Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: 0r8bPx5STE0WIlSF2YT1ekKoSXW12iREtyLDPx5GUpc=
Subject key identifier: 03:C0:EC:E2:75:C9:BF:C5:37:5A:7C:E1:A1:1F:9C:6A:43:DA:DB:3F
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 01989335C3E7A3BEA1789DA3125A3EB00502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 0D5D
Signing time: Sun 10 Aug 2025 09:00:30 +0000
Manifest this update: Sun 10 Aug 2025 09:00:30 +0000
Manifest next update: Mon 11 Aug 2025 09:00:30 +0000
Files and hashes: 1: c0UDF77YneOEpDbpE_XbzKIY8Uk.roa (hash: foV69gLO281sdub8JnH51RHuvFTq6y1JtigYK6aR0Ho=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: WgLzR+CkZN6PiIAdaORgxh5r0lX4juqjj4dTV6orng0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:c3:e7:a3:be:a1:78:9d:a3:12:5a:3e:b0:05:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Aug 10 09:00:30 2025 GMT
Not After : Aug 11 09:00:30 2025 GMT
Subject: CN=03c0ece275c9bfc5375a7ce1a11f9c6a43dadb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:0d:5f:e8:29:f4:7d:76:53:1e:d1:29:e4:
c7:47:37:68:93:0d:13:70:b6:4a:23:d9:53:05:31:
40:eb:ba:4d:b5:41:dd:80:0a:f4:30:01:2c:c9:2e:
bf:36:13:e2:39:ed:10:77:5a:74:0e:9a:5e:fd:1a:
25:a9:37:01:2a:ed:3e:b8:0f:df:32:ec:9f:e9:1c:
36:84:ea:7c:e9:43:b3:44:e0:4c:23:cf:b3:5e:04:
a3:54:67:e5:b2:0d:00:6e:9d:cd:c9:cb:75:d9:5c:
dc:1b:ac:58:39:1c:0f:87:44:8b:c1:8f:cd:69:6f:
2f:ba:8c:02:2a:44:1a:80:2e:e9:b0:53:4a:d0:d5:
4e:40:ec:1a:c4:29:f5:9a:a4:f1:b9:0d:26:d1:37:
f5:be:d3:29:ec:cf:95:1e:d8:3c:46:81:c9:55:69:
63:52:14:47:b0:0c:a1:cd:cf:84:58:2c:5a:29:b2:
2f:6a:b0:2a:f7:dd:ca:c4:c4:7b:9f:d7:d8:aa:94:
40:9c:0f:0f:26:e8:0a:b9:4b:e8:62:ad:c0:cc:c3:
8e:25:52:bc:bd:de:d5:0e:37:c7:4d:ad:6f:8c:47:
a5:ca:1a:49:3a:d6:4b:28:b7:49:d7:bc:04:cb:d4:
79:0f:9c:53:96:2c:6f:cd:d0:e3:ed:38:ac:a2:1e:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C0:EC:E2:75:C9:BF:C5:37:5A:7C:E1:A1:1F:9C:6A:43:DA:DB:3F
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d6:6c:9a:bc:73:51:44:f9:39:fa:d3:58:c7:59:e5:03:74:
39:7b:5e:e5:7a:1d:9e:bf:72:54:cc:4f:3c:2c:9e:d4:ed:bd:
1d:8f:0c:f6:45:c5:65:e8:e3:31:56:81:18:83:50:c4:0f:7e:
2b:43:1b:f2:69:c9:3d:fc:03:2d:f6:d7:13:36:df:8b:71:9b:
a9:d2:c0:7d:0a:ad:d9:03:02:e5:c2:b4:d8:09:51:56:b2:8e:
02:79:b2:84:57:51:cf:96:7f:e8:7d:4d:9e:bc:60:09:23:c5:
85:2e:ab:1c:56:87:3e:42:41:01:bb:bc:33:60:69:b6:f2:84:
28:0d:3a:93:74:53:48:16:04:2d:45:31:32:81:c0:ce:a3:7a:
71:a4:7c:7a:9f:e0:a6:1c:b9:24:fc:67:63:ce:c2:ad:63:35:
8a:72:ec:e2:15:7c:b5:c1:7c:aa:65:b5:da:37:4d:c5:8f:bd:
32:5d:c4:1f:79:db:a6:b2:d6:72:40:27:ea:d0:00:3c:e2:dc:
6c:af:f1:34:89:ab:d4:5c:37:23:5c:82:1b:0e:7b:f7:ff:56:
57:0c:71:92:e7:d2:60:e5:d8:43:b0:47:df:c4:7e:f2:b7:bc:
5c:42:6a:d4:b9:e1:45:35:85:c0:c3:e0:f8:c3:07:0e:48:b2:
2f:69:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:54:28 2025 by rpki-client