Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier: V66Z/ktpLGCXqD1vpiYfc9pVAF7PEp8SbmLUOD2HBqw=
Subject key identifier: 2D:2F:80:1D:92:34:F4:25:74:09:64:22:44:CF:9C:64:D4:3E:9D:83
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial: 019896DC15F8F11A00E7356BF5B4E9588FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number: 06A9
Signing time: Mon 11 Aug 2025 02:01:02 +0000
Manifest this update: Mon 11 Aug 2025 02:01:02 +0000
Manifest next update: Tue 12 Aug 2025 02:01:02 +0000
Files and hashes: 1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=)
2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: PBCVf0niWTt8WwTQXf1/xI/eA4bR4XmZkEX4eLxQtiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:15:f8:f1:1a:00:e7:35:6b:f5:b4:e9:58:8f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
Validity
Not Before: Aug 11 02:01:02 2025 GMT
Not After : Aug 12 02:01:02 2025 GMT
Subject: CN=2d2f801d9234f4257409642244cf9c64d43e9d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:da:dd:91:8b:62:9c:70:cd:1c:ba:77:77:
db:c7:e5:3c:a2:51:b7:76:36:33:54:9b:04:dc:e9:
6b:53:f3:e8:f1:5b:07:9e:6f:1d:d7:2c:0e:9e:f8:
ee:71:06:46:51:78:29:73:78:e1:38:3d:5c:c4:95:
bd:b6:f7:21:b4:75:c6:e3:be:c5:89:93:9f:19:a6:
d4:10:55:3a:79:51:fe:25:5e:c8:6a:40:9d:92:cb:
cd:c2:ac:69:83:5b:60:d4:11:86:c7:a5:0e:44:6f:
b3:b9:ef:98:56:76:a0:06:04:3a:c3:a9:36:8f:c1:
5b:99:91:ad:2a:7c:61:96:85:4d:88:7c:58:40:d3:
63:48:88:bb:94:59:f6:4e:86:9b:d2:9b:90:c6:57:
74:1f:26:04:dc:01:09:cd:15:ea:56:89:6b:45:e4:
75:19:4c:a5:6d:8d:83:14:e0:a1:9e:b4:4a:37:b7:
2f:19:b0:fb:e4:47:68:48:e1:e8:1e:c6:4c:16:86:
e0:8f:4d:4e:20:5e:f8:7a:cc:26:7c:80:c6:ba:51:
b1:65:db:0e:fd:d1:58:d3:4f:64:79:95:aa:c7:9a:
6b:f4:2f:d3:ca:55:82:81:09:62:12:18:31:55:f5:
c2:82:23:38:86:16:c5:83:d2:16:85:96:89:3f:bb:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:80:1D:92:34:F4:25:74:09:64:22:44:CF:9C:64:D4:3E:9D:83
X509v3 Authority Key Identifier:
keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c3:36:85:67:dc:c5:b9:21:1e:a0:c9:0d:2b:db:6e:ba:5d:
69:5d:2a:86:11:e6:59:bf:07:3d:ec:b7:2c:7f:53:d7:34:1e:
4a:6e:df:1e:5a:9f:31:94:eb:68:dd:18:05:d2:26:29:55:ac:
64:e8:1e:61:ae:1e:4f:92:fc:89:5b:c7:0b:48:ac:c9:d5:ef:
6f:64:39:a2:42:92:fc:3f:00:7b:4b:af:da:dd:08:20:2d:ca:
9d:62:69:60:1f:56:1e:07:cb:99:69:d0:46:ed:44:65:06:c9:
64:6b:ca:99:8f:9b:05:39:74:ab:ee:66:94:16:0c:6d:2a:e3:
2f:cf:52:e0:2b:b1:80:fb:1c:8c:d5:e3:64:c8:ba:aa:55:13:
c0:78:a2:df:ad:01:f6:f8:80:35:91:f3:70:56:54:45:48:25:
40:54:44:2b:c0:8a:8c:b5:47:86:83:bd:8f:63:0f:2a:29:7f:
c2:40:43:b6:d3:3f:ed:2a:db:02:62:98:02:37:4c:cc:04:14:
75:b6:37:3b:93:d8:27:bc:97:5b:a7:22:fb:26:60:0c:38:a7:
08:60:b0:1a:83:b7:88:54:8c:01:f2:1c:ce:48:81:23:82:d2:
73:8e:a7:05:6f:b2:9b:eb:ba:fa:4b:dd:51:ac:ae:bc:1e:9a:
94:9b:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:37 2025 by rpki-client