Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: NufTdZBiSGu+orYMj3d2+1ENvNFcdUmk4bNVvHgcXRM=
Subject key identifier: FA:0C:19:4C:3D:8F:38:D4:1B:53:49:81:FC:7E:F6:2A:91:4E:F6:8D
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 019894124EEB0DBBD0C31165E3A253E9321E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0A7A
Signing time: Sun 10 Aug 2025 13:01:24 +0000
Manifest this update: Sun 10 Aug 2025 13:01:24 +0000
Manifest next update: Mon 11 Aug 2025 13:01:24 +0000
Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=)
2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: JY7mEqi3jv2OmgntiKOa9wJScjc7MsAyibF5nN9vUc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:4e:eb:0d:bb:d0:c3:11:65:e3:a2:53:e9:32:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Aug 10 13:01:24 2025 GMT
Not After : Aug 11 13:01:24 2025 GMT
Subject: CN=fa0c194c3d8f38d41b534981fc7ef62a914ef68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:06:60:c4:74:0a:f5:c1:e7:fd:19:ad:d0:
c6:1a:a4:be:2c:fc:65:9b:6b:45:52:20:3f:eb:82:
38:78:fb:79:6a:41:eb:ef:25:9b:c9:30:93:d7:37:
b2:c4:80:c9:21:23:f7:82:2b:70:05:50:11:8e:d6:
08:a0:7f:2f:84:ed:09:ca:dc:ac:96:cd:7b:86:d1:
31:29:53:08:dd:e6:97:98:d4:1b:ac:dc:de:57:1a:
56:9c:dc:b7:d4:94:2f:65:4a:32:2c:95:02:44:89:
99:cc:a8:71:fa:f9:a7:72:d0:e8:0f:83:b8:e6:c3:
82:dc:16:7f:39:8f:f4:9e:cb:c1:04:16:6a:1f:f0:
dc:9b:97:3a:3c:ca:03:8e:6e:25:99:2c:a0:ae:f4:
68:f5:ec:e1:1c:1e:a7:00:a7:42:a2:a8:86:11:f7:
a5:1a:5a:2b:c9:88:52:fc:51:60:0d:1d:87:1e:b7:
1d:74:49:d1:d2:47:f7:93:03:51:01:d5:ce:bc:88:
bb:de:57:4d:bc:fa:a8:6f:a9:95:48:a8:68:65:08:
73:a2:60:85:7b:65:c2:b7:fd:b0:08:cd:f7:b6:97:
4b:84:e7:ab:2f:91:1b:19:40:bc:98:dd:cc:b2:af:
6d:c3:e1:94:2f:7e:cb:9b:63:0a:5c:d5:56:76:ad:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:19:4C:3D:8F:38:D4:1B:53:49:81:FC:7E:F6:2A:91:4E:F6:8D
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b9:69:f8:5b:1b:28:e2:4a:b4:3f:b9:a1:65:ca:15:a8:e3:
23:e0:c4:fe:f9:08:77:dd:b4:96:f0:a8:e4:5a:2a:b3:ee:f9:
6b:86:90:80:b1:4d:c4:dc:cf:9f:1e:d5:ff:3b:3e:36:d4:57:
ce:95:6d:a5:0b:ca:bc:af:53:bd:64:37:65:18:8b:05:8d:99:
f1:35:f6:6e:40:d0:90:6b:06:f7:be:10:9f:3d:c7:c5:1a:ea:
a7:ee:13:70:ca:0c:88:73:35:62:75:00:53:c0:37:2b:d2:cf:
16:e4:4e:e6:ef:81:05:00:70:6f:4f:2d:ff:98:e9:89:86:bf:
01:6d:86:16:14:75:36:5f:ca:1a:ae:e2:0e:14:8b:41:b1:cb:
b0:f3:9c:15:06:ab:e9:5a:06:8e:ee:99:b1:67:77:d1:8c:fe:
b8:8c:49:45:24:0b:11:c6:87:2f:31:72:4b:de:67:cc:ab:48:
7d:ee:48:7e:23:68:b4:f0:32:80:c5:16:65:f8:db:89:9d:54:
a4:2d:23:9f:9e:66:77:ab:1e:90:ab:57:3c:75:8d:2d:3e:89:
74:c6:13:33:08:86:ac:ae:88:fa:69:35:1d:e3:79:9c:4a:ef:
72:b6:12:35:86:75:4e:4c:48:4a:02:6c:7d:4e:d9:26:de:04:
0d:7d:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:52:08 2025 by rpki-client