Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json)
Hash identifier: bHg61G+E8aqt8rX4cA5XdoGMtccE9wZUyrmHyfit1Fs=
Subject key identifier: 8F:E6:57:4E:84:B6:0B:F9:6C:50:23:47:C3:3B:BF:E1:E0:1D:9C:88
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 01988356F5E0FD7DEA1D2419E5C02F26F8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
Manifest number: 0607
Signing time: Thu 07 Aug 2025 07:02:50 +0000
Manifest this update: Thu 07 Aug 2025 07:02:50 +0000
Manifest next update: Fri 08 Aug 2025 07:02:50 +0000
Files and hashes: 1: EsGGI1P8V7qCIrWJmfPudsu7pMI.roa (hash: RgD/iTo2o3seqIZhRljS2dvXiiazUq7PXVkPQR+sYAc=)
2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: wEp6fvBbBWLMOqXsJ5VTMy/S6IWsDYM062oBu70mhKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:f5:e0:fd:7d:ea:1d:24:19:e5:c0:2f:26:f8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Aug 7 07:02:50 2025 GMT
Not After : Aug 8 07:02:50 2025 GMT
Subject: CN=8fe6574e84b60bf96c502347c33bbfe1e01d9c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:f8:c6:e4:32:c8:ea:ec:aa:46:34:ff:35:
ad:c0:74:15:c6:7c:44:69:81:fa:38:53:79:45:c9:
2f:c6:98:9e:2a:14:e2:00:e6:56:16:21:f0:6b:8b:
8e:59:77:e4:3d:d1:df:b7:d3:c0:af:6e:f2:f4:7f:
02:96:88:89:78:4f:2c:8d:80:6b:29:14:dd:f8:11:
99:8c:28:a2:b3:53:5b:1d:a8:61:81:0e:3c:75:e0:
18:3d:c2:f1:9d:1f:0d:63:11:7c:2f:f8:a5:c9:3e:
4a:01:67:03:6e:07:b4:e3:dc:f0:98:08:83:ec:a4:
db:e8:d2:72:d7:4d:c3:f6:72:7c:23:4b:10:ed:27:
f4:37:2d:88:bb:a2:1a:59:5a:5f:33:4a:a8:de:a8:
53:df:c6:85:f9:c2:d3:e9:9f:0e:04:8f:0c:8a:61:
85:85:53:33:7d:aa:b0:46:d1:78:64:c0:13:01:5c:
c0:f8:4b:e9:f8:b7:4d:ed:72:bd:a2:87:01:30:d6:
89:d8:cc:39:ff:6e:51:ee:3e:59:12:34:a5:0c:a0:
57:27:89:d4:0e:64:33:de:db:49:d6:4b:fb:c4:18:
8a:00:3e:c2:d1:c6:0b:2e:43:09:d0:5e:e0:9b:94:
af:ac:72:de:78:62:30:a8:4b:5b:12:ee:2b:53:98:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E6:57:4E:84:B6:0B:F9:6C:50:23:47:C3:3B:BF:E1:E0:1D:9C:88
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:45:c3:5b:84:24:56:06:62:e6:33:4d:7f:8c:63:8a:95:36:
3b:e6:3d:6f:db:bc:18:71:81:0a:36:01:07:e0:60:ca:7f:cf:
ae:95:28:22:3a:30:87:78:95:59:b5:6b:59:ac:5a:f7:66:81:
f9:1d:7b:f2:ee:6a:6b:25:15:04:11:e6:a9:23:96:f6:4e:4b:
b4:df:cb:12:8c:b3:a9:59:4f:9d:f3:bd:11:64:04:7a:be:bb:
56:18:5b:b6:a7:6e:c3:42:ac:c5:8a:eb:6e:d6:8d:86:1f:b5:
c4:f2:27:01:2e:d0:f5:6c:14:89:8f:d4:2e:7a:ac:e1:0e:7e:
0c:3c:f7:d6:9e:24:1f:b4:32:c4:d8:5d:e0:06:1c:ec:34:a7:
77:45:9e:0a:a3:b8:72:75:b4:5d:a3:4a:47:b5:7a:0a:9e:c0:
12:00:e7:0d:a7:bb:6f:4a:64:d5:84:8a:df:3a:b2:83:14:60:
1e:8d:f9:47:5d:43:40:55:5c:28:7a:e5:c7:df:e2:50:2a:06:
c9:53:d6:99:6b:89:76:0b:f9:57:b6:d2:8a:68:86:79:c1:d4:
72:a8:4a:2c:a0:45:ae:36:63:1d:01:61:6f:57:6a:2d:a0:ab:
20:03:ed:3a:03:34:7d:f8:53:85:06:c9:2e:6f:29:c0:de:b4:
3f:30:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:13 2025 by rpki-client