Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: jsQGa24qFed8HAZU0mgFsBX8AK6S57RfqiPehPACRIU=
Subject key identifier: C7:C2:96:7F:4B:83:32:18:F9:E6:B1:E3:DF:44:06:A0:A3:52:E4:96
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 01987E9CE5AB8040FCE66DE8EC757C576840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 03A5
Signing time: Wed 06 Aug 2025 09:01:08 +0000
Manifest this update: Wed 06 Aug 2025 09:01:08 +0000
Manifest next update: Thu 07 Aug 2025 09:01:08 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: cPRChEGiA4codDZu/y0YmQBXzqeNH452XxSepdTz4S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:e5:ab:80:40:fc:e6:6d:e8:ec:75:7c:57:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Aug 6 09:01:08 2025 GMT
Not After : Aug 7 09:01:08 2025 GMT
Subject: CN=c7c2967f4b833218f9e6b1e3df4406a0a352e496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:10:64:39:a8:9a:0c:80:2d:7c:a8:b6:74:
6b:eb:16:00:01:12:74:be:b9:f6:be:9d:6d:4d:2f:
62:3e:21:e9:98:1d:bc:12:fa:98:02:89:d0:cc:e0:
6a:69:25:ee:1a:24:47:ac:3b:f7:c4:4d:71:75:64:
8d:23:ea:65:13:05:eb:67:4b:2e:5b:ca:00:05:d0:
25:07:78:79:77:0e:a3:8e:b6:45:55:46:0a:28:c9:
0d:48:1c:01:ef:7b:cc:d2:ff:ad:50:0e:f5:29:87:
1c:27:e4:44:d8:7d:7c:db:2a:ce:42:c3:bc:7e:de:
06:97:e5:5b:c7:06:92:ee:a9:95:ca:44:11:d5:f2:
8c:bc:2c:fc:c5:06:b9:1e:8a:9d:ba:6f:7c:17:00:
04:b2:cc:00:a5:ac:99:23:6b:25:dd:fc:42:fe:99:
c4:89:78:64:db:00:b8:be:57:fb:2d:50:d9:18:ef:
dd:29:c0:98:d8:57:ad:83:84:e8:1d:9d:af:0b:6b:
1d:69:40:c3:d3:f3:ab:9e:af:76:b1:6b:0d:59:3a:
c1:80:22:e5:ff:46:19:5b:1d:0b:e1:4a:34:12:72:
68:20:cb:8d:22:d3:dd:2b:e8:6e:75:75:1e:b9:c4:
87:5a:26:f6:77:03:01:4c:a4:c6:e1:cf:ff:6e:ed:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C2:96:7F:4B:83:32:18:F9:E6:B1:E3:DF:44:06:A0:A3:52:E4:96
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c6:c9:8c:9e:5f:98:69:45:88:7f:87:73:0d:1c:25:f5:a2:
4b:44:79:90:41:2f:bc:a5:0a:3a:f0:9f:ee:f4:d4:c2:ee:59:
e6:34:39:1a:3c:d7:d7:78:ac:37:fe:11:6f:b6:f1:57:ac:57:
4c:5a:c4:43:21:c8:0f:c0:c0:f0:d6:37:73:9e:19:a6:83:53:
50:69:28:b9:a0:66:7a:79:06:8f:1c:21:e4:cc:d6:cb:82:0e:
26:8b:c8:74:48:76:ee:28:6b:8d:74:b9:69:34:3a:0c:3a:f5:
3e:11:ea:39:8b:31:03:11:72:f8:f0:72:bc:3e:a7:8a:49:93:
01:81:bf:3c:2a:43:dd:bc:f3:16:15:54:dd:86:71:06:ea:26:
f6:c4:be:b7:67:e4:d8:7d:09:ca:3b:74:58:78:b4:55:9c:d0:
f9:08:49:cf:d5:ff:16:8b:b5:7f:a2:17:74:38:c1:c3:ac:67:
fa:ae:07:32:9a:f5:aa:c2:29:8e:61:69:ac:55:99:17:69:28:
15:aa:98:2b:a3:1f:99:12:82:61:82:51:5d:2f:83:7a:9c:c8:
34:4e:86:ee:82:57:3d:7a:f8:0f:1c:63:f4:d2:c8:c4:fb:a7:
19:61:bc:02:79:91:41:7b:8b:7d:8b:45:1c:f9:cf:22:dd:61:
a7:94:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:15:19 2025 by rpki-client