Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: 5MI7+WNp1fzCLenAY3Xrs3YG4o0PqkaFLUAkv4kMkis=
Subject key identifier: 7B:AF:B6:6A:39:8F:DC:33:7F:13:C6:26:5B:18:C1:B6:8F:C3:23:4D
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 01993492D4AB0B1EE2ADCB47C1B7F5549D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 168E
Signing time: Wed 10 Sep 2025 17:01:01 +0000
Manifest this update: Wed 10 Sep 2025 17:01:01 +0000
Manifest next update: Thu 11 Sep 2025 17:01:01 +0000
Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: mSFvi8tT2wMsEUuLa78tr8v8QHbpj6O0JOd8oFs1Xng=)
2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:d4:ab:0b:1e:e2:ad:cb:47:c1:b7:f5:54:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Sep 10 17:01:01 2025 GMT
Not After : Sep 11 17:01:01 2025 GMT
Subject: CN=7bafb66a398fdc337f13c6265b18c1b68fc3234d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f1:0f:4e:b1:80:b1:d2:aa:35:4c:27:6f:89:
cd:4e:79:db:07:d8:12:d4:e0:38:17:f1:86:c5:dd:
46:e6:5d:4c:cc:84:46:3a:d3:dd:40:2c:d4:43:eb:
67:ed:0e:3d:62:44:8c:48:92:c2:91:3b:a4:9d:65:
2d:ce:3b:06:5b:03:4b:1a:e8:e1:ec:2d:e6:28:36:
68:b2:0a:4a:82:0f:96:47:34:46:bf:ca:16:82:e9:
b4:71:0d:6d:b6:24:90:9b:9f:7a:a8:12:87:91:2f:
e9:ce:a2:05:77:94:7c:8b:6a:26:f7:22:a9:4a:29:
98:b9:e4:d0:8a:63:14:e1:6f:46:dc:b9:72:0b:c4:
4a:c0:e2:7c:0f:60:5e:d6:9a:44:69:22:64:bf:49:
19:5e:18:f8:d7:e1:56:57:ff:be:67:a7:9b:aa:e4:
1a:58:ef:17:c6:d7:6b:41:35:b4:3e:6b:83:f4:57:
0b:47:c0:f6:5c:d8:95:b8:ae:74:f2:dc:7f:0f:b0:
ab:db:a9:0a:54:10:71:2c:01:c3:1f:a8:c5:40:c8:
91:2e:57:80:fe:5a:8e:3e:4c:ee:89:ec:9f:a3:b7:
a3:f2:ef:d6:42:04:55:00:53:77:3c:fe:f0:bf:13:
df:b1:c3:5b:80:13:b3:57:1a:41:02:5a:6d:9b:37:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AF:B6:6A:39:8F:DC:33:7F:13:C6:26:5B:18:C1:B6:8F:C3:23:4D
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:28:b7:27:af:06:1e:ba:78:46:1c:fb:73:37:ef:d5:65:a3:
cd:77:86:22:d4:6e:c4:de:f1:42:38:74:6e:70:86:12:4f:64:
23:7b:25:68:b2:23:69:eb:5c:88:b2:a9:72:f6:50:0e:6d:35:
2d:ed:b2:cf:7f:78:b1:29:bb:80:fb:c7:44:4a:fe:c4:b6:38:
60:7f:fb:d7:57:58:ef:1e:54:c4:ec:17:71:05:b7:d7:f0:7c:
52:b6:d5:21:75:a6:ee:2e:c4:19:31:00:7c:cc:8f:24:d7:23:
98:9b:7c:84:56:82:56:43:44:50:6e:b2:78:95:d1:e5:9b:71:
a6:d6:b8:aa:f5:da:fe:aa:76:50:bc:70:98:91:93:65:85:8d:
d0:f3:fc:75:c2:42:39:97:e9:9e:7a:9f:a0:78:81:11:ee:14:
53:aa:de:77:8b:b2:4a:26:0d:9c:09:8c:9f:4e:4a:87:8e:8b:
41:25:96:41:b9:8a:3c:9c:3b:f6:32:79:b7:83:c7:8a:42:bb:
5c:46:7a:64:cf:26:9a:e5:41:60:f0:7c:88:73:37:af:f0:5c:
e5:b5:d4:88:a2:fa:f0:70:f3:e6:14:e2:b0:fd:71:af:65:a4:
d1:3b:b4:10:c7:5d:94:ec:55:3d:91:b6:97:14:da:0c:9c:6b:
6b:44:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:04:07 2025 by rpki-client