Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: i2VNHhnU190lbIdw5EzW8Tm4TyMyJvfqb3KclG6eV9Q=
Subject key identifier: E2:5C:2B:C2:F6:1D:7A:F8:42:CB:EC:56:09:6D:83:AF:6F:31:CD:DB
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 0198793F7283D06968D427F3B74CC2C767B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 011F
Signing time: Tue 05 Aug 2025 08:00:57 +0000
Manifest this update: Tue 05 Aug 2025 08:00:57 +0000
Manifest next update: Wed 06 Aug 2025 08:00:57 +0000
Files and hashes: 1: yLKyshLk5Y8qo2HfRt0bfJWqtcI.roa (hash: CLpNYZZ3o+zwOI76Lm9XQZQEHlIeProjGVosiuqFQCw=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: 4bG6HZcm8kJAiVnSVvKAdx2KZFwGlCxDX4ur+IGwjkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:72:83:d0:69:68:d4:27:f3:b7:4c:c2:c7:67:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Aug 5 08:00:57 2025 GMT
Not After : Aug 6 08:00:57 2025 GMT
Subject: CN=e25c2bc2f61d7af842cbec56096d83af6f31cddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:67:94:2c:6c:70:49:5e:99:ca:ce:4e:79:
bf:91:cc:8f:d8:8a:e6:71:67:4f:60:2d:aa:20:c3:
a7:e2:17:15:7a:51:8d:71:61:c8:70:db:b9:b3:31:
65:63:cc:d7:6d:b5:93:1d:75:ed:b6:0d:c4:0e:cd:
d3:c1:f2:39:19:77:e2:99:59:74:c0:d2:ac:95:10:
76:32:08:88:5e:af:67:86:c9:27:0b:4d:d7:a7:cd:
56:20:d3:7b:70:49:12:0c:3d:26:90:f8:4d:b6:1d:
c7:4f:f4:6e:7e:f8:b3:3a:61:f4:20:1f:24:b5:c8:
48:e5:4b:f7:b2:08:0b:03:ee:9b:e0:f5:0a:6c:2c:
98:4a:1f:8d:53:c8:70:f9:d8:ae:ae:82:6f:2f:2d:
5e:6b:5e:d9:13:31:29:31:55:68:40:e1:cb:7f:fb:
a6:71:7a:e0:e7:04:7b:ea:6a:72:21:a9:73:70:76:
07:ef:1a:2f:2d:58:9b:37:fe:b9:3f:68:70:d1:bf:
9e:a1:d9:88:7e:34:de:94:82:1e:cf:a3:8e:01:e3:
d7:3a:3d:9d:4c:07:94:34:12:a0:3d:5d:a8:23:a1:
48:19:f7:66:66:6f:f4:6f:c4:2e:7e:bf:1d:86:07:
31:ca:4a:67:15:2b:45:31:b9:d6:18:4f:12:2c:d2:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:2B:C2:F6:1D:7A:F8:42:CB:EC:56:09:6D:83:AF:6F:31:CD:DB
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7f:ef:54:af:3f:b2:a8:55:87:7c:64:5a:47:4d:a7:5c:c8:
a0:2d:7f:1c:6d:96:df:1c:05:2c:6b:6f:56:10:21:e8:5e:dd:
be:ff:e8:c2:7a:95:d5:be:8b:0c:10:cc:44:9e:96:9d:bb:04:
f6:55:ce:42:c0:23:5a:dc:d3:3d:e9:fd:f9:3c:b9:34:5e:b7:
de:d9:33:c7:7c:dc:17:8a:62:75:1c:f1:33:cd:fa:45:8b:62:
bf:d5:bb:3f:19:b7:8b:f3:fc:ac:b3:33:d9:b8:b8:af:02:70:
aa:0c:d8:f6:86:5d:0d:fc:24:c3:c0:16:c0:e6:10:92:5e:a1:
b6:7b:ab:c9:76:41:9c:88:3b:cd:15:b8:95:f1:b0:56:67:de:
58:39:f4:fc:dd:02:97:e4:40:3b:e5:0d:c5:21:6a:a3:b8:dc:
63:81:c0:76:0a:42:80:a1:ec:88:14:fc:b2:18:25:19:11:34:
f4:02:6f:df:d5:f5:68:a6:e8:8f:61:c2:6a:53:ea:bb:fe:4c:
31:cf:29:ee:93:ea:d3:4d:4a:b1:13:76:c3:e5:e5:f1:55:90:
2d:06:f5:74:e0:ae:d7:85:07:ca:04:f8:7a:66:62:e2:69:8a:
47:3d:3c:8a:fa:1d:c5:bb:7b:0e:fd:3c:2d:88:77:7b:e3:1d:
6d:dd:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:03 2025 by rpki-client