Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: NkvBRZXov6cx5FpMm53tdELUoPDq1D9zeoL8HNbz4+8=
Subject key identifier: 87:2A:D2:9D:BE:9C:2D:1D:44:BF:79:92:92:90:DA:0F:53:55:43:E4
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 0198733DA78D0343794C3B1F0AFAAF27EFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 04:01:17 +0000
Manifest this update: Mon 04 Aug 2025 04:01:17 +0000
Manifest next update: Tue 05 Aug 2025 04:01:17 +0000
Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: M2P20GH1fL5SqED5FGlZQ2usuXvJ5cn5mEi2PQhg0QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:a7:8d:03:43:79:4c:3b:1f:0a:fa:af:27:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Aug 4 04:01:17 2025 GMT
Not After : Aug 5 04:01:17 2025 GMT
Subject: CN=872ad29dbe9c2d1d44bf79929290da0f535543e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:dd:38:9e:16:15:87:91:e5:85:bd:cf:5f:
43:93:96:8f:ab:9b:68:66:0d:59:84:e3:57:7c:ba:
07:f8:04:44:9b:1c:c4:33:1a:68:36:d7:11:b5:2a:
48:43:9b:39:2d:a9:70:c1:e4:0c:7f:24:be:4a:be:
92:d5:34:08:f4:26:04:3b:59:60:06:60:09:bc:9c:
73:ee:4a:fd:2a:23:a1:d4:b7:99:55:06:87:c0:5b:
ac:1d:d8:4e:62:ee:43:47:af:ae:76:6c:35:29:e9:
c9:63:6c:bf:48:5d:de:86:90:cf:01:1f:38:9d:65:
25:90:1a:b1:a2:f2:67:68:89:78:0b:ef:f9:b8:73:
1b:23:3c:bc:d7:37:cf:f6:22:d0:66:e1:8a:56:90:
e2:55:28:65:00:af:e2:94:3f:b4:ce:ee:2a:de:44:
51:c1:58:91:12:4a:ae:9d:47:3f:2b:98:df:c3:d9:
33:60:a9:53:1c:70:5e:aa:70:8b:c0:3f:57:f2:a1:
28:ca:71:0c:4f:55:a7:c7:d2:00:fa:f0:da:f7:d6:
87:d3:c9:bf:46:49:3c:a6:b9:40:83:da:cd:fa:12:
7b:81:81:0f:88:ab:e5:90:b9:05:6f:be:3a:73:6d:
28:39:62:7b:96:94:11:d6:67:26:f0:1b:c7:e5:18:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2A:D2:9D:BE:9C:2D:1D:44:BF:79:92:92:90:DA:0F:53:55:43:E4
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:03:b5:10:a7:c7:29:4a:3d:c3:91:50:3c:51:21:5b:21:63:
8a:da:26:1d:e7:8d:dd:71:73:72:c0:83:4b:6c:c6:a1:b9:85:
4a:36:2b:ae:46:14:07:16:9c:64:95:55:cc:10:4d:e7:68:16:
a2:7c:be:05:bc:99:3f:5d:c2:a4:0c:fd:8e:5a:34:39:6e:f7:
20:84:bc:c7:ed:15:e1:0e:7d:f3:91:38:82:d2:f3:42:f7:7f:
69:35:ac:73:79:d8:83:ea:15:2e:aa:1d:08:5c:a2:c2:01:b0:
a3:55:8a:2c:ae:93:2d:45:2a:7e:49:72:7f:29:25:7c:f0:f5:
0b:37:47:a7:73:c9:bb:8c:44:1c:96:76:b4:1a:59:b6:40:c2:
6e:0a:f4:d5:c0:f2:08:60:5a:1c:48:8a:5b:26:82:33:45:9b:
41:21:9a:f6:38:4a:a4:f5:16:f0:2f:5c:26:48:41:62:f8:54:
e3:e9:2f:e5:3f:c0:32:e0:95:4b:fd:40:a1:4a:2f:d0:77:85:
c8:f5:11:42:f2:f8:4c:e6:ad:98:42:1c:05:bb:d0:4d:9f:eb:
28:bb:c3:aa:6b:3e:0e:1c:c3:29:9c:57:5a:ab:66:16:cc:81:
7e:f4:81:62:86:f1:ff:c1:e1:24:e4:54:f9:e6:66:61:a6:3f:
52:8c:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:31 2025 by rpki-client