Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: 7dQ3NvdMNuaOtjyMuYVAczxYpoLvP3ckroAV9tNehEg=
Subject key identifier: 97:78:61:F3:B8:CB:49:6F:6D:F0:88:A1:58:1C:61:81:23:28:FB:29
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 01988FC7A73464F23A1A8329AC94DDDFD4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 1D
Signing time: Sat 09 Aug 2025 17:01:23 +0000
Manifest this update: Sat 09 Aug 2025 17:01:23 +0000
Manifest next update: Sun 10 Aug 2025 17:01:23 +0000
Files and hashes: 1: ay2UhLb9gVwOGFcPuT7u3po7GlY.roa (hash: Nc0lcUmEx3NfjhiK/z5Wio+LmihCcurK5+zIFKzkR30=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: EmyteLgNxAl7IrsbKuAeYBDZzIWgMqIAO7TtGTUJY94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:a7:34:64:f2:3a:1a:83:29:ac:94:dd:df:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Aug 9 17:01:23 2025 GMT
Not After : Aug 10 17:01:23 2025 GMT
Subject: CN=977861f3b8cb496f6df088a1581c61812328fb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:75:98:4b:eb:1f:d4:30:90:6e:13:c4:50:
25:4f:b3:97:18:ed:8a:80:4e:bb:ed:54:58:d9:b8:
34:32:cb:d9:4e:16:7e:87:80:03:28:e3:d0:0b:40:
f4:10:79:10:e0:15:8f:23:3b:02:a5:44:77:67:07:
b0:e1:f7:00:38:12:46:bf:31:45:15:2c:51:fa:f6:
1d:e0:3b:8c:74:68:b7:17:e5:7f:ac:38:75:65:9d:
07:ac:37:da:85:a4:2e:82:bb:67:3d:d3:91:f5:80:
72:8c:f2:44:78:61:44:46:a3:50:6c:9e:6d:e5:11:
b4:29:9a:27:0a:d1:0d:85:98:67:14:d7:ff:19:6e:
5a:4c:99:7f:7a:8b:61:a5:03:3a:ea:33:94:88:04:
c1:9e:c9:7d:a0:b2:56:4a:68:5a:77:df:43:e6:cb:
99:cf:fc:b0:d1:41:30:bb:39:06:eb:c9:46:42:de:
25:a7:3e:e1:af:b9:a7:2d:27:7a:1a:54:a6:48:ee:
77:b9:c8:cf:d9:43:35:8b:07:27:85:96:ed:94:f7:
bd:d7:55:9c:94:68:5c:cc:87:3e:ca:6b:3f:d1:31:
cc:41:e0:5c:f1:4e:94:b3:10:08:6f:6f:d8:95:77:
20:c1:f2:8f:af:7e:f8:d1:a8:81:f5:2a:1b:66:3d:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:78:61:F3:B8:CB:49:6F:6D:F0:88:A1:58:1C:61:81:23:28:FB:29
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:86:56:55:c4:f6:ca:07:e6:9b:79:44:e7:70:ed:1f:90:25:
22:39:db:c9:af:29:dc:a0:64:34:f8:42:af:95:19:4d:b0:1f:
72:9e:c6:e8:dc:d8:4b:bb:58:0f:ec:36:01:32:93:1a:74:2a:
6c:f1:b2:1e:db:30:f2:f9:eb:fd:22:ba:05:a1:0c:b1:07:7d:
25:4c:a7:a6:3a:2d:0b:16:fb:e9:52:58:7b:28:88:77:3c:73:
d3:70:ff:09:d0:79:76:96:36:15:05:4f:38:7c:49:ed:17:00:
fc:05:48:5f:3f:97:7e:2f:f6:8e:6a:f3:5a:d6:4b:f7:cf:f9:
c1:e2:4c:72:0f:71:90:f9:25:d0:c6:d6:71:f3:b3:df:28:e9:
a2:19:2b:a5:0e:46:5f:87:7a:31:42:4d:31:96:eb:ad:83:43:
ad:1c:33:8d:7a:4e:16:6a:8f:18:55:11:8d:7d:c1:59:c0:73:
3e:56:4f:c0:23:28:5a:61:a8:23:8f:93:64:83:7f:d1:69:06:
f0:ce:ed:63:63:28:7f:03:43:60:7b:27:b7:09:17:32:03:79:
79:e5:73:98:1b:b2:06:40:c8:7b:1b:46:ae:8e:bb:0f:63:53:
64:47:ef:2f:5b:29:4a:8f:f4:05:e6:43:07:20:b2:63:21:c6:
97:7f:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:02 2025 by rpki-client