Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: TtV3JZ5Df3CcRYaUkZ+V8vX0bXZ/aVLZSVXfZkln6Ug=
Subject key identifier: 40:9D:8E:BA:E3:62:7C:1E:6E:F3:D2:F3:8E:CB:25:3B:32:AF:25:F7
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 019881D4AA7175E884C528573347CE9DCD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0D3F
Signing time: Thu 07 Aug 2025 00:00:54 +0000
Manifest this update: Thu 07 Aug 2025 00:00:54 +0000
Manifest next update: Fri 08 Aug 2025 00:00:54 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: AlesEzmL66egzE5fpFtIXak2huRdCtPRxsvzFqol/4g=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:aa:71:75:e8:84:c5:28:57:33:47:ce:9d:cd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Aug 7 00:00:54 2025 GMT
Not After : Aug 8 00:00:54 2025 GMT
Subject: CN=409d8ebae3627c1e6ef3d2f38ecb253b32af25f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:7b:26:40:70:f5:c7:4f:93:67:03:ea:5e:
2e:e2:53:ad:56:4f:c0:d1:bb:c7:eb:de:7c:06:fe:
a0:0c:e0:1a:bb:a8:ef:ab:e5:ba:23:4e:23:79:e6:
e8:47:de:d1:13:a6:f5:39:b3:00:25:75:b0:3a:c6:
2e:cf:a3:19:5f:70:7b:79:85:3b:67:b2:cc:36:f6:
4d:37:14:4a:f8:a1:42:cd:5c:de:81:62:f7:86:e4:
e6:28:29:61:80:f8:d3:5b:69:79:75:0e:59:e5:6a:
72:5e:89:50:87:15:4f:1e:18:0b:80:7e:d7:91:63:
74:3c:c9:2b:94:b2:3e:d6:f8:ae:86:6b:01:86:25:
b6:8e:96:29:a9:20:fa:51:dc:03:57:e8:4c:be:4e:
a0:85:d6:77:15:2f:38:0b:27:3f:88:38:50:77:11:
dd:1c:a3:46:ab:ad:6a:27:bd:5a:0f:cb:99:4a:7e:
e2:d7:78:08:27:05:60:8b:af:dc:a3:a1:0a:41:0a:
9c:8e:d4:4f:a6:de:30:23:d9:66:9a:11:5b:d5:04:
ed:81:97:d8:f9:de:f8:85:e1:59:eb:b5:96:68:97:
26:ac:a0:11:0e:34:23:86:d0:a6:75:92:a4:1f:5f:
85:db:a8:b9:15:4d:ff:f9:b1:d6:ae:66:7c:60:84:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9D:8E:BA:E3:62:7C:1E:6E:F3:D2:F3:8E:CB:25:3B:32:AF:25:F7
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a5:b0:01:19:c9:ea:cb:b3:02:9a:9f:5d:62:58:f4:11:1a:
56:33:7c:89:7e:68:18:3c:74:e0:c7:73:6c:7f:f8:41:5a:11:
4f:4c:37:e8:7f:e5:7b:c2:ee:ed:ac:8e:31:5f:ad:cb:b9:82:
53:e4:ab:7a:40:81:15:cd:1c:03:f6:d0:e3:92:7d:89:9e:68:
0f:51:5b:63:20:fe:e1:26:1b:22:e1:aa:c1:31:69:98:30:7c:
8d:db:d7:db:fa:72:55:da:a1:f2:08:33:5e:86:0d:92:12:94:
5b:66:68:e6:90:f4:ac:39:6a:c1:08:49:78:0c:d9:84:3d:b7:
c2:cf:99:bb:92:56:9b:1e:13:81:1f:45:e7:24:ad:f7:ee:3e:
6e:ce:43:15:b1:1e:55:59:e0:e1:ea:e7:ca:5d:8f:e9:20:c9:
bc:01:d3:63:dc:9b:fd:96:fa:e4:b3:a1:3b:ff:cc:85:cf:cd:
50:a1:f5:82:28:87:aa:34:2b:15:4f:e4:a8:57:da:31:2b:cd:
c7:3f:63:af:75:a6:ed:9a:2c:d7:36:cb:8c:cd:86:0b:a7:67:
d2:60:d5:15:31:87:8d:bc:97:b5:75:c0:2a:57:f6:38:ec:46:
e5:c3:57:8e:f7:26:a1:66:40:30:52:ed:44:05:0e:a7:7f:ce:
84:ee:f1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:16 2025 by rpki-client