Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: 1fZLF7m9v+SYrsMxfJ1P/PVKO59lASSBr/hm/snlUBw=
Subject key identifier: 2C:ED:49:07:D8:43:13:C3:A7:DF:02:E2:2B:51:8B:52:6B:E1:CB:5C
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 01987DF812B68EB70798B51FEBD86DFFD282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 04F2
Signing time: Wed 06 Aug 2025 06:01:06 +0000
Manifest this update: Wed 06 Aug 2025 06:01:06 +0000
Manifest next update: Thu 07 Aug 2025 06:01:06 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: F0rghEbdIHKNW+16XbvEETx0fXRfs8OAXiU8xnkn0uE=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:12:b6:8e:b7:07:98:b5:1f:eb:d8:6d:ff:d2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Aug 6 06:01:06 2025 GMT
Not After : Aug 7 06:01:06 2025 GMT
Subject: CN=2ced4907d84313c3a7df02e22b518b526be1cb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:d1:d0:08:40:7c:70:0f:6c:c0:ff:3f:e9:
21:64:86:99:52:3b:4e:5b:20:0a:42:72:00:41:59:
f4:2c:64:d7:6f:67:34:d1:fa:7f:23:f6:a9:94:ca:
73:e2:3e:cd:25:5a:cc:46:d0:6f:db:a9:3b:21:3a:
22:2b:7b:fd:62:a3:77:2c:4e:3c:cf:50:88:2d:d5:
5b:bd:ad:7c:01:92:04:8c:81:c2:53:80:96:47:ef:
9e:90:1d:20:a2:cf:a8:40:67:c8:08:1e:cc:34:ca:
5f:30:8f:2f:b3:f9:0f:22:05:06:4d:55:8c:d5:e8:
d1:eb:e4:78:83:b6:da:90:4e:27:c5:1e:b0:49:7d:
f0:6c:50:91:4e:02:9f:e2:5b:56:d4:76:42:59:5b:
f6:74:f6:14:7e:f4:f9:c6:fe:fd:ad:f8:3c:d5:38:
64:64:6e:2f:a2:8f:57:6b:94:8c:c3:c9:82:5e:4e:
e3:f9:b8:2c:8e:6b:0c:f3:2b:0c:59:0c:80:83:b7:
13:c7:a7:41:78:a0:06:f9:2e:d3:68:63:24:76:e3:
7a:85:2d:ba:25:de:d8:03:9d:90:e4:2e:ea:0d:b0:
6d:20:8d:cc:ce:32:0f:14:b0:f7:5b:b3:9b:76:e8:
78:cc:4b:40:42:dd:c9:3a:5f:32:8b:a9:1e:b1:8f:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:ED:49:07:D8:43:13:C3:A7:DF:02:E2:2B:51:8B:52:6B:E1:CB:5C
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:44:8e:72:bf:a0:b3:ba:7b:98:e1:08:8d:33:69:bc:d0:ef:
ec:88:68:f5:99:85:84:df:76:f7:7f:2a:62:4b:75:af:de:7b:
b5:bc:94:3d:6b:4f:f5:0e:41:19:33:f2:9f:47:ae:e3:19:05:
21:23:42:1d:8c:4e:3f:19:64:21:e9:58:af:c4:8a:bf:bb:df:
ab:f5:b2:a2:e8:74:18:cd:12:8a:04:c4:66:0d:3a:ba:8e:cf:
01:e6:6b:c0:4f:94:e8:04:45:1c:58:dc:85:13:55:83:bb:bd:
e5:84:76:27:c8:67:9e:a3:ed:73:bd:62:b8:b4:5b:8e:27:22:
1f:49:c2:a8:67:16:e6:72:bf:54:d0:cd:85:0a:20:47:32:6c:
80:7b:ef:25:22:8d:50:36:0d:af:bc:81:f3:5a:da:c3:2f:64:
c5:d5:ac:de:4c:16:14:46:9d:6e:71:23:07:0d:11:71:f3:dd:
af:51:50:78:ce:46:b3:f4:cf:14:d6:1b:86:54:ce:07:87:40:
ff:9d:87:61:5e:51:5f:40:75:90:bb:2d:67:b3:c8:e2:ba:ea:
9b:80:ce:17:f4:86:5f:a8:f8:29:fd:4e:4b:07:86:06:d9:d4:
01:f7:98:5a:1b:2d:59:ff:2a:36:b4:eb:b2:10:b9:d9:76:3c:
44:11:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:03 2025 by rpki-client