Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: AaucyFXO16+LTlP53FBkRneNOz1tMbEl5hj6azAwaIg=
Subject key identifier: 3B:0A:8C:DF:37:FE:B3:C6:ED:E4:9B:05:D9:F0:0F:EA:54:ED:B3:2C
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 01989FA85CEE893933FB3BC4B24E62988AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 1353
Signing time: Tue 12 Aug 2025 19:01:07 +0000
Manifest this update: Tue 12 Aug 2025 19:01:07 +0000
Manifest next update: Wed 13 Aug 2025 19:01:07 +0000
Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: SbEd30SSZINgH/Ai0mHgD1eitvJgbDbWU67pyH9f0aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:5c:ee:89:39:33:fb:3b:c4:b2:4e:62:98:8a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Aug 12 19:01:07 2025 GMT
Not After : Aug 13 19:01:07 2025 GMT
Subject: CN=3b0a8cdf37feb3c6ede49b05d9f00fea54edb32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:aa:46:79:9f:af:19:53:19:07:25:97:6b:
8b:3c:c1:d6:83:08:17:23:9d:31:7b:7a:86:8b:fe:
04:1d:f7:29:57:75:ac:05:0f:79:35:ee:2a:18:d0:
59:52:1d:c1:d5:d9:75:6e:7f:12:be:7f:82:44:cf:
3c:6e:3f:ac:3a:e0:2a:0d:ee:18:48:fd:13:4c:de:
d6:cd:9e:6b:73:30:fb:e8:bb:2c:f8:3b:f4:b7:49:
f3:42:b7:9c:fb:15:87:d1:5c:74:c3:6d:81:f5:27:
b2:f9:c8:35:fe:eb:c7:a1:b2:d4:db:32:57:ba:d2:
b3:9e:c1:96:b5:c9:8c:92:57:9a:2d:ce:74:65:9b:
65:96:c1:80:97:4c:5b:ce:fd:80:48:1d:85:c4:8c:
32:fc:3e:ce:91:20:01:84:79:c9:12:03:97:fa:78:
70:81:2d:5e:d4:6f:c3:1e:b7:f9:0b:cb:b9:30:bd:
47:ec:56:5b:25:d9:0e:6d:cf:9f:b5:66:7d:32:92:
2c:ac:f1:6b:e6:17:64:23:8b:aa:bc:0d:ad:90:7f:
77:26:d1:26:39:e7:a5:3f:db:60:2f:5d:05:c7:6d:
1e:cd:b9:f9:59:ac:3c:b3:96:f8:4b:78:04:2b:b5:
20:48:8b:89:51:5f:c7:1f:71:ff:46:88:5b:a6:4a:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:8C:DF:37:FE:B3:C6:ED:E4:9B:05:D9:F0:0F:EA:54:ED:B3:2C
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:31:be:51:02:ce:85:8d:ff:ed:c4:6b:03:b3:f9:74:65:e5:
70:8c:ef:a7:a6:4f:78:cd:a6:75:33:aa:87:4a:8f:69:49:ae:
f7:29:48:61:d3:47:5e:49:81:21:6f:59:f1:cc:1d:34:cc:7e:
04:28:20:2d:bd:4b:24:fd:81:4c:5b:b3:ce:1f:c0:b6:5f:af:
59:83:e6:61:c1:c9:8f:f8:89:fa:35:08:a5:f7:6d:e2:79:a0:
36:20:53:7b:69:5f:c3:c1:27:d8:0c:eb:f3:56:a6:7f:cc:e4:
1b:64:6e:57:17:9b:5f:3b:93:ed:99:ce:62:6b:c8:b3:d4:e7:
e8:c2:46:2d:17:af:60:de:da:c9:1f:7b:40:0a:d3:41:e0:1b:
c5:bc:55:7e:51:83:b6:0d:23:f4:52:b6:9e:64:49:21:d0:73:
d2:f9:a9:e1:73:7b:d3:c6:27:8a:10:1a:34:ea:e2:fe:f0:06:
2f:5a:27:2e:bc:df:68:1d:97:88:95:b1:a7:cb:7b:5f:11:89:
ae:38:fe:45:95:86:af:33:b1:a0:30:e9:55:11:79:26:82:34:
34:00:57:21:d8:c5:f2:78:54:cb:8d:ed:20:2d:6f:a5:3a:2b:
41:f9:66:09:09:30:40:74:06:0d:0f:79:12:02:81:d1:10:57:
69:30:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:53:59 2025 by rpki-client