Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: xbrVj8UmZJNbd3aSJxvB4xWnL2VtGxyNSY9TVpyK8HA=
Subject key identifier: 22:D7:D6:BD:3D:53:50:F5:48:DB:18:D0:4A:48:DC:3B:F6:46:45:95
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 01987CAE3640159CA79B05DB12E83D61C319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 0E7B
Signing time: Wed 06 Aug 2025 00:00:48 +0000
Manifest this update: Wed 06 Aug 2025 00:00:48 +0000
Manifest next update: Thu 07 Aug 2025 00:00:48 +0000
Files and hashes: 1: 1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa (hash: xHdOOR5x+I+BVkrKwEv1LdA4W3/XGAhIP6d+Tp6sbDA=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: oDY3v43xaYgiQRkj2MKd4MujbwDoKwuldM/LLP0em80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:36:40:15:9c:a7:9b:05:db:12:e8:3d:61:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Aug 6 00:00:48 2025 GMT
Not After : Aug 7 00:00:48 2025 GMT
Subject: CN=22d7d6bd3d5350f548db18d04a48dc3bf6464595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:74:a0:ed:93:6e:f5:81:55:5c:13:33:48:
dc:cf:33:7b:f5:67:35:c0:1a:36:2e:20:7c:35:c1:
9d:72:76:df:2b:f3:39:65:63:ce:6f:79:1d:52:a7:
e7:c6:bd:4e:bf:a2:64:68:26:53:91:85:ec:95:45:
90:36:6c:62:8a:6f:14:be:41:1c:43:66:96:99:f3:
df:e8:66:07:6a:59:12:bf:63:2f:2b:13:d4:cb:8d:
ec:02:3d:f9:e7:de:0d:17:35:08:99:2b:74:2a:0e:
67:7c:e5:5b:75:7d:d7:ac:57:ee:b8:b6:4a:97:54:
0b:3c:d4:05:e0:2b:75:55:5e:84:b9:e6:cc:9f:ad:
1f:ac:23:39:39:5b:28:2e:c2:05:d3:a8:40:dc:24:
d2:5b:49:54:15:04:35:e8:fd:79:1d:fb:71:c6:e4:
2f:10:73:09:67:07:7f:a4:07:cb:e4:78:a8:f3:c7:
bf:9a:13:b1:e5:f5:96:27:7a:49:ea:54:fa:13:59:
7b:a2:5e:96:e7:18:ba:98:97:90:2d:30:9d:f0:89:
f5:6d:a8:38:3e:20:35:d5:3b:21:64:e8:4f:6e:92:
44:ce:46:03:57:f3:a2:ba:74:0c:33:dd:40:ea:d2:
15:8e:f6:b1:57:b7:b5:45:7c:f4:f0:20:99:75:b3:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:D6:BD:3D:53:50:F5:48:DB:18:D0:4A:48:DC:3B:F6:46:45:95
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f0:47:c5:42:3c:13:79:dc:68:b3:c2:73:25:a7:9e:d4:b3:
4f:83:74:ae:36:44:83:9e:d7:85:5d:58:52:3a:da:92:0e:c7:
7a:66:5f:a8:ab:b8:0a:16:a1:4c:93:4a:5d:38:5c:92:45:d3:
80:f8:a6:83:da:f3:e6:41:84:91:60:db:0a:53:a8:b0:8c:27:
b7:2e:7b:90:84:f3:99:86:55:65:e1:b0:a3:2a:e6:3f:c3:4f:
39:70:2d:c2:d6:28:f6:15:de:ea:ac:d9:6c:4e:0d:66:b9:c5:
4b:a9:56:8e:e5:1b:be:32:df:f5:e8:9a:61:d4:9e:58:4e:05:
ae:67:1f:e9:24:c0:ea:1e:40:02:4c:60:2d:81:82:e3:ca:f7:
74:41:61:a2:f8:c1:67:d7:d9:0d:e0:f1:1d:fe:20:94:3c:96:
da:f3:32:69:d4:8f:bb:21:61:7d:e8:38:25:61:1a:0e:be:bc:
b9:02:87:28:cf:c4:62:44:13:13:2f:b6:f8:15:a9:ba:b4:c0:
1e:4d:57:be:1a:f6:6e:a6:ed:a8:91:eb:22:38:87:de:02:6d:
3e:3e:e5:e5:e8:59:1b:a7:f2:e4:13:36:a4:3a:7a:de:7c:34:
e0:e9:3f:e0:b2:a6:48:98:c9:44:79:7b:50:31:f3:18:6c:26:
cb:9c:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:52 2025 by rpki-client