Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: t4viNh2g+t0NSAcFNnZxiHX/o2mq9LEA52hCe4f71RE=
Subject key identifier: 83:EC:F5:3C:7B:0C:35:74:AF:A3:E7:B8:24:86:2D:77:EC:FE:CA:B1
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 01987CE555F3A3574EE7594E649A37E4C76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 01:01:01 +0000
Manifest this update: Wed 06 Aug 2025 01:01:01 +0000
Manifest next update: Thu 07 Aug 2025 01:01:01 +0000
Files and hashes: 1: apVhYj18Bs_r1Q931zVqcqi5yvI.roa (hash: /gXE2P6qUcVxgRclWTrINQ6lVlcjG0089HciFUVuRsI=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: 66+VMWlkF48h++LTwLwpwC355omXrnELDSH/ZaKtRTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:55:f3:a3:57:4e:e7:59:4e:64:9a:37:e4:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Aug 6 01:01:01 2025 GMT
Not After : Aug 7 01:01:01 2025 GMT
Subject: CN=83ecf53c7b0c3574afa3e7b824862d77ecfecab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:58:64:14:a3:4d:40:28:ee:1c:1a:e4:e1:
38:3f:3e:91:28:f7:25:03:e6:7f:d8:a6:5c:be:1c:
45:b3:0b:57:40:d0:7a:68:43:4b:bd:b3:bc:19:b0:
27:9d:4f:78:47:52:a0:03:54:fe:de:21:3d:ee:87:
2c:58:85:c5:a5:69:2c:34:02:6d:c8:85:21:8e:2e:
34:34:c5:6a:82:77:68:ac:a5:e4:e0:92:90:1f:78:
55:95:f1:ca:18:4e:b9:9c:7f:8c:f2:61:e9:9d:32:
b5:84:78:80:9c:5e:4b:61:9c:03:20:94:85:f0:3b:
07:41:c9:0b:7f:80:2c:59:ed:ad:0b:19:0f:d1:32:
1a:98:73:75:2c:07:c2:d5:01:f4:e7:04:be:04:17:
c2:6c:60:b5:36:81:fc:d2:99:d1:63:76:e8:db:1a:
f5:4b:f0:20:d1:af:cb:8e:e2:c4:c9:30:9f:b2:27:
89:ef:da:12:c7:69:8d:0b:a1:57:ec:93:c4:1f:af:
64:dc:e6:fa:76:c9:33:78:62:22:c7:32:b6:ad:9e:
50:0f:88:8f:28:9a:b0:bc:cf:c6:7c:2a:89:7a:99:
02:17:12:8e:c0:62:34:76:67:01:ce:6d:a6:b8:c0:
6e:20:a6:95:c0:59:ce:75:0e:97:67:78:f4:c7:af:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EC:F5:3C:7B:0C:35:74:AF:A3:E7:B8:24:86:2D:77:EC:FE:CA:B1
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bc:24:d9:04:81:df:5b:cd:8b:7a:ff:57:9e:a3:b3:8a:99:
f3:3a:24:03:37:1b:fa:95:e2:33:93:db:fd:00:30:d2:0c:bd:
35:75:15:0d:49:3a:ef:fa:3a:13:4a:23:b3:70:13:41:d5:81:
eb:f9:0e:34:fe:7d:58:d9:d4:07:97:6e:e4:b9:f5:a3:c2:69:
d6:ad:29:09:ee:08:eb:5b:47:db:f8:02:41:32:57:ea:df:f7:
c6:8b:d6:29:6a:50:3f:b2:29:16:83:77:6b:f0:22:f8:3e:7c:
ca:0e:59:cd:a1:21:a8:4e:71:98:3f:e7:47:58:66:93:33:1d:
4c:ef:e9:46:52:67:12:37:d4:8f:03:ae:ab:2b:a5:db:53:fd:
04:0c:8b:03:3c:3e:c4:67:0c:60:a2:0a:56:a6:40:fc:f6:89:
bd:f9:e8:d3:10:1f:d1:47:db:09:c8:fa:1b:27:64:8e:c8:bd:
6a:69:c2:b8:3e:ed:da:bf:e1:ad:94:e0:b1:42:3e:37:40:1e:
f6:de:fd:3e:9e:57:35:17:25:ba:a0:0b:c5:05:11:96:1d:35:
bb:25:79:52:43:89:0c:91:ab:14:4b:5e:94:26:e8:3d:a1:10:
94:af:84:da:bf:e1:f0:3e:5b:68:45:dc:0d:37:48:87:59:4d:
8f:d0:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:35 2025 by rpki-client