Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier: XGkFhbo3XVHvaYkiudWVzEg4zEwmdHH5Rur5IDXZpOs=
Subject key identifier: 7B:3E:F7:45:17:8C:E2:E6:DE:07:96:D6:9B:65:02:91:35:05:D3:50
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 019894123991CC2E0E48E1679DF435EF3558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 13:01:18 +0000
Manifest this update: Sun 10 Aug 2025 13:01:18 +0000
Manifest next update: Mon 11 Aug 2025 13:01:18 +0000
Files and hashes: 1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=)
2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: XAiOBsLmF03n7HYaQ9BBYNuUgB2VMvyOrcprPAnlNHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:39:91:cc:2e:0e:48:e1:67:9d:f4:35:ef:35:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Aug 10 13:01:18 2025 GMT
Not After : Aug 11 13:01:18 2025 GMT
Subject: CN=7b3ef745178ce2e6de0796d69b6502913505d350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:d2:52:82:90:e9:dd:f8:f5:e5:58:5b:41:
57:e0:ea:e0:c6:13:8c:1b:61:de:b3:25:2a:9b:a7:
c3:8d:75:bc:67:6d:13:7b:79:bd:be:3f:80:5a:7a:
43:b9:32:dd:a7:22:69:84:88:e2:43:f2:b1:bf:29:
35:08:0b:db:42:ba:9a:f5:ba:1e:54:1f:ab:95:9f:
9f:cc:45:65:4d:da:51:22:a0:71:59:fe:52:5b:63:
a5:da:d1:f6:bc:ce:21:3b:dc:8f:a3:ce:64:37:c1:
0e:2e:4e:dc:0d:e0:0a:f3:df:5b:55:f9:00:5a:37:
91:1f:4a:e4:33:07:6f:c9:4b:c8:fd:d2:1b:a2:f8:
33:7b:7f:78:77:12:89:55:c0:cf:d6:e9:60:c8:df:
21:a8:b6:23:c0:46:1c:a2:6e:bc:28:be:95:99:1b:
07:1d:4a:d9:bd:69:da:23:2f:cf:c9:72:1d:fb:7a:
44:1c:19:2c:02:03:8b:b3:e3:c5:e7:d6:7a:a4:4f:
e7:44:3f:04:9d:b7:73:87:43:19:71:3e:32:e0:8c:
0a:bf:8f:bf:93:44:e1:bc:3c:31:93:93:56:69:a3:
9f:fb:87:8e:9a:ac:7b:41:4a:12:89:aa:e1:c1:96:
34:21:dc:dc:26:a8:af:0d:0c:eb:65:e4:93:59:ac:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3E:F7:45:17:8C:E2:E6:DE:07:96:D6:9B:65:02:91:35:05:D3:50
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:15:6a:79:c2:58:fa:46:4c:fb:4f:1f:24:0d:eb:72:d4:f5:
9e:bf:56:06:4e:9f:9a:39:0d:42:af:8a:39:c5:d5:1a:e3:ec:
63:1a:e7:83:ee:ca:a1:4f:72:8f:61:61:b5:32:30:7f:0c:6a:
3a:85:7a:9d:de:f6:f6:d2:b0:fd:ec:cd:c0:a2:f0:05:83:ee:
77:8f:5a:19:b2:4a:2b:c6:2d:5a:98:46:c1:0f:81:51:f8:13:
91:8f:5e:db:71:30:54:8b:55:f0:d6:da:8c:a7:72:9d:e6:49:
b1:1d:a3:b0:90:5a:e6:ea:09:86:5d:b8:14:7e:9c:8b:8b:68:
9b:54:7a:bf:68:70:fd:48:ba:cd:44:ca:14:e3:fc:24:79:3d:
8a:bc:66:37:b3:b0:8c:1e:3c:8a:92:dc:1f:5a:7d:0d:31:29:
4d:60:93:ee:37:28:0a:f8:82:eb:79:ef:37:94:19:1d:e4:1c:
56:0b:19:f8:aa:5b:16:50:ee:79:31:86:ae:34:88:2f:ba:22:
30:fc:d0:bd:94:4f:fd:47:cc:7f:61:ac:ab:ff:7d:40:20:03:
26:81:f0:22:1c:c8:20:87:fc:13:42:75:97:d1:f5:fe:dc:e2:
88:88:3e:5d:ec:11:c9:32:86:e3:4e:a5:a5:52:f5:dd:44:9f:
07:ca:a8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:46 2025 by rpki-client