Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier: oF9UYxAIC4o9ktroOY386GPCixVD6RyKgG5nSMGhO4E=
Subject key identifier: A6:63:B8:79:D2:1F:F4:98:84:7F:39:E4:00:AA:11:A0:CF:5D:33:7D
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 019874F51540C9ED7D36251CAD9A692BA4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number: 135A
Signing time: Mon 04 Aug 2025 12:01:15 +0000
Manifest this update: Mon 04 Aug 2025 12:01:15 +0000
Manifest next update: Tue 05 Aug 2025 12:01:15 +0000
Files and hashes: 1: C_tBNxeBdMQFQvAqAIQOAGk3NV0.roa (hash: ytHvNr9cmIrq9gpmtc0zxz6E+7ODTCXhvZEm/AZ4ML0=)
2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: u3FrwrRMksTzc6J7hMBZYY9v+sTgYQV5eXP3Kis3fZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:15:40:c9:ed:7d:36:25:1c:ad:9a:69:2b:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Aug 4 12:01:15 2025 GMT
Not After : Aug 5 12:01:15 2025 GMT
Subject: CN=a663b879d21ff498847f39e400aa11a0cf5d337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:dd:33:17:38:ff:f7:1e:bd:41:ad:6c:2b:
73:ce:5e:93:8e:86:9d:75:f7:0a:3b:85:63:88:04:
c2:49:77:34:5c:8f:d0:82:ef:81:ce:7b:56:ca:66:
77:b3:f7:d4:10:a8:79:33:4e:ff:43:24:53:0d:c9:
1d:71:b5:10:ce:a2:21:51:f9:3e:95:f0:3f:7b:7e:
ce:4c:20:6f:27:23:b3:45:3e:1e:d4:4f:50:a5:bc:
86:8a:bb:6c:d2:e3:7f:08:e7:7b:b5:54:c9:40:a5:
74:6e:05:d4:96:fa:2f:2f:a7:e5:26:c9:ce:6f:41:
e0:07:1e:0a:90:e8:6a:c9:8d:df:dd:9c:a8:5c:02:
49:ce:a9:08:db:2d:38:ef:ce:f4:51:50:65:15:89:
34:5f:c8:f3:b8:0e:6b:dd:bd:ae:3e:8a:79:31:61:
9a:22:bb:90:72:de:7c:86:47:12:ab:10:fc:89:04:
ef:c4:87:b1:3e:bc:ca:2d:9a:28:69:0d:0e:f1:fa:
8b:d4:c9:50:2d:cc:b3:42:9b:4e:51:97:cc:75:ff:
8d:eb:75:5a:1a:79:af:2b:29:05:7f:7f:ec:79:0f:
64:f0:22:49:db:af:8d:ee:08:bb:2b:72:cb:c2:02:
9c:e1:c6:28:55:51:c8:78:dc:17:1c:f9:38:39:23:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:B8:79:D2:1F:F4:98:84:7F:39:E4:00:AA:11:A0:CF:5D:33:7D
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cb:b4:21:7f:c6:20:15:74:57:ed:e3:e2:c3:ef:89:bb:9b:
79:b4:e1:8a:3e:22:67:d3:c1:c8:49:dd:7c:b9:1b:f3:a2:cb:
4c:24:1b:5e:07:06:11:41:52:21:27:1c:86:26:2d:cb:a6:c7:
83:7f:62:52:d4:3b:40:72:7f:a7:d4:01:82:5d:be:90:ca:5b:
47:40:c0:35:22:b0:12:a1:19:a0:4a:53:5f:4e:16:4c:ee:68:
91:34:a4:16:db:88:dc:26:0e:63:68:30:65:5b:a1:48:ea:d0:
ec:cf:5a:4c:46:9c:58:e8:95:5e:a8:98:80:b4:3a:a5:8a:4c:
ad:f3:1d:a7:6c:fe:c6:66:ca:be:06:ad:ad:d8:7e:af:dc:83:
18:81:aa:34:ea:23:fb:a0:fa:8a:7e:a5:e4:2c:ba:01:12:8f:
ac:8a:39:39:15:84:ab:63:6f:a3:58:90:01:08:b1:62:a5:44:
c4:bf:65:ec:d4:ff:51:c9:b5:5b:a5:20:a0:c1:ef:8c:49:dd:
5c:49:0f:d3:38:ee:44:db:2b:cd:43:8c:e8:10:79:05:b8:35:
b6:d0:c4:8b:08:a7:2d:34:4d:8a:c7:7c:2c:ab:8a:32:a5:0a:
a9:5c:fd:d1:a9:47:25:c2:03:c1:f2:6a:b8:a8:4c:2b:84:53:
77:98:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:35 2025 by rpki-client