Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: 9Ba94X0uqbNHU2FCQVjDBlM7XcfYgEhNNqDHJ1iBrOU=
Subject key identifier: 3E:DB:DA:1D:59:D6:B0:37:EE:D9:60:BE:F0:33:AD:5C:DB:5C:FA:AD
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019874F504D565FA178E20115D5B8C7BF5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 05D0
Signing time: Mon 04 Aug 2025 12:01:11 +0000
Manifest this update: Mon 04 Aug 2025 12:01:11 +0000
Manifest next update: Tue 05 Aug 2025 12:01:11 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: yffofiXaFZ+rNe6bscJ5rCgREtu5WLFcMGbBRJVBXkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:04:d5:65:fa:17:8e:20:11:5d:5b:8c:7b:f5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Aug 4 12:01:11 2025 GMT
Not After : Aug 5 12:01:11 2025 GMT
Subject: CN=3edbda1d59d6b037eed960bef033ad5cdb5cfaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:e5:0f:f2:46:c6:2a:ae:a8:03:5c:66:5e:
09:7d:49:20:53:94:3d:c4:3b:b8:0d:5b:f2:28:5c:
90:93:64:8e:9d:52:83:6c:ec:06:25:31:71:0a:54:
ee:5e:e7:30:65:ae:dc:47:ec:9e:05:22:58:97:ae:
30:1c:7e:c4:fd:b0:61:b8:91:cb:17:3a:cd:3a:00:
b6:37:b6:e7:33:e5:4d:25:7d:03:ce:66:cf:d9:a5:
97:ab:90:00:fe:c2:76:33:9e:55:49:37:b3:e0:9f:
4d:04:d6:d2:c8:8a:3f:c5:b3:ba:6a:ca:ea:b6:63:
bf:25:9f:ef:2d:67:fc:cb:0e:53:d4:0d:4a:e4:b3:
35:72:9e:55:9e:c6:25:40:72:58:3c:be:9a:aa:18:
92:ef:e9:fc:db:fa:51:d6:c2:55:2a:24:84:f5:b8:
56:f6:e7:78:2c:5d:b3:d3:3c:33:5f:6e:46:8c:b1:
01:a6:36:37:1d:e7:5e:3a:43:70:1d:45:a5:ac:13:
97:f6:70:21:bb:64:8a:43:15:29:5f:ba:55:0f:1c:
46:e2:20:43:d2:3d:d6:77:ec:de:47:f4:3b:fc:51:
0b:53:b6:79:5a:80:dd:86:b0:43:f6:b9:06:7c:6d:
a6:3d:be:19:57:91:22:eb:87:f8:9a:a7:b1:be:60:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:DA:1D:59:D6:B0:37:EE:D9:60:BE:F0:33:AD:5C:DB:5C:FA:AD
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:76:7c:de:99:19:09:d3:aa:03:59:f1:b4:a0:81:b1:f1:2c:
0a:2a:b7:c7:2a:04:7e:3b:6e:fe:ad:3b:da:35:8d:a5:5a:af:
ec:b9:94:52:07:db:1d:69:40:8e:e4:3e:a5:44:ae:72:db:1d:
33:df:f9:ac:e1:48:df:86:72:f6:98:ae:2a:39:22:ce:88:54:
67:d8:61:99:14:d7:f2:8f:70:a6:00:b3:f0:77:24:58:3d:ac:
60:67:8e:bd:19:51:2e:36:7b:61:d0:8d:e4:cb:1d:dd:03:eb:
7d:1d:6f:3f:96:54:70:e4:59:b1:8c:31:8c:92:09:fa:c9:94:
fe:fc:fd:29:00:8d:96:09:ad:8b:d0:27:e5:91:99:bf:da:b0:
53:24:0d:cb:8a:ea:7f:e7:5b:4d:d9:23:d0:ef:73:76:60:54:
4b:1f:30:13:3b:e9:e9:56:27:3a:1f:a0:3e:db:50:f4:3a:56:
7e:f1:4c:9e:78:64:ac:40:40:f9:4f:70:8b:bf:d4:ec:a4:35:
6b:ec:f8:f4:ea:d4:2c:bb:11:45:34:80:2a:fc:2d:e3:4f:05:
c3:12:cb:48:00:5e:f4:fe:f4:f6:df:24:a0:73:86:4f:27:8a:
3a:e6:5b:cc:f9:d6:87:36:db:17:31:b3:75:17:ed:4d:22:e8:
b9:99:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:35 2025 by rpki-client