Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: eXCPKFPyICr7BbiIzVCI8AVpoG4n2brVAdBjYb7CO7A=
Subject key identifier: 3C:00:BF:B3:86:97:F5:F7:7C:48:3E:97:A4:44:DC:76:6B:69:86:CB
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 01988FC795F38F9F29FA853AC170552ABBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0949
Signing time: Sat 09 Aug 2025 17:01:18 +0000
Manifest this update: Sat 09 Aug 2025 17:01:18 +0000
Manifest next update: Sun 10 Aug 2025 17:01:18 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: NcFHitL8nmHlM2uA6uO+4lg/FoO5MwZQQHh/jx8BkAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:95:f3:8f:9f:29:fa:85:3a:c1:70:55:2a:bb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Aug 9 17:01:18 2025 GMT
Not After : Aug 10 17:01:18 2025 GMT
Subject: CN=3c00bfb38697f5f77c483e97a444dc766b6986cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:ca:19:47:d1:a9:40:93:7b:07:38:12:08:
ee:88:48:a7:a0:2f:cd:28:11:aa:f4:63:bd:3f:e9:
74:9d:8e:9b:d6:3d:14:20:02:c0:51:c9:75:c9:b1:
52:3b:a5:71:33:f2:51:c5:39:c1:11:bf:0d:28:1f:
92:91:e6:f9:9d:ad:3b:45:23:18:d0:f6:e7:f7:3f:
b9:17:b8:8d:dd:25:10:e7:b5:e2:c3:07:05:4d:d2:
24:17:78:8e:48:49:eb:fd:ae:78:41:e4:e6:08:6b:
b7:0c:e0:64:ef:a6:76:dd:ce:68:3c:12:f1:35:ac:
7f:bc:75:57:fb:46:69:e3:49:ca:ae:fa:76:c1:46:
3b:2e:9e:72:70:2a:a7:f3:68:b5:1c:ea:a0:e1:1f:
23:5b:b0:fd:ca:7f:a6:b8:6d:43:17:7d:37:20:b3:
3d:a8:6a:e3:4a:2b:7e:ef:30:93:35:97:9b:8a:4e:
70:90:e4:cf:b5:d4:fb:e6:15:56:8d:d4:f1:11:cd:
dc:06:f4:e1:2c:74:60:fc:bc:01:d2:2e:af:61:a0:
94:df:78:ad:1c:b6:0a:9f:46:83:c0:42:a6:f6:36:
39:a8:77:4c:d6:f9:e9:e5:37:3b:59:4e:e8:9b:c0:
a4:07:38:7f:b3:c8:7d:4d:0f:8b:8b:ed:75:20:96:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:BF:B3:86:97:F5:F7:7C:48:3E:97:A4:44:DC:76:6B:69:86:CB
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cb:a6:8a:38:6f:47:98:76:9c:6d:78:8c:83:88:ec:28:38:
16:ee:ed:4e:7d:6a:c4:77:15:1d:4c:2a:60:c2:5d:6d:3b:30:
a3:6e:11:1f:e7:28:c4:4b:64:94:48:49:aa:db:40:9d:b2:2a:
bf:4c:16:4c:51:72:44:fa:6d:26:85:34:6b:38:82:1b:e5:da:
22:2e:98:4f:a7:34:ec:86:d0:cf:46:cf:30:4f:29:11:a2:7b:
5d:42:a9:09:98:9d:ba:fe:3e:ad:49:59:51:d3:30:9e:d1:a4:
51:ff:e0:1d:f6:b5:cd:6d:eb:de:50:6f:2f:83:bf:9b:e9:e6:
48:37:3c:d4:27:7b:7a:2e:f3:a8:0c:30:1b:88:4b:9f:fe:31:
0c:96:cb:4c:32:4e:10:6f:ee:21:ef:11:08:fd:11:eb:ed:10:
fe:d0:4d:b2:85:77:28:b6:33:92:5b:51:52:4c:5b:48:63:e3:
25:8f:03:13:53:6b:31:4d:32:ae:39:49:1c:24:5d:4e:b7:4d:
d4:82:b8:d0:d6:96:36:e7:dd:5c:dc:b2:a3:24:40:be:aa:52:
31:c3:56:3e:1e:29:3e:2c:71:9d:47:36:78:b6:07:ea:fc:d6:
7a:21:e4:02:7f:a9:e0:8f:17:10:85:0d:15:8d:56:1e:11:8d:
67:76:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:52 2025 by rpki-client