Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: RkQXI2+dsgnu1sp6TyfL+cmZ72to0KXaYhzmj+UoyZg=
Subject key identifier: E0:A1:20:31:8E:EB:85:83:CE:E3:AA:EC:08:B4:D8:50:AD:AC:37:FA
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 01988DD8DCD4B42A55446D6B5E06D08F8790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1638
Signing time: Sat 09 Aug 2025 08:00:56 +0000
Manifest this update: Sat 09 Aug 2025 08:00:56 +0000
Manifest next update: Sun 10 Aug 2025 08:00:56 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: ttpoAMPuEybYyC5DyuGLpyy6B4XHFMeVzQaapGjHHQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:dc:d4:b4:2a:55:44:6d:6b:5e:06:d0:8f:87:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Aug 9 08:00:56 2025 GMT
Not After : Aug 10 08:00:56 2025 GMT
Subject: CN=e0a120318eeb8583cee3aaec08b4d850adac37fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:c0:02:6a:57:9e:b1:83:70:df:b8:33:de:
21:eb:23:84:ae:50:ff:f5:6c:69:1b:51:a7:27:6b:
21:52:51:d1:ad:93:57:11:3d:39:32:cd:80:25:23:
8f:0f:20:8c:84:41:ee:b1:05:fd:64:07:c2:4d:7d:
85:0f:f5:62:75:70:e5:ad:39:1f:fa:b8:1e:2a:3c:
0d:d8:38:12:8c:c1:ab:3d:7e:68:51:5f:97:02:57:
90:05:4f:d0:97:75:fd:b9:e7:6f:b7:0c:3c:65:f8:
77:59:f0:87:95:d3:9b:2f:60:9e:3d:9a:68:d9:2e:
61:2d:c3:b9:be:3f:98:1b:02:07:a8:2c:a6:bc:49:
11:e1:e8:78:2c:41:ac:26:ba:87:b2:d8:c7:40:e4:
f3:d6:df:9b:69:ab:ca:50:af:9b:ac:c9:7a:b2:0d:
4f:ea:4e:c7:51:1f:f0:8b:81:48:bb:83:b7:28:67:
5a:16:52:71:02:8f:dd:dd:08:c7:4c:d2:52:52:dd:
2e:10:37:3e:54:d2:08:fd:ab:c5:3b:59:95:a2:02:
a7:4b:8d:6e:bb:74:90:eb:a8:64:42:7b:ce:be:a3:
cd:a7:df:57:72:fc:d7:8d:fb:32:35:34:60:ec:e8:
2f:64:0e:99:6e:fb:03:3c:3a:a2:16:ea:c8:e1:b6:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:20:31:8E:EB:85:83:CE:E3:AA:EC:08:B4:D8:50:AD:AC:37:FA
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:2e:ac:e5:f5:84:e3:cb:3f:e3:d5:55:b1:58:5b:57:14:
4d:c3:93:a1:08:0f:2f:fc:95:9a:79:05:9a:68:28:a6:00:72:
7c:ee:e6:9e:e7:12:1d:99:5f:07:00:00:f3:c0:32:13:e4:c2:
76:31:8b:70:68:33:6c:36:15:27:fb:1f:48:2d:2e:54:58:fe:
cc:71:08:7a:fd:ff:7c:cc:f9:be:4b:30:8d:31:18:4b:d0:39:
c5:06:66:63:17:56:31:7d:21:c1:de:74:53:97:00:17:83:0a:
15:c5:18:a9:f6:28:34:10:f4:21:b9:ca:d0:8e:69:b1:b2:d2:
8b:5a:22:a7:61:50:ea:08:68:95:7d:59:bb:56:c9:c2:75:a0:
a0:fe:e7:58:29:6b:d2:61:1e:e3:55:44:f1:fa:7c:33:15:0f:
88:ea:20:9d:7c:e5:5e:04:d0:ae:b9:5c:15:1b:43:54:dc:87:
d0:63:8a:b6:1b:e4:3f:21:50:7f:df:5e:56:92:f2:97:24:33:
0c:f2:0b:f2:57:b7:cd:45:dc:24:46:ce:10:42:00:34:09:d6:
9f:48:6e:b4:3a:e3:81:ac:0f:dc:19:d7:b0:24:70:71:b5:d9:
38:68:34:90:3b:9a:2b:30:ef:f6:75:34:de:a5:92:58:97:fe:
5c:a3:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:18 2025 by rpki-client