Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: 4rq1/ZT70Lg2XIsLL39eVYb7nYzbcZGUXiNizJgkNAo=
Subject key identifier: D9:1B:7D:9C:B5:1D:39:18:0E:8C:63:7A:A7:78:70:B6:54:F5:6F:33
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 019874F4FB33C8253619775DF04368A06A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 03FF
Signing time: Mon 04 Aug 2025 12:01:08 +0000
Manifest this update: Mon 04 Aug 2025 12:01:08 +0000
Manifest next update: Tue 05 Aug 2025 12:01:08 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: Vn0NMMITRrbE4olT4PJp75kmTvPdp4cn8xHjlWKSsCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:fb:33:c8:25:36:19:77:5d:f0:43:68:a0:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Aug 4 12:01:08 2025 GMT
Not After : Aug 5 12:01:08 2025 GMT
Subject: CN=d91b7d9cb51d39180e8c637aa77870b654f56f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:7d:f2:eb:12:be:35:86:37:7f:0f:4a:ec:
1e:35:19:cc:ce:a2:24:9c:e8:3b:1d:7d:ed:9f:ce:
69:d8:ad:07:8d:3b:8e:ba:6e:0e:7b:89:ea:c8:ac:
57:5d:91:f1:73:1f:56:6e:3b:c2:3c:0f:13:da:9f:
91:77:0b:0a:0d:f2:cc:f6:ef:e0:f8:c1:81:a1:e2:
de:86:52:d2:0c:06:6d:6e:de:aa:e8:e6:d9:e4:15:
45:87:b5:5b:fe:f0:c3:a1:32:b2:6b:14:6a:6c:8a:
35:fd:5b:e5:e0:b2:41:13:f2:87:70:2c:97:08:c0:
fd:e7:78:c0:0a:15:9c:17:c1:3d:c1:c5:e6:03:e5:
73:d2:6e:e9:53:b4:04:96:4c:88:a2:64:bb:56:cd:
70:31:95:4c:9c:38:f9:3f:db:67:ef:d6:8b:e5:0b:
da:cb:fc:f1:6c:ae:7e:f3:d5:37:e3:4b:05:a7:de:
fd:42:c5:25:d4:91:6a:af:b3:8c:1b:f4:ae:09:3e:
53:a2:ec:23:35:58:52:93:bd:a7:81:79:36:77:ac:
ca:77:36:6f:e3:de:c9:2d:23:eb:2a:ef:23:6c:36:
e1:f7:1b:5c:6f:5c:1c:a0:a6:56:09:b8:66:34:ac:
d1:c6:7e:76:24:02:e0:4b:d8:81:98:6d:fe:64:86:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:7D:9C:B5:1D:39:18:0E:8C:63:7A:A7:78:70:B6:54:F5:6F:33
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:3b:73:56:48:91:7e:3e:4a:26:70:6e:1b:e2:53:d4:3e:
00:c0:c8:18:50:60:9f:4d:42:98:25:4a:d0:68:61:24:8a:d7:
39:06:b8:3f:f4:ec:79:9e:b7:78:a9:e0:54:07:9d:5c:53:25:
2e:20:73:2a:4b:bb:0e:bf:ed:9b:bb:7d:74:20:df:29:fd:f5:
a3:cc:b2:93:72:53:e1:83:74:87:a1:63:b0:9b:23:a5:6f:a3:
c4:c1:97:4c:ad:f9:36:e4:f9:40:77:2f:da:04:42:e1:23:c3:
5b:b0:16:b9:9c:96:59:c0:3e:ed:49:3b:59:43:01:51:19:84:
2c:67:01:03:43:71:4d:89:45:f2:5d:4b:8e:7f:67:aa:1b:d6:
61:07:c5:c8:60:a8:c5:46:fd:82:e6:ea:fe:84:5b:c4:20:f8:
c0:64:f8:ee:37:66:dd:2b:5b:7e:2b:be:d0:86:5c:56:3d:fe:
c0:dd:36:89:43:26:e7:4b:c4:85:e7:ea:ea:9a:43:dd:16:9f:
90:81:0a:4a:f3:b1:99:ad:36:53:c1:a7:41:80:06:42:ac:6b:
cb:51:9c:c9:34:08:59:e1:ad:b2:68:29:72:bc:1e:a8:68:a9:
bb:4e:32:f2:40:64:22:26:ad:e9:1e:53:fc:71:ff:4b:d9:15:
fd:da:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:01 2025 by rpki-client