Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: vpXmVRi1rmCb9bO2rrMwkfX75FpjdsG2YY+5Dhj0fws=
Subject key identifier: 1E:EC:44:DE:C5:04:56:A1:14:8B:16:E1:54:40:11:07:B0:1B:D9:7F
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 01987CAE1D599D4A70B8F5775F7C9EA8C71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 00:00:42 +0000
Manifest this update: Wed 06 Aug 2025 00:00:42 +0000
Manifest next update: Thu 07 Aug 2025 00:00:42 +0000
Files and hashes: 1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: /J+Fmaa/JNAYMIzpRxS9EhSNbsy+1Bs/AAjhjtbOERY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:1d:59:9d:4a:70:b8:f5:77:5f:7c:9e:a8:c7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Aug 6 00:00:42 2025 GMT
Not After : Aug 7 00:00:42 2025 GMT
Subject: CN=1eec44dec50456a1148b16e154401107b01bd97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:5a:0c:df:1c:ca:3e:15:6b:43:d5:fd:8c:
2c:9d:64:8c:ac:30:ea:cf:8b:0b:d2:f4:cf:14:2c:
13:90:ab:09:7c:42:b8:35:c4:fe:3e:f6:6d:a8:27:
85:74:b1:cb:86:3b:79:3b:f8:2d:92:59:42:f2:4e:
ce:4c:d3:d6:eb:7f:5a:0f:45:c8:32:56:90:ad:22:
4b:84:b9:47:9b:e5:1a:e0:a4:37:f1:5b:2e:f6:02:
ba:44:07:7f:49:2e:91:59:7d:37:d8:08:f1:c3:d1:
01:65:66:68:60:00:db:92:8d:09:01:a9:e2:d0:dc:
c7:01:97:71:68:52:11:17:1a:f8:86:6e:86:a0:5b:
6d:d2:12:f5:52:a0:da:60:ff:b6:89:1b:e4:7a:9d:
50:48:db:77:24:60:be:d7:9d:c9:03:21:eb:56:b1:
71:9e:10:b4:0e:56:d4:6e:97:d3:a2:4a:80:02:28:
82:fa:7b:b5:b3:09:eb:9b:fe:7e:37:29:d3:12:7c:
9a:67:17:10:8d:cb:76:03:9d:54:92:af:87:b3:4a:
4c:b8:ef:0a:07:5f:84:7a:75:d1:1d:db:3f:f7:d9:
0e:62:27:31:41:14:c4:59:20:e3:f7:2c:90:b9:83:
37:97:e3:be:5b:4a:62:5d:79:3a:1f:4e:13:55:8b:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:44:DE:C5:04:56:A1:14:8B:16:E1:54:40:11:07:B0:1B:D9:7F
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e7:21:04:0f:e8:f3:0a:7d:b0:ba:a9:24:33:d4:2a:ed:29:
db:27:c4:95:16:8f:8b:4c:f3:e3:a0:50:0d:93:38:37:8a:21:
7f:a6:40:c0:bf:b3:7d:1b:37:b1:f8:93:81:21:e5:96:66:0b:
9c:43:e3:68:4e:a8:11:2b:4c:ef:f8:3d:19:3a:77:3a:bc:3d:
e7:7b:99:8c:f0:22:24:49:be:ed:0d:20:95:bc:26:0e:a4:75:
17:fb:28:47:14:f7:98:ec:65:1e:4d:95:53:78:18:d8:ba:d8:
63:44:6a:63:2a:a0:bf:c8:c0:8a:a8:b8:53:44:f8:32:be:0e:
03:ef:0a:3b:c2:24:de:00:b5:92:08:7b:a1:3a:7a:fc:bf:b8:
9c:f1:ef:cf:a9:07:74:1e:d9:9b:33:3d:ff:89:34:bd:66:c0:
f0:bf:0a:af:02:31:df:33:90:5c:7f:dd:6a:ea:8f:ea:34:7d:
3c:d3:24:2c:5f:39:5b:f2:f6:70:1a:15:51:5f:48:d0:9d:f0:
eb:9a:68:5a:55:8a:c2:bf:54:54:0e:9b:eb:9d:50:5d:66:07:
3b:46:a6:a7:90:4b:05:75:b3:6a:52:4f:50:51:ef:1f:da:15:
cc:22:df:91:91:a3:73:09:c2:aa:59:92:95:c8:73:8b:42:59:
1b:3b:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:02 2025 by rpki-client