Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: P1KzSTnrrMuknUEP55EDcitnAC/ZrCux0/roAxCBkW8=
Subject key identifier: 8F:A9:D3:92:8D:93:3D:8F:5F:05:6C:57:C8:33:22:2B:B6:8C:46:7C
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 019890DB2C4CEEE1002CB803B59900CFE929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 0F37
Signing time: Sat 09 Aug 2025 22:02:19 +0000
Manifest this update: Sat 09 Aug 2025 22:02:19 +0000
Manifest next update: Sun 10 Aug 2025 22:02:19 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: Ghl0piTwd6/+U2MtGJ+Lpa9U9gdnQO6Vm2vbA2otZ4A=)
2: okKN99_kSuFiK1nEiQxwIj0skkI.roa (hash: BJdgdwQcgeiOTDLWh5HfcEvgJyNYUlctToI5pjHaF+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:2c:4c:ee:e1:00:2c:b8:03:b5:99:00:cf:e9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Aug 9 22:02:19 2025 GMT
Not After : Aug 10 22:02:19 2025 GMT
Subject: CN=8fa9d3928d933d8f5f056c57c833222bb68c467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:d6:33:a9:c3:4d:a0:37:15:13:5e:89:4e:
af:a9:cf:37:e0:5f:8d:41:12:60:8e:75:3b:5a:b7:
75:17:88:24:94:b7:fe:5d:35:41:e3:b5:5f:20:a6:
ab:2b:97:bb:01:15:a2:4e:b2:94:76:2a:12:78:01:
04:f8:6c:c9:20:bf:e1:08:fe:fe:0c:8c:d3:d2:0d:
70:8d:27:06:3f:8e:7a:cd:6b:76:28:ef:40:0c:89:
d4:fb:78:53:d2:61:30:bd:1d:07:fd:40:92:a5:99:
3b:8d:55:9b:21:57:6e:c5:1f:f7:14:5f:1b:50:35:
07:83:d3:b8:5f:b8:cc:fd:5c:9e:9f:c7:a6:0d:c3:
9e:dc:4f:25:90:76:b1:91:4d:d3:f3:63:24:c7:a6:
4d:be:0e:c0:65:f1:aa:2b:f9:9f:7d:eb:e8:45:d8:
8d:cd:28:85:5e:90:c8:80:36:bf:5f:fe:86:a9:58:
32:d1:26:ab:dc:84:db:10:15:52:e2:b2:b2:e5:9d:
c9:d3:c0:48:cc:92:f0:e1:c1:7c:af:05:14:77:cf:
14:e5:c5:09:30:fa:2f:15:51:c2:20:1e:3a:38:53:
b0:de:fc:b8:ef:96:16:4a:0f:7b:7a:f8:d7:40:50:
a1:6d:41:03:78:2f:4b:c7:40:3e:92:b0:04:3f:1b:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A9:D3:92:8D:93:3D:8F:5F:05:6C:57:C8:33:22:2B:B6:8C:46:7C
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c2:1d:6a:8b:34:2a:54:e3:52:59:df:cc:63:77:19:f4:c6:
20:7a:d7:70:03:11:ab:5d:96:36:bf:77:c4:0a:75:89:3c:7a:
a4:ed:2b:3c:51:8f:87:43:d9:ad:fb:c1:9b:60:c0:50:ed:8f:
8b:4e:57:03:1b:db:90:37:66:0d:a2:07:f1:c6:b2:cb:56:1c:
c4:fa:3a:3c:d2:29:fb:c0:a7:2c:42:d3:9e:83:25:96:e7:83:
ae:be:2d:33:2b:18:c6:a2:a3:8c:0c:a9:62:c2:21:ad:80:b6:
e0:aa:d4:76:83:e1:c9:ac:20:d0:49:5c:81:22:3d:b3:b4:2f:
a7:d8:5c:ab:cb:53:c0:a7:ae:b5:6b:ad:c1:fc:69:63:5b:62:
98:e1:6b:71:d9:e5:3e:57:3f:57:20:da:28:73:55:c3:c3:5b:
96:10:18:5a:f8:1f:3f:78:49:0e:ac:7a:a6:43:bc:32:56:f2:
27:a8:54:9d:c9:94:76:1d:fa:53:3b:b0:c7:2c:e9:c8:00:9c:
12:82:a1:57:ab:2c:57:7f:41:54:a9:c8:bb:8a:96:eb:0a:82:
e6:a0:4a:27:77:a8:6f:0f:f7:09:8d:9a:0c:ac:d3:a1:17:a3:
12:ba:df:fb:43:d2:48:12:4d:a3:50:ff:9a:3b:2f:ce:09:7c:
56:1d:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:00:49 2025 by rpki-client