95:e8:62:a8:31:2d:
48:60:98:35:cb:38:9f:db:8d:dd:3f:89:52:72:b1:c6:55:ca:
e7:6d:64:c4:d8:5c:31:48:ea:d4:16:0e:98:5a:47:67:4d:e7:
d2:1f:02:09:39:d1:9c:82:2b:50:8b:d3:96:54:7e:0e:60:a0:
e4:d9:65:1b:ed:0a:7f:77:3b:fa:ac:88:d4:92:84:e0:fd:4f:
3d:11:2a:8a:fc:6d:90:83:f9:de:18:3d:36:ed:48:28:7c:20:
92:ca:60:98:2a:fb:36:3b:2e:65:67:aa:c0:3e:06:80:98:ab:
9c:50:fd:f0:de:da:af:96:96:43:ad:3b:b3:e3:de:4f:5c:18:
d1:c7:4c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 22:57:04 2025 by rpki-client