Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: m1Ka7dXcxXeyGC0Y7PuXqMFYcugo0bxHakOVCtZIqLI=
Subject key identifier: 26:DA:EF:7B:ED:E5:C4:83:63:EA:A7:6D:84:98:A0:5A:E1:EB:F5:F1
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 0198A04EC9659F751E16140CDE5B25121379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 41
Signing time: Tue 12 Aug 2025 22:02:54 +0000
Manifest this update: Tue 12 Aug 2025 22:02:54 +0000
Manifest next update: Wed 13 Aug 2025 22:02:54 +0000
Files and hashes: 1: t5nV1PoAdO-HNQcriDtT0k19Y0k.roa (hash: ktgVwZj6sz4wVJV68ItMtiZ3hfrl5O5Cl3g1dZAV0fs=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: dMxbJn06pcFVKDpLv0tZh54FmhcXaYf6/qcWzl9cLag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:c9:65:9f:75:1e:16:14:0c:de:5b:25:12:13:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Aug 12 22:02:54 2025 GMT
Not After : Aug 13 22:02:54 2025 GMT
Subject: CN=26daef7bede5c48363eaa76d8498a05ae1ebf5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:21:59:4a:ca:af:f4:3b:6a:aa:c1:9f:3b:
2f:02:b1:a8:03:b2:0c:df:0c:c1:e2:c6:f6:14:df:
8c:f2:6c:c9:82:d6:41:fb:d9:c2:94:1d:22:c9:65:
81:5c:57:86:79:d1:67:9a:32:5b:e8:54:58:8a:52:
09:67:38:23:18:99:10:c5:9b:51:48:ac:be:74:c0:
96:b4:39:3e:da:f9:5d:d4:4c:a5:8d:8a:80:c7:38:
55:4c:4a:e7:86:7a:2b:c6:1c:59:bc:1f:7e:f1:10:
11:87:67:36:18:c4:d6:c2:5e:3e:7b:5a:2d:83:96:
c8:d2:c0:b7:a8:82:6e:5a:a0:04:8c:6b:77:df:67:
6b:75:28:74:bc:0d:78:0a:34:e9:ea:d1:ff:72:55:
21:55:b7:a7:46:c9:56:e7:cf:b0:ba:16:23:f1:c1:
f3:18:4f:a4:f7:96:b7:f1:b6:19:38:86:da:f9:e1:
9b:ab:34:54:e6:78:7c:a3:5c:25:36:06:48:df:bc:
37:a8:18:35:02:bd:e6:93:a5:d5:d2:96:d7:48:e6:
5c:26:f4:9c:21:cc:a6:6c:9a:b2:26:be:94:e7:2d:
dd:b3:24:fb:42:a4:fe:fb:96:3a:65:3c:09:e7:dc:
a0:5b:6f:8d:ba:22:b6:f0:bf:47:ee:2c:65:b5:5f:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:EF:7B:ED:E5:C4:83:63:EA:A7:6D:84:98:A0:5A:E1:EB:F5:F1
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4c:40:f5:c6:6d:4f:46:91:a2:7f:35:05:08:ac:73:86:5d:
ca:58:a3:2e:31:93:3b:09:bf:4a:a8:51:5f:96:8f:b7:94:92:
45:57:62:19:58:e9:57:70:ed:04:a2:64:73:25:25:22:d7:8b:
f3:e5:61:4c:45:af:d1:37:aa:3c:20:36:f1:53:fa:90:4a:71:
10:22:35:79:78:ea:d4:7d:16:42:70:6c:2a:e7:da:09:47:fc:
f9:78:0c:ed:22:54:b2:b4:08:71:0f:e6:98:fc:e4:62:64:98:
69:37:e4:2c:19:4b:5b:02:7a:5a:aa:73:3f:1f:bf:be:73:f7:
3b:46:8c:c9:dd:d5:47:a4:4d:1d:78:1f:76:aa:ca:fb:22:c7:
2c:a8:e8:c5:1a:14:2d:1b:97:7e:c5:ca:ef:d5:cf:3e:e6:0f:
d9:0e:d4:8a:88:7c:82:40:89:cd:5c:9f:a3:9d:55:0f:e0:3b:
fa:9f:9c:e3:cf:e3:7f:f4:d2:ed:84:19:20:5b:5a:c7:41:19:
e7:33:2e:41:af:bb:a5:b8:a7:50:8d:b7:aa:4d:09:a2:b3:7a:
b2:9e:47:d1:33:55:8d:af:b3:28:1c:11:27:a5:7b:28:28:e5:
95:df:2c:f4:5c:31:b5:ef:2a:dc:69:ac:18:9b:55:46:72:1c:
e5:58:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:14 2025 by rpki-client