Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: 2ukr9gC2hEY322p14Njrfc7vJBXlvPzbVn98ZfXNIE4=
Subject key identifier: 26:2A:41:88:9C:B3:3F:05:35:ED:0F:3C:6A:92:3A:54:35:B7:DE:55
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 019921E781164AB442CA03688A862009DB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0CAE
Signing time: Sun 07 Sep 2025 02:00:43 +0000
Manifest this update: Sun 07 Sep 2025 02:00:43 +0000
Manifest next update: Mon 08 Sep 2025 02:00:43 +0000
Files and hashes: 1: GVUeOB4dXXqj9XML1jN57j3Df5M.roa (hash: Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: IS8odWWRirffqBSWsVtBCQsM/sxs3ZbPmR4WttaWNa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:81:16:4a:b4:42:ca:03:68:8a:86:20:09:db:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Sep 7 02:00:43 2025 GMT
Not After : Sep 8 02:00:43 2025 GMT
Subject: CN=262a41889cb33f0535ed0f3c6a923a5435b7de55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:d8:f0:2d:40:58:a9:a1:66:09:d9:5c:c6:
5f:7d:59:3e:a1:b8:9d:bc:b0:84:4a:23:82:a9:3b:
fc:8a:0c:cd:21:8c:76:61:65:97:f5:15:3b:b6:6f:
1e:20:f9:d7:9b:62:7c:07:9a:3d:8a:05:c2:7f:71:
2f:fc:32:dc:24:db:6d:80:c9:e6:7f:81:3b:fc:97:
a1:49:aa:12:b2:9e:3f:5f:41:6c:83:8b:ab:d1:3b:
29:25:fc:bb:18:8f:14:78:f8:cb:e8:58:b6:cd:db:
e8:89:32:1f:0b:94:63:ce:ee:6b:b3:ed:72:1f:64:
62:01:ac:02:ba:44:87:88:f8:97:18:1b:1e:10:52:
e4:d4:ca:cd:10:27:56:95:87:eb:3d:c5:5b:13:3b:
b2:be:4b:7f:f9:33:62:38:8f:45:8d:6d:93:74:4e:
3f:79:97:5d:e6:08:00:99:06:12:8f:39:2a:43:b5:
e8:52:99:ce:aa:82:8d:1e:26:56:48:ea:c8:9a:1d:
63:cf:8c:c1:a2:52:d1:b2:5a:2d:f0:66:5e:43:52:
86:97:00:90:8a:3b:fe:f5:36:ab:60:b3:a7:83:cd:
55:ae:da:98:05:0e:ed:91:3e:8a:fc:72:99:96:5a:
95:a6:fb:2d:19:c1:ce:31:22:32:e0:d6:a3:cc:c9:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2A:41:88:9C:B3:3F:05:35:ED:0F:3C:6A:92:3A:54:35:B7:DE:55
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:2d:62:15:87:8c:85:9e:01:ea:2a:7b:ff:0c:22:80:3a:
ef:82:a0:86:33:8f:a6:39:63:52:4a:b2:8f:3f:9d:5e:5c:ab:
f7:ac:2e:c4:3e:1a:cc:e6:f8:73:a9:8c:4a:e9:61:9d:73:c4:
cc:ff:84:ac:e7:d9:9f:48:d9:89:6e:93:24:01:38:e0:64:23:
f2:14:b3:f1:d5:75:06:fc:98:31:4f:ff:0a:96:3c:9e:0b:36:
ff:f5:1a:69:05:e1:d4:26:78:25:8a:c2:59:5d:c6:60:d8:2a:
af:ea:2e:87:04:78:a5:b8:3a:2b:22:d1:25:ab:6a:31:6c:72:
10:3f:8a:a9:4e:93:57:3e:c6:5d:b9:7c:61:05:2a:2b:a8:73:
55:e2:97:de:f3:0f:fd:5d:c0:ed:ad:ca:ea:a1:fd:82:77:0b:
2a:61:67:71:08:a7:8f:34:fd:d3:61:a0:17:5d:91:b4:e2:ca:
7d:98:8c:29:13:fb:1b:99:38:52:93:b1:15:1a:d9:29:46:b8:
af:81:14:3c:30:fb:fc:06:cc:d9:9b:06:01:cf:0b:cf:57:db:
26:f0:01:5f:f8:7e:cb:7d:5f:1b:a2:20:41:d7:34:fb:63:19:
c5:c7:39:27:18:10:e5:65:4c:91:db:b1:06:1f:b7:d2:89:cd:
1f:66:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:53 2025 by rpki-client