Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: SirquLBTGCj539yMfzWKnwxhmPN6M8EK9HYyCZetvHw=
Subject key identifier: C9:75:5F:7A:71:31:30:04:56:CA:D4:81:6E:93:49:81:16:FC:08:9F
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 019874BDBD670304AD7C62013766DF8FA220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 11:00:48 +0000
Manifest this update: Mon 04 Aug 2025 11:00:48 +0000
Manifest next update: Tue 05 Aug 2025 11:00:48 +0000
Files and hashes: 1: hPBXvKQdaqlVU4nQ-2Te7vaa8Bo.roa (hash: c9xr2QPdOJHBS76dYaN+BTyMMmlA60SbcteFKaCmJMA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: nfBZ14+NFj058hkAP2UI2agahMR2poLzzhQ08PDVoBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:bd:67:03:04:ad:7c:62:01:37:66:df:8f:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Aug 4 11:00:48 2025 GMT
Not After : Aug 5 11:00:48 2025 GMT
Subject: CN=c9755f7a7131300456cad4816e93498116fc089f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:ac:ff:89:0a:22:29:22:08:b0:12:a7:51:
ff:9f:84:ba:ab:4c:b6:ac:07:c3:a2:07:5d:9e:b0:
6c:9c:c1:e5:23:25:f8:fd:23:99:46:d7:2e:e4:47:
2b:b4:81:18:0a:93:8f:0c:6d:05:17:c4:90:89:2d:
17:3f:3c:79:09:0e:76:d5:2e:10:12:56:d3:49:13:
5e:ba:4b:a5:c9:44:78:68:68:d9:1b:c4:e2:0e:84:
e6:45:68:a8:5f:bb:26:ab:cf:0d:5d:c4:aa:59:78:
97:90:48:90:98:66:50:6d:65:87:ca:6d:7c:b8:a1:
1e:ea:bd:ed:5b:28:c7:a8:48:2f:2f:6f:3b:f8:dc:
8f:fe:e5:1d:18:f8:09:ba:58:50:ed:d3:12:91:f1:
8c:26:02:40:1f:99:61:6a:e6:e7:a6:61:6e:a9:65:
f8:0a:81:a1:29:7f:f6:47:a9:e7:15:92:bc:97:01:
73:7a:85:4f:e1:37:1e:1c:58:08:ea:2e:63:70:2b:
77:c2:06:4b:d9:06:91:2d:b2:a5:93:19:5b:59:b7:
06:85:f3:b5:cc:bf:f0:b1:df:0b:f0:b1:15:3b:e0:
32:44:d6:31:55:a4:db:73:cb:38:5b:2a:70:fa:25:
eb:9b:70:71:f1:92:9f:20:3a:97:66:3f:45:9a:ca:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:5F:7A:71:31:30:04:56:CA:D4:81:6E:93:49:81:16:FC:08:9F
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:99:f1:c0:53:f8:f2:d0:b2:d1:ec:5f:53:77:b2:c9:98:1d:
25:8c:30:02:1a:de:70:bb:88:dc:b3:d8:f4:08:bd:0f:59:e8:
54:71:82:ae:ae:80:ad:6d:2f:ed:10:2c:05:70:b5:91:bb:9a:
bb:20:a6:11:0c:d1:60:61:8a:d9:95:4e:95:9f:b8:84:d6:32:
12:fa:75:0c:f6:c5:3f:95:cf:c2:22:30:50:6d:61:10:0b:28:
4d:8b:28:f7:d7:0d:71:ae:ca:f9:c8:ee:c9:13:49:f9:2d:5f:
3b:6c:ea:b1:b7:00:ad:bf:ca:fb:2f:51:fc:6d:86:ba:2c:ca:
04:b1:77:1c:5e:32:91:e5:31:7d:49:4e:45:44:40:11:49:6f:
e3:bc:7d:9a:c6:aa:0b:38:fb:64:40:f4:aa:c4:f6:1b:37:6c:
d7:86:63:81:bb:b3:f4:98:0d:5f:c4:32:ea:ee:fb:74:3e:f1:
0b:52:5f:1a:47:52:19:0a:46:c6:a5:23:ab:aa:06:39:cb:5e:
18:67:74:5a:46:25:78:83:8c:f2:48:8b:51:9f:9a:b8:c7:f3:
33:d0:80:fa:5e:02:39:f0:04:00:53:3c:84:86:a2:f6:09:25:
a2:7f:a1:ea:b8:0a:d7:0c:61:60:1d:84:0e:ae:36:4b:48:17:
05:39:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:12 2025 by rpki-client