
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: e5de4cZjp8stJmaBkoYTqGQteOO3EcKIvkhHuFX/BrU=
Subject key identifier: 22:E7:FE:9D:D0:B9:2F:21:54:E3:92:8F:88:FD:3F:F9:FB:29:EE:7B
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 0198A04E2401DB5D0D46DA1B8FE97D0F3212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 1103
Signing time: Tue 12 Aug 2025 22:02:12 +0000
Manifest this update: Tue 12 Aug 2025 22:02:12 +0000
Manifest next update: Wed 13 Aug 2025 22:02:12 +0000
Files and hashes: 1: cTuB-ABZUf0AWR__0VF3CDRNo30.roa (hash: YL1vZUc95MXZVuCPTTh8OWx5ow2ebJPHUlFFR9eeynk=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: M+bZsbIbizYRDk+CIi/Bk1399pmrDs3vyFCZ3D5QdzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:24:01:db:5d:0d:46:da:1b:8f:e9:7d:0f:32:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Aug 12 22:02:12 2025 GMT
Not After : Aug 13 22:02:12 2025 GMT
Subject: CN=22e7fe9dd0b92f2154e3928f88fd3ff9fb29ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:bd:5b:c8:38:bf:b6:cd:d2:d7:c6:a1:0d:
0e:53:14:82:86:89:87:3f:c4:46:5d:68:24:30:62:
00:cf:4b:38:6f:ac:c8:f5:95:eb:f6:0c:7c:48:71:
c0:73:54:24:12:ea:eb:f5:6d:ca:fc:fa:80:e9:d0:
a2:af:8a:ee:c0:1b:99:67:87:0d:0a:dc:6a:08:b3:
20:62:77:e0:20:7a:26:5c:92:79:b5:d7:2e:c6:41:
7e:93:8a:74:b6:38:57:c4:59:bd:84:40:76:2c:a5:
11:f6:f7:d5:98:4f:c7:15:ac:02:dd:1a:2b:47:50:
04:9b:d4:2c:d0:7c:7f:66:8c:2d:20:04:2a:d6:ae:
0e:07:6a:2b:da:dd:04:99:10:9f:9d:7e:69:0a:ae:
57:5f:98:b3:27:cd:96:a5:ae:e3:58:5a:45:71:f0:
e7:df:9b:63:a7:96:d8:f6:6f:2f:ae:b3:a7:2a:96:
cf:ad:fb:c8:5b:5d:00:a8:29:39:91:5a:e7:5b:f5:
df:69:0c:35:8c:24:36:23:ef:e6:2f:81:7f:31:0f:
58:19:ea:12:ad:24:13:85:6c:0c:07:76:87:6f:d6:
fd:61:8e:0d:b5:36:7d:17:bb:ab:cc:4e:41:c5:bc:
55:2a:fb:dc:e0:ed:4c:08:ce:38:0c:55:83:8e:1e:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:FE:9D:D0:B9:2F:21:54:E3:92:8F:88:FD:3F:F9:FB:29:EE:7B
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:97:a3:55:76:81:f6:9d:cf:59:db:8c:dc:f9:01:e6:1b:0a:
1a:a0:36:0a:5d:74:83:a3:9d:85:6a:f8:39:62:83:72:f9:75:
84:e1:89:da:d0:35:72:13:61:71:ce:26:13:84:38:39:ec:8e:
3b:e3:2e:41:e9:57:0c:e0:e6:0e:11:ca:5c:f0:b8:4e:cb:57:
1c:36:61:e0:e3:f2:8e:21:4b:b9:37:19:f3:6c:48:b5:06:f7:
5a:8d:4c:c0:10:a7:bd:e7:3c:6a:81:73:88:90:bf:50:48:f9:
64:21:27:01:f6:ed:8a:78:af:26:0c:37:ed:e1:85:5e:a4:d3:
75:85:15:79:8e:8d:15:40:9a:36:2b:dc:99:76:36:c1:cd:ae:
2d:44:49:50:85:26:49:7f:b1:1d:98:63:90:5d:33:6d:e1:d9:
b9:cf:b4:02:15:ba:47:ca:09:20:48:62:e4:5a:30:1c:8f:18:
37:96:16:2b:d9:f8:39:b1:01:a5:79:5f:c1:9e:ce:fb:d7:50:
65:3c:34:6c:7f:fd:da:2a:a6:d3:99:37:d6:14:d1:a1:58:39:
fc:38:bd:90:b1:4a:12:94:44:be:e9:51:ea:e6:14:16:2b:7b:
7a:7e:1b:ad:30:e0:73:b9:1d:8b:48:45:c0:f5:d0:e5:d6:7a:
49:97:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:29 2025 by rpki-client