Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: Oal7lLbYPTwS49P2EV5d+PIGI9c3njm3KqtCKKXV2cw=
Subject key identifier: B5:38:C3:19:4A:6B:48:5A:09:5E:2D:27:ED:CF:AA:7A:A2:B4:13:8A
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 019921E7CE47CC55E28201FDB9EAE9F67315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 07BA
Signing time: Sun 07 Sep 2025 02:01:03 +0000
Manifest this update: Sun 07 Sep 2025 02:01:03 +0000
Manifest next update: Mon 08 Sep 2025 02:01:03 +0000
Files and hashes: 1: 0v4Q3A_w9M1p1YcV4-7Pe389fdU.roa (hash: WhKTFW0tZdeh1NFz5izqlimm3sG/vP+EpF9M2Z10RmY=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: 74YhzMJSJFrdSk2NvNUkQ0rkYlaAhx2RjHa2V4FVPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ce:47:cc:55:e2:82:01:fd:b9:ea:e9:f6:73:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Sep 7 02:01:03 2025 GMT
Not After : Sep 8 02:01:03 2025 GMT
Subject: CN=b538c3194a6b485a095e2d27edcfaa7aa2b4138a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:0d:05:00:5f:2c:67:db:ba:60:57:f8:a0:
b1:13:22:44:7f:5e:09:ce:88:51:83:0d:86:4a:5c:
40:0b:39:c6:47:62:8f:8d:5d:0e:68:b8:7d:94:10:
24:62:e3:f6:85:1e:6d:41:e4:d3:57:b1:38:49:e0:
8c:13:e6:e4:68:1e:4b:c2:17:8f:b9:2a:0d:f7:d4:
5c:de:04:0c:70:da:42:25:7b:18:53:77:62:7f:88:
2e:29:66:69:e9:f2:17:81:68:e4:e1:1b:13:9a:ab:
c5:0d:25:c3:f0:6f:52:e1:d5:c9:27:a9:49:fc:e0:
33:2f:fc:fc:07:eb:27:bc:64:ad:a9:dc:de:37:58:
ec:7b:fd:08:7b:ec:53:65:d8:ba:cc:d2:f7:3c:01:
b5:5e:6a:bf:f7:c7:15:0c:1b:44:65:92:b9:2e:d7:
06:50:78:a0:67:31:79:22:3a:9a:20:30:a2:a9:d1:
13:22:09:62:6f:98:c6:fc:61:31:79:9f:ae:64:2d:
d8:61:2a:9e:74:b0:92:8c:42:2c:b5:7b:37:1d:6a:
dc:ae:eb:db:df:1d:c7:79:13:97:8c:27:fa:03:4b:
fc:a3:46:3d:ac:35:56:94:a3:b3:4f:84:55:80:46:
0f:ab:e7:d0:12:c9:af:9c:4a:1e:f5:4c:42:8a:58:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:C3:19:4A:6B:48:5A:09:5E:2D:27:ED:CF:AA:7A:A2:B4:13:8A
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:74:72:5e:b5:ae:89:60:81:b8:b7:5d:73:d3:2b:4b:86:de:
03:72:d7:f6:66:54:cb:06:d0:fc:e6:24:1c:0c:d4:f3:1f:02:
56:70:bd:d7:f2:9d:7c:e2:16:65:ae:5a:d3:fd:d5:f0:d4:79:
28:39:8e:51:eb:76:ef:c3:32:37:6b:c2:9c:e6:7a:15:60:34:
ef:d1:55:c4:5c:06:9b:96:3e:88:f7:81:54:c6:ff:61:b1:0b:
f1:ad:f8:0b:70:11:2c:7c:65:80:1b:92:15:d7:0b:e3:4b:e8:
73:6b:6c:8c:a8:94:a7:e3:8c:35:dd:b0:06:3d:49:71:0f:18:
5b:d3:65:4d:d5:ea:c4:6f:64:a5:af:c5:be:03:e2:4f:ac:2e:
46:3e:99:d3:47:9c:46:c3:d3:42:66:be:7c:52:55:82:4d:1d:
0d:4a:b3:b6:03:14:d3:b5:67:5b:01:66:b4:55:9c:9c:62:de:
94:7b:23:30:ba:c8:61:97:65:98:f1:5b:a8:10:6d:84:6b:23:
73:b7:a4:0c:9e:47:01:b5:8a:e1:2f:ec:fd:f3:f5:67:69:23:
88:e9:04:e0:f0:f4:89:7b:a4:27:52:88:55:0f:d3:d2:25:26:
62:80:c5:48:87:3c:c5:8f:8c:dc:e7:34:14:af:12:b8:e2:b9:
6c:bb:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:08 2025 by rpki-client