Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: nZ3XyjTHyCB8bacg+iHZd/ZB5xL/EDBO2xcEB9wn07A=
Subject key identifier: 55:20:C8:6A:98:74:1A:AD:C4:C6:D7:B8:B6:7D:63:1A:CC:29:54:0B
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 01989412340E99C3E3755DFCEE8259C12EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 08AF
Signing time: Sun 10 Aug 2025 13:01:17 +0000
Manifest this update: Sun 10 Aug 2025 13:01:17 +0000
Manifest next update: Mon 11 Aug 2025 13:01:17 +0000
Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: XXQBuPOEcYBkZryvNzTZfVTRon8aGn6HjeStt2A60BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:34:0e:99:c3:e3:75:5d:fc:ee:82:59:c1:2e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Aug 10 13:01:17 2025 GMT
Not After : Aug 11 13:01:17 2025 GMT
Subject: CN=5520c86a98741aadc4c6d7b8b67d631acc29540b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:c1:8b:48:0f:b7:64:f3:f4:11:69:f8:25:
fb:61:63:90:f3:50:2a:48:c5:0a:26:fa:ad:90:0c:
03:2d:45:45:c1:ba:b6:04:33:8d:93:61:a2:9f:fa:
df:3f:c2:c5:a4:3a:c8:e0:cb:a1:50:53:b5:6c:10:
2e:d6:4d:ec:6d:2e:55:db:c4:77:94:8f:d8:fa:29:
3d:40:20:1b:c6:4c:a3:9c:5c:59:bf:b1:12:02:64:
a2:9c:04:fb:d3:74:0a:33:83:3d:1a:cb:68:a1:34:
32:77:aa:09:ee:d2:26:61:b4:83:86:3f:e3:4b:39:
3b:19:d8:37:8c:31:0c:4a:cf:4c:c9:82:3a:21:6c:
fe:bb:f7:31:b8:ed:d8:9d:d8:4d:65:40:0a:d7:4c:
c4:79:bc:88:ae:b4:8c:6c:7f:ac:eb:f0:83:ef:50:
32:32:c7:70:27:5f:25:f2:06:54:84:40:50:62:61:
b1:c0:1a:82:44:c0:36:ed:42:9a:59:fd:32:27:2f:
d5:a9:f5:e6:40:96:20:37:cb:81:0f:f2:a0:62:c3:
84:31:33:81:71:81:85:33:bc:ce:aa:6a:0b:2a:97:
09:98:e7:be:e1:db:aa:f5:30:46:53:fb:d0:d7:5d:
05:5b:67:bf:f7:7c:96:97:0a:57:a4:f5:19:ec:2c:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:C8:6A:98:74:1A:AD:C4:C6:D7:B8:B6:7D:63:1A:CC:29:54:0B
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:69:86:7c:18:82:99:59:63:da:af:5e:f3:f4:aa:18:50:8a:
ba:8d:89:a1:cc:ca:92:87:29:fd:c6:8a:55:ea:48:e0:ad:c8:
8a:17:14:2b:db:29:1f:22:49:ef:9e:01:89:b6:29:f3:82:ba:
54:db:f2:d7:93:fb:1f:fa:92:d2:25:75:0d:38:e5:73:07:f0:
8a:81:db:92:02:4d:43:ee:3a:c5:33:b4:ff:f8:b7:9f:25:21:
06:fe:59:49:c7:69:9e:df:14:7b:9d:a6:c9:ce:f7:4f:31:d6:
a0:a9:ac:26:32:99:b9:d5:a2:af:af:33:30:12:a9:02:b6:57:
2b:5e:4b:2d:68:d2:26:dd:60:60:5a:1d:8a:4c:ef:2b:bc:54:
c5:c0:ce:b0:fe:75:e2:df:5c:77:0e:06:eb:79:e0:fd:20:8a:
78:19:1b:a6:ce:b5:1d:0a:4e:38:1a:79:a7:e0:4b:ea:a1:e5:
c0:8e:b5:4d:3b:ad:2a:06:32:94:43:c6:02:df:cb:1a:cb:eb:
1e:96:b7:30:f0:6e:1c:f7:71:fc:b2:ba:b4:14:90:6e:85:f4:
dd:be:81:40:65:db:12:41:be:f7:57:5d:87:2d:02:38:98:e4:
03:ef:95:d4:69:38:e6:2d:71:d3:ea:5f:38:0c:ac:aa:c5:1d:
f4:eb:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:01 2025 by rpki-client