Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: +Bf7noyDORrKQWBIH+NO1G4tIeHC6AP8DUP0iGrCbXs=
Subject key identifier: FE:D0:B1:38:34:F3:B0:8C:D9:A2:AB:20:FD:8C:53:47:7B:1F:EE:E6
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 019873E36885E64243D7AB01C00A07264BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 1319
Signing time: Mon 04 Aug 2025 07:02:19 +0000
Manifest this update: Mon 04 Aug 2025 07:02:19 +0000
Manifest next update: Tue 05 Aug 2025 07:02:19 +0000
Files and hashes: 1: vHQRV0jRUXExLLAYBdY2ODpzWoo.roa (hash: 7UhAMCr3OjHllJdnfdmjdJInrKVauXU3M4e5nn0fWuA=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: xvgxyJhrYUYhNZeSXX7ioTrGZ8MjTKucsnWBfqQJtWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:68:85:e6:42:43:d7:ab:01:c0:0a:07:26:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Aug 4 07:02:19 2025 GMT
Not After : Aug 5 07:02:19 2025 GMT
Subject: CN=fed0b13834f3b08cd9a2ab20fd8c53477b1feee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:46:3f:20:a6:25:34:0e:25:d5:f5:14:8c:
86:ab:6d:ba:f4:d2:58:34:f9:9f:82:e2:1c:e6:c5:
d2:c7:3f:ea:af:76:91:03:4d:a6:fe:ac:a9:31:8b:
80:aa:18:66:14:89:87:fb:ff:a0:68:3c:c6:8b:0f:
22:ec:c9:f0:75:14:7a:77:a4:37:4a:bf:9c:52:dd:
29:8a:51:be:39:ca:33:63:77:0d:c5:23:3b:c1:a6:
ad:84:92:ed:50:ca:50:5c:4f:b3:3f:d1:a2:26:81:
54:0d:2b:16:88:32:07:80:a5:d1:72:fa:83:21:0b:
ed:34:f8:66:d5:22:23:f7:1a:8d:fd:13:61:37:2f:
32:9b:2b:d5:9c:f1:d3:df:fd:30:b8:14:e6:99:36:
db:70:b9:42:31:00:61:24:84:7c:b2:71:e5:42:6b:
b9:9d:a5:8d:f9:de:0c:19:1b:a0:8f:84:00:d2:85:
5b:17:2a:68:e7:9f:ee:30:84:64:b7:65:3c:69:e8:
6d:5e:21:7d:58:2d:80:25:c7:08:f8:ee:db:74:f7:
79:92:d3:64:e0:19:f1:74:4d:e8:47:b7:c8:62:37:
c2:9d:08:e5:8d:99:df:97:36:27:cd:88:06:6c:d3:
87:33:50:f3:f4:af:d3:12:e9:66:79:fe:29:f0:0c:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:B1:38:34:F3:B0:8C:D9:A2:AB:20:FD:8C:53:47:7B:1F:EE:E6
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:48:6a:c7:b1:5b:ab:f1:5e:a5:ca:5e:74:52:ac:c9:1a:
5c:87:4b:2a:84:71:80:f5:d1:4a:f3:90:86:7c:78:41:3f:24:
14:e5:3d:76:72:71:ff:c4:6b:2c:a8:39:e9:ba:b7:d4:52:95:
17:bd:1d:20:e1:b1:dc:8c:3f:0d:11:7b:26:98:8d:a7:f4:6c:
ae:68:d6:78:a3:8e:29:90:43:8f:1d:0c:64:e4:3a:9d:ef:ed:
80:ef:78:fd:94:db:b5:91:27:70:e9:c7:1e:a0:1d:54:f9:51:
07:35:2e:f2:88:9e:7f:bf:03:9a:28:83:0a:38:4e:97:79:13:
31:e2:61:f0:96:0f:90:96:a7:93:71:f0:f7:ba:cc:bc:19:51:
75:94:81:9f:e7:51:a2:bb:4d:76:7a:76:a0:c3:69:49:fd:0e:
28:d3:81:ed:03:fe:b7:8f:b5:16:65:92:6c:df:3a:5f:9d:11:
57:bb:9c:f1:8f:31:98:6c:83:e6:37:b9:b5:ff:8b:5f:5d:ff:
f4:a4:7b:bc:d8:db:a4:98:55:d2:0a:cf:6e:b1:e0:f8:aa:bf:
2c:a9:24:23:39:aa:43:3a:51:3e:36:1e:79:98:c1:0c:1a:24:
d6:97:b2:5f:e2:8b:63:50:0f:d4:e8:cd:4e:52:d0:ac:3a:ae:
89:86:ab:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:06 2025 by rpki-client