Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier: xf38mBKWZnkE6i+qvCWRK0u1LAfH+rXflTWsjykqGg4=
Subject key identifier: CE:84:B3:D8:39:C6:EF:3F:46:D6:0B:62:CE:90:CD:C2:F1:DB:69:AE
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial: 01988544F12054A61CC6F648F350C6C27C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number: 05D8
Signing time: Thu 07 Aug 2025 16:02:24 +0000
Manifest this update: Thu 07 Aug 2025 16:02:24 +0000
Manifest next update: Fri 08 Aug 2025 16:02:24 +0000
Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: t0rWGXWWKglEmrtZh8Ar/Jj/MNtZ5Vyl0OZib8Af1Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:f1:20:54:a6:1c:c6:f6:48:f3:50:c6:c2:7c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Validity
Not Before: Aug 7 16:02:24 2025 GMT
Not After : Aug 8 16:02:24 2025 GMT
Subject: CN=ce84b3d839c6ef3f46d60b62ce90cdc2f1db69ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:fd:b7:10:95:1a:62:62:d1:72:46:98:a1:
9d:91:f1:5f:c3:b4:3e:e8:a0:3b:8d:d6:7a:3e:fb:
cd:8f:b0:db:94:5a:33:20:f0:e0:18:f4:c2:82:43:
ca:c2:30:fe:14:ec:ac:58:b7:65:be:be:fe:be:54:
fd:ec:8e:d6:1d:89:46:f7:f8:20:4b:f1:2a:64:5e:
64:f2:0a:59:d1:e6:71:00:32:d9:da:3b:45:96:0d:
ab:e5:b3:b7:38:b3:91:a5:77:31:42:27:10:ff:98:
14:1a:3f:61:93:3b:db:e2:42:bb:5b:5b:80:de:46:
70:19:5b:fe:05:0f:5e:f5:ec:9b:41:a5:3f:71:52:
e4:52:a5:af:4b:93:18:92:68:f5:59:3e:5e:e3:64:
64:49:8d:5f:95:06:59:dc:3f:34:b8:3e:46:1c:ac:
5c:d3:d3:c3:0f:1f:e9:56:da:28:64:b8:88:80:b3:
f4:be:0f:bd:49:db:f6:32:24:fd:ca:ab:65:68:d4:
d4:38:cf:f7:4e:37:a3:9d:96:86:04:4e:85:35:5a:
78:31:9c:85:6f:b3:68:fc:06:f5:f2:20:40:8a:e4:
78:fc:84:cc:3f:d6:7a:48:c5:8c:9c:b8:2f:66:11:
d4:96:f4:a5:2c:ab:36:e9:be:05:10:73:47:28:b1:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:B3:D8:39:C6:EF:3F:46:D6:0B:62:CE:90:CD:C2:F1:DB:69:AE
X509v3 Authority Key Identifier:
keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c7:e2:7b:c4:aa:51:86:10:87:4e:b6:7a:70:2d:5d:8d:3f:
61:d4:d7:a2:9f:67:7f:c6:22:4b:58:14:bf:bb:f8:ee:ae:2f:
1c:89:c7:c8:05:da:fe:d5:a2:b2:41:c5:9c:c0:10:8e:90:cd:
8a:99:05:41:0c:05:27:51:71:b6:7b:55:99:83:51:2d:3e:92:
23:ee:55:5f:0a:7e:96:e9:3d:34:77:83:63:f3:9e:3c:54:59:
24:d3:41:83:05:c2:8a:4b:25:5f:95:63:3b:c2:0c:46:fc:d9:
60:a1:25:40:08:34:19:75:fd:29:94:4a:be:fd:01:29:49:03:
e9:60:ef:45:ca:8c:fd:1d:43:c1:1c:21:95:04:02:fa:5b:bd:
fe:d6:0c:36:4d:90:38:c2:89:57:2c:e2:fb:af:03:4c:91:30:
ec:d6:f2:a1:36:c7:5e:6a:c0:63:a4:33:33:d9:41:0a:e6:02:
81:86:16:75:a4:43:5f:66:09:50:be:9d:9d:a3:56:8f:1d:c7:
93:63:ce:5d:cf:5a:ba:a2:e7:3f:e7:c1:4e:97:c1:10:30:90:
19:6a:f4:d5:46:2c:3f:63:fa:71:f1:18:c9:30:9d:52:7b:ad:
0d:19:e2:6e:67:21:d3:bf:2e:f0:6b:68:d5:74:1b:d3:81:8e:
48:1a:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:22 2025 by rpki-client