Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier: 1U/T6kAwKCR/vzsYMKvP8xq8AdTOr49sVQR+hClDhnQ=
Subject key identifier: 85:CB:99:EA:80:9E:DD:C4:E6:34:58:5A:3B:82:C4:CE:9C:89:FE:4D
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 019921E760E1B701EFAB6B3AC348A59996C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 02:00:35 +0000
Manifest this update: Sun 07 Sep 2025 02:00:35 +0000
Manifest next update: Mon 08 Sep 2025 02:00:35 +0000
Files and hashes: 1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: xABEft9gGHI738gsyHwmieVEGgFQezjN08zD/eIk36Q=)
2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:60:e1:b7:01:ef:ab:6b:3a:c3:48:a5:99:96:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Sep 7 02:00:35 2025 GMT
Not After : Sep 8 02:00:35 2025 GMT
Subject: CN=85cb99ea809eddc4e634585a3b82c4ce9c89fe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:3e:2b:89:96:fe:26:64:9f:2a:fa:9b:4b:
cb:1e:b5:bc:99:b3:3f:f3:2f:56:e3:ac:38:0a:66:
1c:d8:5c:21:44:ce:d8:d0:a0:7b:31:b5:0e:e1:80:
e2:36:9f:25:51:fd:5d:37:01:d5:94:1b:57:3b:04:
29:d5:5a:95:bf:d9:2e:18:76:e5:d6:cc:c8:ea:b7:
94:bf:d9:b5:7a:ba:1e:fa:b2:4c:cf:ab:df:cc:29:
90:13:d0:d0:49:d4:d2:8d:c8:ab:4f:bd:b0:bf:a4:
59:fd:ab:66:9f:07:a5:2c:25:23:3a:63:a3:fb:cb:
69:bd:83:49:79:37:4f:9b:35:f9:5d:88:6c:1e:2e:
64:b6:72:39:2d:49:b3:85:64:bb:9d:74:b4:6d:ff:
ba:4f:bc:25:af:a2:c6:7f:13:15:26:7a:25:cc:64:
13:b2:c5:a2:89:a5:ff:b2:41:c7:8e:6f:b6:39:a3:
67:9d:3c:8d:06:33:27:b9:da:26:46:6c:fa:8b:8e:
80:c9:35:e6:93:2f:c8:a3:a9:98:a1:e0:18:19:ff:
14:d2:fd:31:03:81:6c:ad:f1:c1:3f:17:77:e4:53:
a2:9e:20:ea:6f:cc:d5:a8:97:2c:d4:b9:93:50:bb:
17:c1:62:a3:23:7c:de:c8:34:5c:fc:13:ff:51:9f:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:99:EA:80:9E:DD:C4:E6:34:58:5A:3B:82:C4:CE:9C:89:FE:4D
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f7:a1:69:05:b4:7f:ca:c3:a7:8c:92:0f:fe:de:73:34:d1:
53:1a:e1:a0:54:18:59:76:a4:91:9a:08:9b:72:e5:02:4f:10:
6e:bb:aa:93:b2:61:81:cc:e1:c4:60:f0:36:1d:85:e6:0a:4f:
f2:89:a7:d6:c5:2e:d4:9a:49:0d:ee:22:0b:83:e5:4e:0f:c1:
e4:f0:a2:5d:c2:13:69:c9:01:83:7f:d5:ca:1e:c0:26:8e:d4:
49:8a:5d:37:09:92:83:7c:8a:3f:93:53:aa:c0:85:7b:d7:7e:
66:c4:a4:60:26:e0:9b:8c:ee:ef:6f:30:1d:14:1a:6b:6a:24:
0b:51:d1:38:1d:63:94:af:b0:e9:0a:47:16:95:db:23:45:57:
76:c3:15:ab:d6:31:df:27:45:9a:a1:61:e1:d3:47:0b:44:40:
06:31:ef:d9:f0:c3:f3:8a:55:a8:19:ef:6c:b6:3f:d8:65:1a:
fa:ee:8d:a6:cd:36:17:30:1b:97:aa:b5:fa:6e:19:2e:f7:96:
2d:74:ad:5d:67:98:74:cc:fe:0b:6b:22:f3:56:d7:f7:fa:8e:
3f:5c:dc:c6:66:8e:8e:ac:cd:ea:bb:b5:7a:1d:ca:48:0a:4f:
a3:d6:ef:ff:c9:db:58:26:fd:f9:1f:51:df:7b:a5:18:24:8a:
b2:8b:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:04 2025 by rpki-client