Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: /VxogfXfhWpyfOZUgoK2Vp/VytTyjVwS/zwvYdcePkE=
Subject key identifier: B6:0E:3E:B3:64:D6:86:50:7B:1F:E5:58:A1:35:C9:4E:7F:64:47:A4
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 01987D1C33620C1E826545C525FABC1E1EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: D1
Signing time: Wed 06 Aug 2025 02:00:56 +0000
Manifest this update: Wed 06 Aug 2025 02:00:56 +0000
Manifest next update: Thu 07 Aug 2025 02:00:56 +0000
Files and hashes: 1: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: ttkdsDPCgTFYmcksTFT/zekoT+hH0jUk5H91bTOJib4=)
2: y_jzZWxrMh2AT3qjdH5sDFcbnso.roa (hash: UBOvdV+QBpMo/gPKyJWNtGffNnN28PAA/OvI521Vudc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:33:62:0c:1e:82:65:45:c5:25:fa:bc:1e:1e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Aug 6 02:00:56 2025 GMT
Not After : Aug 7 02:00:56 2025 GMT
Subject: CN=b60e3eb364d686507b1fe558a135c94e7f6447a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:ed:f5:e5:f5:ab:68:47:d6:fb:02:5d:f5:
19:5e:54:44:d0:a0:63:79:77:c9:71:7c:44:b6:a3:
cc:4f:67:74:92:5f:88:d7:3c:7d:1d:19:c4:4b:fb:
a1:35:9f:e5:a8:de:90:91:96:ad:fe:9c:d9:90:38:
15:79:84:4c:4d:05:93:81:c1:e9:95:a9:bb:f8:bc:
fd:de:d5:73:ec:ac:e0:a7:27:22:d1:0d:97:23:2b:
b5:e9:f2:1b:c5:ab:9f:22:9b:75:69:c2:e0:88:72:
fd:12:08:f7:a3:5f:f2:18:8b:f2:64:00:b0:c2:00:
a6:c1:8d:c2:08:b7:97:3a:07:33:09:61:61:62:4a:
a5:6a:f8:0c:72:6a:a0:48:6f:1d:cc:b4:c4:b3:6b:
2e:3b:8e:7e:09:b1:1b:33:8b:27:6a:86:d6:5c:32:
74:00:36:ef:f3:2a:6b:cd:57:b8:61:96:89:ba:b8:
e8:df:72:86:d7:bb:d0:41:86:69:25:3a:ae:e0:ec:
e4:99:40:f3:02:5b:cb:19:40:fd:eb:67:49:de:33:
ed:4c:11:49:a6:e6:68:42:50:73:33:94:ea:81:38:
bc:42:fd:d0:97:3c:61:6c:61:25:35:0a:a6:57:dd:
0d:3b:e5:4c:3e:79:59:64:d3:77:a6:bb:b9:4e:88:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:3E:B3:64:D6:86:50:7B:1F:E5:58:A1:35:C9:4E:7F:64:47:A4
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c6:e1:84:86:19:32:78:f0:a3:94:82:18:ad:d5:c8:41:2e:
30:fb:36:68:cb:cc:42:86:4c:aa:e1:09:70:21:08:05:1c:1b:
07:b5:d8:d2:ea:b9:d9:45:b4:5d:98:b8:03:a2:62:74:d0:65:
40:58:f3:7c:e8:41:06:47:a7:09:1b:a7:12:fa:78:21:19:5d:
38:3d:75:fa:00:39:ac:c4:c1:b5:67:72:c5:ac:0d:9e:58:e0:
0f:ed:8f:6a:93:a4:b7:d9:bb:52:62:94:0d:11:69:76:84:05:
5d:d0:43:2c:79:97:8f:f9:2f:ea:d4:d5:6d:7c:15:b4:d4:81:
95:85:56:68:4a:d0:c5:56:01:56:94:df:53:81:3a:06:52:ef:
f1:b9:2f:74:fe:a1:eb:05:10:2f:3a:04:6c:3a:01:12:4b:87:
3b:65:3f:82:1f:d7:3d:5b:4e:7e:bd:62:1a:ee:ec:e6:3c:44:
02:6f:47:a9:e5:2f:e9:5c:53:af:3c:da:fb:e1:ac:ac:54:f6:
9f:ba:19:3f:b4:31:f4:cd:5e:cd:ee:16:0a:3c:99:f5:69:62:
18:e1:39:e1:a5:ca:d3:94:98:fc:2d:7e:ff:e6:cb:cc:ef:fa:
10:45:63:58:20:33:e5:17:0a:5e:cb:af:10:ca:fd:7e:06:ce:
70:d6:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:31 2025 by rpki-client