Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: i+x90AnuWsLNlU/FRrWJKyJHwPodSdlh5AMjbJwOy1w=
Subject key identifier: DF:B5:52:F1:4F:61:E9:0E:CD:6B:C0:90:A0:FD:5D:EA:E6:FF:99:A9
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0198857A8296675C7A50F1C18DE59F63C590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0D08
Signing time: Thu 07 Aug 2025 17:00:55 +0000
Manifest this update: Thu 07 Aug 2025 17:00:55 +0000
Manifest next update: Fri 08 Aug 2025 17:00:55 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: 9i0wfnYeHi0jI6mTaoSeU/AD5rkUplxE567xyBnUPbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:82:96:67:5c:7a:50:f1:c1:8d:e5:9f:63:c5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Aug 7 17:00:55 2025 GMT
Not After : Aug 8 17:00:55 2025 GMT
Subject: CN=dfb552f14f61e90ecd6bc090a0fd5deae6ff99a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:ae:1c:b0:74:13:6b:43:8a:93:15:66:04:
ba:98:b5:2b:74:48:d2:fc:a8:84:36:8f:33:23:6e:
41:8e:4f:d1:3b:6b:ad:16:6b:94:31:ab:ec:88:74:
41:fe:12:d3:ec:da:ef:23:10:0f:b4:db:97:12:30:
ee:90:1b:7c:fd:0f:14:29:50:bf:5a:16:7f:24:1a:
ce:3d:e7:58:10:f6:1d:8f:8f:76:50:ed:3d:51:93:
26:11:33:e6:ad:ca:4e:13:f4:3a:f5:f1:4c:3f:78:
8a:75:19:f5:2d:a3:47:66:a6:14:c7:14:b5:24:7a:
c8:e1:35:5f:be:0a:ed:1f:6d:26:d5:39:b0:dd:b0:
b1:8b:2d:00:83:7c:d7:fc:e2:2a:10:38:a1:1b:30:
e8:32:f1:b3:32:2e:0b:4e:9d:2d:ae:fc:c1:33:6d:
67:00:30:82:cf:d5:c8:c8:04:8c:f7:91:91:2c:8a:
ee:9f:45:85:18:be:ea:5d:d5:50:02:77:cb:2b:7f:
4c:05:3d:b8:ca:cc:ff:7c:fe:88:52:fa:64:40:ea:
1f:e8:fc:11:8b:a4:b0:9a:a7:bd:92:4a:e7:cf:17:
a6:b7:8b:63:ee:8a:a3:3f:10:a2:35:94:78:65:01:
b7:3d:f0:a2:18:4c:bc:4a:f4:a1:93:36:04:d8:cb:
58:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B5:52:F1:4F:61:E9:0E:CD:6B:C0:90:A0:FD:5D:EA:E6:FF:99:A9
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2c:2d:52:12:c2:55:ff:f3:de:03:d0:6b:4a:f0:be:0c:1d:
a8:25:23:a0:9f:f0:ed:0c:bf:f5:c1:6f:26:da:b6:e9:4d:e7:
6b:93:88:05:e5:fc:58:97:c2:07:70:d0:aa:4a:aa:20:7b:00:
a5:77:34:52:07:2f:de:74:a0:a1:00:84:66:e2:81:47:65:8b:
b9:4d:36:a3:4c:2e:8d:e5:21:89:8a:9e:aa:05:87:0e:c6:af:
98:07:06:45:9f:93:1c:e8:24:27:04:aa:b7:c8:46:0d:79:f4:
fc:d3:a9:90:fc:09:39:0e:28:86:a4:4e:0a:fd:fa:e0:2d:4a:
e7:17:e7:2c:fb:6b:8f:ed:93:b9:25:ee:36:61:1e:1d:4f:13:
2a:ad:46:f0:25:8a:65:94:31:a2:4d:6b:f3:b0:be:7e:7a:cb:
06:28:fa:ad:5a:62:c6:81:0c:e1:e1:d8:2b:af:73:b8:89:18:
d1:24:d1:e3:dc:ac:5d:52:a7:4b:99:63:d9:d5:7d:f1:83:11:
3e:5f:a8:7a:4c:f5:3c:46:65:12:dd:d1:07:dd:01:d1:1d:42:
61:1b:a0:df:ca:9b:44:70:a6:ed:44:27:a6:3a:60:8c:08:7f:
6e:06:cb:7d:62:ce:a2:fa:6d:8b:f4:d7:ed:4c:8e:75:df:85:
08:e6:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:01:42 2025 by rpki-client