Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: 3W8p88xdeySKIUvZ8/iDfHUD61z2lGspwZtt7DStW0Y=
Subject key identifier: 63:6C:1D:15:EF:C0:8C:11:9C:0F:43:A4:FD:27:9B:72:44:49:10:0D
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 019879AECD751181BB71B1C85733D941B023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 15AC
Signing time: Tue 05 Aug 2025 10:02:35 +0000
Manifest this update: Tue 05 Aug 2025 10:02:35 +0000
Manifest next update: Wed 06 Aug 2025 10:02:35 +0000
Files and hashes: 1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: KMIbAeYwYGBBjLXIqBE5QonXBWxfSkqbnNpG9sqQrqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:cd:75:11:81:bb:71:b1:c8:57:33:d9:41:b0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Aug 5 10:02:35 2025 GMT
Not After : Aug 6 10:02:35 2025 GMT
Subject: CN=636c1d15efc08c119c0f43a4fd279b724449100d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:34:2e:fe:0b:f5:d0:e5:8c:f2:87:f4:24:
91:5b:2f:95:3c:c0:e5:9d:e4:3c:68:96:a7:18:56:
89:69:02:6a:74:08:25:f2:fd:2f:30:5c:8e:d3:8d:
d2:00:f3:9c:b8:9a:88:c7:2b:71:ac:3a:5e:ff:e7:
f5:48:a2:6e:00:dc:ab:bf:41:8f:67:9a:fa:86:12:
bd:04:8d:9b:fe:99:d8:de:ee:ea:ca:8d:b8:f9:9e:
63:58:8a:e1:0e:32:51:f1:33:20:df:a8:03:ca:89:
01:ab:8f:cb:0c:3f:c3:80:20:1a:72:43:08:c4:62:
aa:5a:d1:70:fa:0e:1a:cb:b8:8e:3f:a8:5e:95:36:
40:74:de:dc:1b:1f:41:78:61:18:61:12:5a:a9:36:
66:69:99:24:f7:9d:38:30:c2:58:9e:03:22:df:4b:
b8:55:58:9d:70:35:d7:da:e8:78:4e:51:e5:dc:73:
0a:a7:e5:50:20:53:2e:d6:98:7c:06:e3:23:48:83:
ac:98:bf:31:ea:55:24:c8:f5:99:18:d5:69:6f:e0:
8c:6b:61:28:d6:b2:37:19:bd:0b:ae:09:56:8c:1f:
5f:57:91:a3:91:ee:26:68:38:e2:44:9f:4f:ad:f7:
3a:78:bf:70:e0:70:02:4f:32:30:27:0a:4d:4e:b3:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6C:1D:15:EF:C0:8C:11:9C:0F:43:A4:FD:27:9B:72:44:49:10:0D
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7b:4c:10:a0:82:2a:d4:71:1e:29:53:b4:fa:0d:c6:b5:e7:
93:56:9f:07:76:84:8f:be:d4:e7:d8:45:82:aa:9d:b6:21:17:
46:bd:90:3d:20:45:8d:11:46:80:d9:40:47:85:60:68:b9:9c:
13:6c:b2:af:ca:60:23:2d:71:fa:cc:bc:76:af:02:37:f6:8a:
fc:c6:41:c6:3c:cf:7c:94:7f:af:8a:04:5b:01:c6:04:c3:87:
39:42:74:ff:0b:06:40:11:ed:5e:4d:b8:08:e6:03:85:13:03:
a0:39:c8:38:ba:de:37:f5:0a:30:f4:1e:7b:68:d9:4c:16:5d:
db:6b:87:35:3d:19:dc:1c:ce:ba:ce:de:e5:da:90:b7:7f:47:
95:ba:89:d6:a7:a7:e6:d5:64:ae:ec:67:05:da:9f:f4:7d:d9:
8d:05:90:45:55:e0:67:cd:8c:a4:6c:c7:c4:79:d5:8d:67:8d:
84:21:f0:97:9f:05:a3:38:fd:13:93:a6:7b:7c:41:c1:db:40:
36:1a:ac:e4:c3:fb:ef:75:6b:98:3b:e1:bd:a2:07:48:3d:ae:
bc:cd:3c:92:7a:20:8c:37:b1:a8:90:68:e5:96:6a:a4:d3:50:
d3:e7:a0:85:35:be:ce:e7:f2:40:f0:20:0d:e3:e4:bf:f4:00:
16:01:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:17 2025 by rpki-client