Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: yecTD5OkGsYm5/Bf3qfSGO1joXHu/18g1V5K6wYdv+U=
Subject key identifier: 00:A1:68:DF:B1:92:00:EC:C3:9E:80:42:86:56:1C:2C:E7:62:A9:0F
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 0198925A4A3963392D791FA9748EA8728ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0D1D
Signing time: Sun 10 Aug 2025 05:00:47 +0000
Manifest this update: Sun 10 Aug 2025 05:00:47 +0000
Manifest next update: Mon 11 Aug 2025 05:00:47 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: AEv0ZgBucE9ar1S0nkP/QQH/QyYkYSMIeXV6a59oZyM=)
2: FLK4BXajTTtzozg6zwS2W0dW8TU.roa (hash: TZ26mwHHQp1z9Q90vDXRes8PV7AQXwe9m95HyPKhgHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:4a:39:63:39:2d:79:1f:a9:74:8e:a8:72:8a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Aug 10 05:00:47 2025 GMT
Not After : Aug 11 05:00:47 2025 GMT
Subject: CN=00a168dfb19200ecc39e804286561c2ce762a90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:c4:d8:58:7f:f0:ba:e4:af:d7:12:c7:81:
19:7e:85:4d:76:e4:77:86:b9:86:bb:90:d5:b1:a6:
f2:a5:d2:6b:a8:18:87:b8:dd:2e:93:a6:ef:83:df:
5c:f0:47:a5:42:e2:73:36:4c:cd:19:d6:1c:ff:a2:
f0:96:38:36:68:d9:0a:5a:0c:45:b2:62:e4:6d:c5:
dc:74:3d:82:99:0d:47:9e:16:3a:15:cc:f4:c8:40:
0f:78:e2:f9:0d:9d:9a:ac:90:70:54:15:38:04:ea:
a8:2b:93:dd:29:2f:45:a9:e7:c0:34:c5:f9:b1:a8:
c4:64:1c:18:1f:52:43:7c:d2:b5:f8:38:e5:9d:6d:
b2:1b:dd:ab:f3:af:d8:50:c6:78:7e:6f:60:69:d9:
1e:c2:ff:ef:c2:85:f6:f5:bf:e9:27:45:e5:aa:b1:
2a:c5:54:d4:14:b9:4f:8e:f3:ef:5d:60:90:c8:c7:
a8:b7:05:62:3c:48:2e:14:04:6d:00:9f:08:f0:a9:
76:75:73:6c:df:6b:7f:47:d0:0a:de:22:6b:d2:5f:
41:5f:47:b8:8e:07:57:00:0a:21:79:7c:d3:4a:36:
6f:e8:f2:26:1f:34:84:45:83:82:68:32:d3:ef:7a:
16:6d:25:8a:20:a6:a3:6d:ca:62:b7:c9:62:fe:2d:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A1:68:DF:B1:92:00:EC:C3:9E:80:42:86:56:1C:2C:E7:62:A9:0F
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7d:d2:d2:ca:84:1b:8d:ea:5e:70:30:7a:c2:ea:b4:c3:2c:
32:3f:2d:82:02:70:c1:1b:84:df:98:a2:5c:86:b7:37:f2:26:
14:31:09:b4:81:64:b9:40:db:5a:2f:36:33:70:f0:9f:8c:dc:
09:a9:7c:fd:f8:a7:7a:ba:a4:89:d0:55:ff:0a:38:7b:95:b9:
91:a0:bc:ba:cb:26:26:89:5a:27:f9:9f:e1:da:9a:77:5a:9d:
15:6c:b8:7a:3a:78:0f:93:a9:24:e3:4c:98:8e:4f:73:1f:ca:
cc:b1:95:d3:71:6b:9b:d3:8e:04:67:27:27:24:00:bb:37:7b:
46:35:9c:00:2e:f6:fe:56:ac:e0:6e:f4:ca:e4:8d:80:3f:bc:
25:4e:b9:61:b1:b2:2a:2e:32:c6:24:7f:23:c0:50:1d:ad:b4:
2f:d0:cf:fd:73:65:db:61:85:f4:57:20:7b:00:e0:55:23:4e:
5f:17:2d:bb:22:ef:f3:ed:db:fd:e0:08:2b:39:bf:38:7b:78:
5e:8d:fa:f4:73:b4:e1:6b:7c:5c:a7:ba:e7:2a:1b:e9:37:ea:
fe:f5:3d:eb:be:fb:db:bd:de:f2:96:35:c3:56:21:5d:f1:c5:
9a:56:cd:e3:84:52:9c:8a:e2:94:60:e6:5d:e1:b8:f8:45:a8:
98:9c:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:32 2025 by rpki-client