Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: y6TbQRdfZEdnZLU3jJm3qVH33goH4LOxvRIJ/AHj+LM=
Subject key identifier: EB:E7:72:A0:6A:69:25:6D:AE:53:41:00:91:9B:F3:64:5E:FF:FB:4C
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 019896DC1207A1AEB934E34E44E7D14D9FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 02:01:01 +0000
Manifest this update: Mon 11 Aug 2025 02:01:01 +0000
Manifest next update: Tue 12 Aug 2025 02:01:01 +0000
Files and hashes: 1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: 9OUH7iLgeopV7A7T0EVhPhv0qzFbk0ihp9wtTjFZGMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:12:07:a1:ae:b9:34:e3:4e:44:e7:d1:4d:9f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Aug 11 02:01:01 2025 GMT
Not After : Aug 12 02:01:01 2025 GMT
Subject: CN=ebe772a06a69256dae534100919bf3645efffb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:41:21:b2:89:f0:1c:c3:39:12:2e:41:cf:
a2:69:42:77:4d:26:ea:77:83:22:d6:51:a8:ef:8f:
32:79:33:13:f9:c6:9a:87:77:6c:32:23:f6:1a:d0:
40:4b:5f:02:82:19:fb:9a:73:10:70:cc:00:ff:ee:
c4:f1:d9:19:d6:d6:01:2f:9b:f1:a9:e0:78:99:8d:
17:86:7f:6a:ff:08:3e:07:68:ad:2a:c8:1c:33:87:
33:1f:3d:aa:5d:4b:ad:69:a6:18:a1:cc:46:ae:3d:
b8:d8:5c:8a:c0:8d:32:5a:b9:df:51:ff:c5:1a:fd:
72:06:35:7c:b1:ba:b8:f0:6a:aa:cf:ad:c4:74:de:
50:7e:07:a9:ba:31:e1:b8:ab:e6:c9:ba:f6:3e:70:
c4:4b:fe:6e:27:ef:ab:a6:cf:db:0c:c4:49:b9:26:
b1:4a:78:df:e4:d5:bb:16:0a:5a:2c:fb:55:90:3b:
ff:40:75:76:76:1f:71:8a:f9:37:cd:32:ad:4c:1d:
2c:68:13:78:b4:ef:fd:1c:e7:4e:86:7f:ce:64:dc:
74:9a:1a:3f:e1:93:a4:b3:42:6b:e1:5b:43:50:ac:
2b:ab:0e:0b:89:79:83:74:84:f8:28:4c:e5:5f:cb:
40:68:85:6a:77:a3:33:5b:57:a4:53:46:cd:7f:9b:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E7:72:A0:6A:69:25:6D:AE:53:41:00:91:9B:F3:64:5E:FF:FB:4C
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d9:aa:03:5b:78:46:67:95:54:22:04:ed:c3:cf:45:d6:75:
8e:32:85:83:4f:a6:a6:bd:2e:b0:10:b7:78:cf:8e:ac:0a:ed:
bd:d0:a9:f6:42:bb:ec:fe:e0:c0:6a:93:c4:9d:23:85:d7:0e:
5c:5e:4f:ba:14:67:b6:07:e1:fa:d9:c2:76:22:5d:33:9b:a9:
22:2f:62:17:23:12:fe:cb:63:ba:f8:f8:17:3b:03:75:d7:a4:
ec:71:f5:38:9b:c1:1e:73:3a:84:bb:6d:f3:69:b4:59:85:78:
5e:fb:a2:26:68:0a:49:b0:dc:ac:52:2f:65:75:d3:93:2b:2f:
5a:7a:88:01:39:ff:73:6f:6d:f0:38:af:59:8e:e2:18:e0:b8:
b5:76:15:1b:3c:cd:5f:f4:18:9a:4d:6f:0f:7b:50:05:9e:1c:
f9:29:77:64:5a:2a:37:27:35:09:c9:8c:89:e6:89:b7:1a:47:
ec:21:8c:4c:94:19:a4:64:10:6f:77:4a:92:c2:8e:71:5c:17:
a1:44:91:89:ef:3e:e8:d8:e1:45:e3:ed:24:6f:2a:5a:7a:70:
b3:f9:92:d8:c7:72:76:2b:6c:e5:b4:09:88:68:d7:c6:8c:c4:
c5:52:4d:b7:c1:66:5f:01:65:b5:36:f1:b1:d3:3a:f4:20:8e:
88:12:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:17 2025 by rpki-client