Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: pjNBkZD90MXst3MzNi3jjVfxHq2RJmU/vIGChrEgktU=
Subject key identifier: 43:C8:0A:2C:61:3B:7E:EF:85:CD:D1:59:B3:DB:07:74:EB:FB:3A:91
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019893A489E3CF7A985C25212CD56FA7AD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0CC3
Signing time: Sun 10 Aug 2025 11:01:30 +0000
Manifest this update: Sun 10 Aug 2025 11:01:30 +0000
Manifest next update: Mon 11 Aug 2025 11:01:30 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: CLVAZjovuYabUUf67XEsevDXrRov4gHppE29LnckE8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:89:e3:cf:7a:98:5c:25:21:2c:d5:6f:a7:ad:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Aug 10 11:01:30 2025 GMT
Not After : Aug 11 11:01:30 2025 GMT
Subject: CN=43c80a2c613b7eef85cdd159b3db0774ebfb3a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:72:33:76:a8:cc:6c:b1:7f:09:c2:6f:b7:
a7:d6:7f:96:b1:92:6b:f7:52:63:8b:38:00:f9:8e:
e0:c6:52:af:9e:23:50:dc:70:a3:63:c8:aa:ce:98:
76:38:00:8e:a5:71:a0:af:0b:a4:04:8b:30:22:10:
13:60:b0:b0:42:c8:f0:8f:68:00:26:ca:33:87:be:
4d:9b:e7:49:71:89:78:c4:80:1c:e1:7f:ce:e6:79:
b8:07:90:9a:68:b4:21:4a:b3:1e:f8:49:f3:73:6b:
bc:83:58:a1:0f:a9:9a:a2:7f:61:76:f7:36:8e:43:
fe:3c:e0:5d:02:24:d9:cc:2b:f9:43:f0:1b:05:36:
8b:92:2f:f0:f8:78:31:ae:b2:94:8d:e5:d5:d1:d9:
3c:13:60:e8:d4:ee:64:0f:3c:ee:a8:3c:34:c7:5e:
19:80:f7:10:a9:a5:b7:20:c3:d7:6c:b6:8b:f1:1e:
cc:01:66:7d:25:c0:10:f1:ab:3c:69:86:3b:03:6b:
47:7d:77:92:79:96:7f:4c:0f:ec:bd:7c:b1:90:75:
60:10:c4:94:dc:a3:db:5d:fa:c5:66:6b:8e:f2:8a:
f0:73:3d:46:9f:96:31:02:32:f9:f1:06:50:b7:64:
78:6b:ec:fc:08:6c:f2:9d:e3:ad:36:61:e3:3d:30:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:0A:2C:61:3B:7E:EF:85:CD:D1:59:B3:DB:07:74:EB:FB:3A:91
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8f:a9:4e:d7:79:af:14:6d:77:2b:bf:62:b0:e4:05:53:cf:
91:61:39:54:3d:9b:56:a3:fd:fe:21:4b:33:47:01:48:46:ac:
22:b9:28:9c:32:cd:39:e9:bb:fd:85:f9:2b:56:5d:df:55:11:
44:1c:12:67:68:93:c5:19:cb:54:87:b4:cf:f8:42:f0:05:7e:
85:8d:98:24:3c:2c:6d:a9:76:3b:c9:c5:2a:2f:df:1b:49:fc:
e3:ab:10:8b:16:23:a1:07:10:86:49:c7:f7:16:07:c2:26:74:
bc:3b:76:6e:46:8a:33:76:37:d8:6e:f7:ce:8a:05:a3:15:32:
de:70:67:d8:6d:b1:01:d2:6d:c6:d1:cd:d9:ca:a5:80:5f:87:
cf:80:ed:71:d7:59:5a:52:c7:e3:15:00:af:72:7d:f8:24:b4:
89:7e:26:c1:5a:00:b8:eb:e9:5f:29:b8:28:8b:ac:de:71:99:
2c:49:72:ff:a8:ca:d3:e6:14:97:4f:d3:58:0a:49:90:b6:9d:
78:27:ee:b5:7c:e3:6d:2f:78:18:ce:9c:2e:25:92:c3:d2:4e:
7a:9e:a8:29:b5:9c:3d:1b:99:3f:96:02:94:8d:83:48:22:e5:
a0:73:62:70:8a:fe:36:af:8e:0a:b7:9f:32:5a:c5:8e:78:d0:
fc:18:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:45 2025 by rpki-client