Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: tOt62DrSVHpGiFu0SKSaCQ8Yqz7w2N9v6DtaBCOUjzU=
Subject key identifier: 8F:71:C8:D4:15:F5:EB:77:28:DA:4D:F3:E2:17:D5:7C:9D:FF:63:86
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 01988FC6EFD031B358226E7B3F091673F66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 0DF1
Signing time: Sat 09 Aug 2025 17:00:35 +0000
Manifest this update: Sat 09 Aug 2025 17:00:35 +0000
Manifest next update: Sun 10 Aug 2025 17:00:35 +0000
Files and hashes: 1: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (hash: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: B0oOr3AhiOHFNtUnVsrr1SsxtODZcYmVmQrlB2cEV1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c6:ef:d0:31:b3:58:22:6e:7b:3f:09:16:73:f6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Aug 9 17:00:35 2025 GMT
Not After : Aug 10 17:00:35 2025 GMT
Subject: CN=8f71c8d415f5eb7728da4df3e217d57c9dff6386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:3a:e1:b4:17:41:15:05:bd:83:8b:a8:ad:
b3:81:c6:56:9e:30:67:ad:17:35:fb:69:c0:a2:7b:
3e:c8:bb:ae:85:83:59:66:cc:63:74:d1:66:04:77:
84:96:9b:27:cf:db:10:ed:34:5e:d1:35:08:e8:72:
bf:89:39:46:e7:dd:14:d8:9f:1e:4d:02:e7:71:aa:
4d:c2:f2:86:0b:4e:03:ce:a7:57:2f:b6:21:c3:e2:
56:2a:13:49:21:3f:d8:a4:a2:ed:4b:f0:96:ab:28:
a3:61:fa:60:6f:0c:cb:be:fe:36:8d:f9:a4:14:7b:
55:55:7a:5c:39:8b:04:92:80:9b:11:22:c7:07:9d:
23:a3:88:7f:26:a0:2d:a2:12:33:59:cc:88:78:ba:
21:44:1e:04:6a:55:ab:ac:26:04:1a:f6:46:02:fe:
d5:94:13:e4:88:06:9f:e3:87:64:01:ba:69:6b:9f:
11:eb:3b:25:e7:ce:80:b6:8b:e7:2f:b5:53:85:50:
03:7c:93:63:08:99:0c:05:45:a2:61:38:a8:ce:3a:
65:89:ff:2d:7a:7d:ac:16:30:21:ae:e7:2a:08:23:
9e:1d:84:cd:04:63:b5:8e:13:08:fc:d2:a7:87:9d:
cf:d6:5a:6d:e6:d6:b1:b8:88:76:4a:b3:ef:92:22:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:C8:D4:15:F5:EB:77:28:DA:4D:F3:E2:17:D5:7C:9D:FF:63:86
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d3:c8:53:13:8c:d0:e4:ca:06:b9:3d:1a:37:22:0d:43:32:
e1:22:96:5d:b5:ff:30:48:75:1d:58:57:9c:78:70:46:62:70:
fb:ca:c9:e9:51:95:0d:c8:ea:78:2d:4d:4a:ad:72:f9:0e:e9:
31:7c:77:64:e1:d6:57:26:ff:5e:4f:b2:70:91:3a:50:81:33:
75:f6:89:af:68:54:15:e3:08:ca:3a:b6:73:3a:d5:66:2b:d9:
ef:49:a9:40:50:dd:f8:6e:fb:db:c0:9d:f9:bf:9b:c8:09:eb:
e5:50:25:2c:7a:0b:70:db:31:ad:c5:56:b1:0a:8c:a9:c3:64:
eb:f9:e4:5c:50:89:c3:c4:a6:85:f2:5b:93:b4:be:be:e9:1b:
ef:be:b1:f0:f8:23:5d:76:f7:55:21:a9:7e:c7:82:83:a6:7d:
3a:77:02:e9:0d:f8:48:18:77:44:44:cd:eb:81:ad:a9:7f:b6:
44:c2:a8:ab:5d:14:69:4f:5a:d5:ca:8e:24:76:ae:42:33:4b:
0c:ad:e4:00:c3:55:f7:5e:b8:a5:36:16:18:76:bf:22:ca:95:
08:03:bd:ca:be:b8:60:16:eb:34:f1:eb:fd:0c:d7:14:48:35:
f4:7e:a6:58:1b:ec:5a:1b:0b:e8:0c:b8:97:9d:38:12:c6:b1:
8a:b1:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:45 2025 by rpki-client