Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: CoElgdfFJ5zB4/Nu3g/HOxX7O2KU1cmew2wGSIj/iy0=
Subject key identifier: 4D:65:E3:3F:29:B2:6C:98:87:62:5C:68:21:3E:7B:79:26:C4:1A:7D
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 019880C22029A62AA4DA766A93958024ECB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0CAD
Signing time: Wed 06 Aug 2025 19:01:02 +0000
Manifest this update: Wed 06 Aug 2025 19:01:02 +0000
Manifest next update: Thu 07 Aug 2025 19:01:02 +0000
Files and hashes: 1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: Y9dJfkzw9urmWPaC/Pu1FmVzns6fCp2ayOyiZIzTbNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:20:29:a6:2a:a4:da:76:6a:93:95:80:24:ec:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Aug 6 19:01:02 2025 GMT
Not After : Aug 7 19:01:02 2025 GMT
Subject: CN=4d65e33f29b26c9887625c68213e7b7926c41a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:54:97:33:62:a8:4d:94:91:f9:9d:cc:43:
68:09:cb:3e:b8:60:00:c5:07:d6:98:08:c8:b7:cd:
8c:4a:f9:9e:be:67:c9:ed:dd:97:29:0b:f6:2d:1f:
65:41:78:29:20:5e:f9:17:29:80:f5:a4:8f:84:fc:
fa:cd:90:c4:4f:64:47:91:cf:ee:19:dc:cb:aa:7b:
f1:f1:9d:3d:3f:44:da:1d:56:e9:2c:61:58:5c:b3:
52:af:52:2f:18:f8:1f:bd:5c:5f:68:52:17:0c:c0:
17:fa:04:fc:02:43:40:ea:f6:22:ff:04:f4:10:06:
42:4b:3a:87:b6:db:f0:88:5e:15:fa:4e:37:7f:66:
00:28:96:06:b1:79:5f:b3:c5:b6:d0:81:9a:16:59:
3c:8a:3b:a6:83:ff:d1:7a:2d:5f:69:e6:4c:09:15:
05:23:bd:d6:66:84:8d:2a:84:28:8f:bb:bd:d9:45:
d3:47:aa:1e:14:99:57:b3:f7:df:d5:21:f4:b3:93:
22:f7:34:01:52:03:b9:28:cb:80:c4:a1:1a:ad:13:
0d:2a:20:06:16:63:48:11:1d:ba:7c:ab:53:25:82:
b8:14:20:28:b2:aa:fa:65:df:7a:01:83:df:bf:7d:
b8:dd:6c:3d:46:22:ed:c5:1a:96:a4:fc:97:be:2c:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:65:E3:3F:29:B2:6C:98:87:62:5C:68:21:3E:7B:79:26:C4:1A:7D
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:01:5b:25:01:02:0f:30:c4:82:cb:ed:d0:5d:5d:d0:ed:20:
5f:84:9a:5c:4c:c3:c6:e9:0b:02:7d:ba:94:1c:e2:21:3e:7b:
20:4c:77:e5:b3:9d:35:62:ea:ff:a8:c4:d2:cc:85:1e:b4:47:
f8:ea:be:9e:a2:2d:d4:63:fd:9e:d3:81:1f:ce:54:a4:18:f6:
28:01:05:5f:f6:21:9d:c5:5f:12:41:d2:31:7e:8a:95:9b:f6:
17:9a:ae:cf:4a:70:e5:bd:b0:52:f6:84:43:60:db:18:7a:53:
be:40:75:94:0c:3e:d2:c6:be:a7:4c:6e:fb:e3:01:79:a6:58:
f8:25:d1:84:75:16:5d:b5:b7:ed:7f:d1:d4:29:19:de:53:dc:
fc:92:c0:fc:1a:67:56:9e:ac:4c:3b:2a:f8:59:d5:95:7a:fe:
0a:b6:7c:85:3c:2d:a4:6f:e5:72:e2:1c:aa:17:59:a7:ab:b6:
58:49:54:53:4b:47:64:de:ab:e3:47:32:36:7c:e6:5c:d7:2c:
24:88:90:59:d4:ac:76:66:6b:2a:f7:22:3b:fb:67:8f:70:17:
f7:e2:d4:a4:4a:6c:49:be:64:4c:b3:9c:b9:fb:6c:b9:aa:fc:
b8:ae:42:12:e6:4b:ab:6c:bd:15:df:80:e8:5c:9f:df:7e:8d:
8b:dc:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:24 2025 by rpki-client