Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: ULWbx+AlGLsKfzjvGAvAF/2h5paXKfjyoFFbHQIsWTY=
Subject key identifier: EE:FA:C0:97:2D:40:24:C7:DA:E0:18:59:A2:50:1E:F0:97:53:7C:D0
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019883C3A3418F757024080B9AF4A781B68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0526
Signing time: Thu 07 Aug 2025 09:01:33 +0000
Manifest this update: Thu 07 Aug 2025 09:01:33 +0000
Manifest next update: Fri 08 Aug 2025 09:01:33 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: YTFQCMgVG37zJuRuRzi2NK8eyC7qPu7wZ+0zffdIdiY=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:a3:41:8f:75:70:24:08:0b:9a:f4:a7:81:b6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Aug 7 09:01:33 2025 GMT
Not After : Aug 8 09:01:33 2025 GMT
Subject: CN=eefac0972d4024c7dae01859a2501ef097537cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:bf:18:8a:c6:31:7e:31:3d:d8:05:02:ec:
ad:ec:da:69:ed:4e:4a:a5:d0:f0:31:c6:18:f9:27:
60:98:42:45:c2:fa:b9:2d:f9:6a:25:ba:2d:a8:9c:
bb:33:5a:46:49:1b:a4:78:b9:fe:de:3e:f6:98:6f:
4c:ca:98:b7:2d:82:8c:58:bb:72:9f:0b:69:f0:6e:
d4:86:0a:a6:bd:9c:a7:52:e7:c1:15:f7:68:07:f2:
5e:5d:9b:58:5c:14:bf:3e:63:6e:33:50:38:26:22:
59:5f:b7:e8:11:d8:1e:ef:04:b8:cd:06:ef:dc:70:
17:e1:28:9a:3d:97:5e:5e:a0:da:34:c1:90:81:77:
eb:85:c2:01:ad:27:7d:51:d7:3a:69:1d:7a:f2:5e:
eb:b3:e2:2d:db:3c:0a:a6:dd:56:20:be:82:6e:46:
32:c5:d1:b3:0b:9f:a1:2b:1d:1d:b5:3f:a1:33:e9:
c3:3d:ff:9e:83:c6:e8:88:97:1c:3e:d7:c2:e8:22:
8d:a8:fc:b9:d8:7a:d3:77:27:b9:dc:21:c5:63:46:
81:fe:75:50:21:ad:c5:19:b5:a4:f7:36:41:f2:68:
44:a8:23:66:39:e7:76:12:4f:14:eb:8e:39:d1:ea:
49:ee:f7:0c:30:2d:7a:7f:a0:d9:3a:50:b0:70:b4:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:C0:97:2D:40:24:C7:DA:E0:18:59:A2:50:1E:F0:97:53:7C:D0
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6e:f8:47:a7:54:79:be:08:f8:4e:10:75:54:b2:25:d7:c0:
f0:48:f3:12:23:7f:a7:74:3c:a7:37:6f:ff:01:7e:bf:f7:a2:
3d:af:b0:9c:fa:ad:8d:e2:c9:69:e2:6b:87:b8:d5:79:95:34:
34:53:e0:d0:a2:c9:83:42:01:ae:3b:88:a6:df:26:d5:f5:4a:
2e:e0:2e:a6:cb:c7:c7:e0:dd:88:07:56:a2:fd:0f:c9:7b:2d:
46:79:82:ea:80:85:dc:cc:a1:29:c7:20:87:85:c1:5a:0c:37:
04:68:72:f3:c4:5b:88:ef:16:ef:2c:e9:4b:05:1c:e2:df:ec:
f3:c0:b2:26:f3:11:1f:60:58:17:db:89:3f:03:b0:91:1e:74:
8c:1c:1c:88:8b:6c:83:d2:e6:39:71:63:a0:18:e7:20:4d:1f:
8d:35:60:69:2b:af:a6:fc:48:4d:34:51:67:24:b1:ff:a0:85:
f5:20:99:f7:a7:bb:3b:73:b4:57:a6:fa:7c:62:30:7c:a8:81:
8c:79:ab:11:a9:46:79:49:2f:01:0f:29:69:0a:df:06:ec:dd:
04:dc:e9:3b:da:20:cf:a3:f7:09:3f:55:d4:c5:ce:61:3b:6e:
44:7a:84:28:70:9f:55:4a:5e:31:8d:7b:ff:3b:d4:78:6e:94:
6d:d8:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:57 2025 by rpki-client