
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: zm3b1U5JroB3Fu8VprogNCCa+i+XStYKNs6gojMEgWo=
Subject key identifier: 9A:27:2A:F7:4B:1A:83:3B:E9:FB:35:71:9A:8A:02:14:2C:3F:83:2D
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 019873745188EA9C5104E5212E82F8F608AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: F4
Signing time: Mon 04 Aug 2025 05:00:59 +0000
Manifest this update: Mon 04 Aug 2025 05:00:59 +0000
Manifest next update: Tue 05 Aug 2025 05:00:59 +0000
Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: 4KW7MRtou2FZg4GGTU4/ahyAdeZkq+J6yA9WigVzp74=)
3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:51:88:ea:9c:51:04:e5:21:2e:82:f8:f6:08:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Aug 4 05:00:59 2025 GMT
Not After : Aug 5 05:00:59 2025 GMT
Subject: CN=9a272af74b1a833be9fb35719a8a02142c3f832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:5b:22:38:f5:38:7b:75:e6:bf:79:3b:77:
90:51:73:5b:b1:f4:5c:d8:81:00:f1:12:13:48:8a:
1e:c5:20:41:4b:4b:22:de:08:42:a7:28:99:a4:59:
b5:98:84:c8:92:eb:97:16:23:d3:6f:c3:eb:1e:f8:
33:ef:c4:b4:c4:d1:62:6d:03:8a:64:9d:fd:8f:3c:
87:20:c8:bf:4e:a6:de:38:c5:f0:43:10:9b:b6:ad:
3e:85:6b:c8:92:6f:58:20:10:94:91:83:0a:26:b6:
3d:3c:08:04:c6:c7:80:b9:78:d7:5a:77:69:b7:98:
25:48:6e:e9:04:c1:27:a1:b4:b8:ad:d4:2b:bd:38:
03:4c:67:66:b1:b5:dc:d6:6b:69:50:d1:f7:95:a4:
2a:6b:e3:d2:44:46:41:b1:87:73:d6:cf:5b:79:98:
8f:b5:08:a7:9e:aa:9a:d8:df:97:b8:10:ed:5c:2f:
0d:41:4e:36:e2:06:ba:89:be:1f:b7:8c:2c:80:67:
74:68:35:ec:05:61:0a:a2:b4:73:fe:50:e7:3e:ea:
3d:57:58:de:e1:a3:e6:53:5e:6e:f9:5d:63:b9:25:
ca:12:37:dd:26:97:25:16:d5:08:54:6a:b1:a1:60:
cc:b8:f6:81:c7:95:48:60:d6:8b:3c:64:cf:4d:bb:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:2A:F7:4B:1A:83:3B:E9:FB:35:71:9A:8A:02:14:2C:3F:83:2D
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cd:12:77:e3:70:f6:ad:11:f5:13:13:01:18:1a:3a:2f:dd:
e0:5c:b6:c5:2e:29:40:a4:1c:28:81:ee:e0:aa:98:f9:79:e0:
1f:07:0d:4a:00:81:fe:35:e8:f7:9e:5a:1b:aa:8b:91:10:02:
76:4e:55:94:4f:9e:ac:1b:15:c4:40:fa:86:c7:f3:18:bf:0c:
72:a5:d4:e6:04:e7:cf:6e:d9:b7:8e:c5:6f:fd:4d:e4:82:a1:
f0:4f:07:34:23:cc:c5:94:f4:7a:4c:ef:9e:3f:db:da:70:f0:
ee:c3:86:1b:b5:ad:e1:cf:14:fa:a1:86:69:43:e7:fd:9d:de:
64:c0:29:a5:52:6e:dc:aa:a9:e8:e4:8e:2f:6a:4b:7d:ec:e4:
e3:e5:14:0e:e5:bc:15:42:bc:8d:40:70:d9:00:67:43:9c:40:
06:25:6f:4b:01:1d:45:c8:88:ee:69:4f:5a:ae:eb:1b:e7:47:
5b:9c:b6:e0:7e:c5:9a:ab:2c:84:50:00:a0:29:20:e5:2c:9f:
56:b6:1b:84:9c:8f:3e:9b:f4:d2:47:13:88:d7:60:23:95:b6:
9c:9a:da:90:9c:d4:5b:cc:d9:fc:17:c8:9d:ca:a0:62:17:93:
5a:6c:53:c5:06:c8:a9:6b:72:c4:2c:0f:3e:eb:25:46:72:18:
67:81:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:05 2025 by rpki-client