
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json)
Hash identifier: 3CVUaITz4jfxW+MFPkgti+9SFxXbTsDkjkx8PPj6oOw=
Subject key identifier: 36:ED:BB:96:8B:30:B7:EF:C8:7D:00:65:5C:C3:32:39:76:11:7A:09
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 019896002ADE2E1D360A4017C72FA554ACB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
Manifest number: 0394
Signing time: Sun 10 Aug 2025 22:00:49 +0000
Manifest this update: Sun 10 Aug 2025 22:00:49 +0000
Manifest next update: Mon 11 Aug 2025 22:00:49 +0000
Files and hashes: 1: fgM561fL_3Rx-_1J5CJxxdceK50.roa (hash: nwniELmnb3/CT2nQQZ1hAp6RF9PN9bCFIt9tpx0KqDk=)
2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: JNaCVOOb5o1viiJmQhmljZ48o4xAP+2a2uWlaIvXr2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:2a:de:2e:1d:36:0a:40:17:c7:2f:a5:54:ac:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Aug 10 22:00:49 2025 GMT
Not After : Aug 11 22:00:49 2025 GMT
Subject: CN=36edbb968b30b7efc87d00655cc3323976117a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:67:20:af:d4:2b:7c:ea:37:cd:56:2e:19:
eb:e5:eb:93:d1:38:d1:c2:9f:35:2e:a9:72:ca:81:
7f:38:12:fd:e9:12:ae:86:bd:9c:db:88:9f:83:4c:
74:ac:9b:b6:14:7f:c7:c9:ef:7f:65:2e:e5:a8:94:
9d:f7:f6:6f:ad:ac:94:98:06:71:fa:ba:43:ba:ca:
45:f0:4a:ee:32:fd:06:86:ff:73:e0:c1:38:e2:ca:
3e:1d:33:d7:62:e8:5d:39:19:75:b7:af:5a:df:0c:
66:75:e4:3e:a6:7f:a1:ef:02:2f:1d:09:91:f1:bd:
c6:b5:75:4a:b5:61:01:66:4c:d3:2e:ea:17:8c:a1:
da:bb:a0:67:c2:1b:4a:58:75:09:40:5e:14:47:34:
d7:38:49:b9:4e:81:c4:2d:fb:b8:09:11:f4:2f:ca:
68:0d:52:f8:45:13:80:f8:1f:28:99:e0:fb:be:39:
35:7a:e0:e2:aa:f8:09:be:0a:7c:34:22:bd:54:94:
9a:8b:7e:fa:5f:01:d8:e5:a8:40:49:37:29:05:33:
d8:10:c4:96:c2:a9:08:23:a5:a4:7a:d4:39:7d:59:
dc:7a:19:60:8f:06:ca:29:98:04:6e:f4:2d:0b:a2:
18:6f:19:32:4f:1e:c1:82:41:c8:2f:6d:6b:2d:a4:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:BB:96:8B:30:B7:EF:C8:7D:00:65:5C:C3:32:39:76:11:7A:09
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2f:63:24:1e:b8:dd:0c:ab:5e:44:07:77:25:13:37:7d:fa:
5e:b8:ec:05:45:21:f5:56:a1:21:85:ea:16:0b:21:2c:f0:c1:
18:05:13:8b:da:b2:b0:2e:e2:07:bd:a0:5b:39:5c:49:0b:f8:
37:fe:66:92:f1:f3:54:b5:8c:6e:7f:ae:01:87:a2:78:fe:c7:
2a:02:6a:1b:a9:9f:07:88:cb:ef:78:c4:21:0a:18:5d:f1:dc:
f6:28:84:06:40:21:0e:18:e0:f5:43:18:c8:a0:74:5d:8c:33:
df:10:a3:5d:fe:58:28:a2:41:17:37:1b:51:18:58:2b:b7:86:
75:e1:85:c2:1a:33:06:09:e9:39:f5:c3:90:38:e8:cf:a0:1a:
54:b0:b5:d1:2f:5f:6e:33:46:99:5b:98:e4:40:a3:85:5c:dc:
26:dc:ff:9b:12:50:3d:88:1b:2e:49:5c:98:0b:cb:9c:53:15:
00:a6:82:ca:19:63:f2:d5:34:34:2a:a8:a6:a0:92:d8:a0:b6:
04:06:e2:9f:fe:15:b1:dd:55:d1:43:bc:e0:48:89:06:28:99:
67:a8:b2:b4:42:f7:e6:ae:3f:d5:23:8b:28:bc:79:2b:f5:fa:
98:66:ba:1d:22:58:80:e3:32:1c:dd:c1:c1:27:fe:4b:df:2e:
6f:7e:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:06 2025 by rpki-client