Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: My/640HRHHCnDxu0QzTce/XSq8UbuiEsevcRmW/gdws=
Subject key identifier: 2A:43:2C:97:3E:C6:BE:E9:D0:8F:A6:B6:1E:93:65:E0:D7:19:12:B8
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 01987450732CC785B6C91764BCACFC400D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0268
Signing time: Mon 04 Aug 2025 09:01:26 +0000
Manifest this update: Mon 04 Aug 2025 09:01:26 +0000
Manifest next update: Tue 05 Aug 2025 09:01:26 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: w+y7tlLSR0s7me1Bs2cgT7A/V9gLzQWOm/lJ81Z+CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:73:2c:c7:85:b6:c9:17:64:bc:ac:fc:40:0d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Aug 4 09:01:26 2025 GMT
Not After : Aug 5 09:01:26 2025 GMT
Subject: CN=2a432c973ec6bee9d08fa6b61e9365e0d71912b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:5a:60:b0:79:63:3e:0e:c0:f9:64:75:cb:
77:3d:6f:e0:50:71:8a:a6:1e:c2:6f:1f:71:53:6a:
c2:ae:a0:7b:9c:87:e1:f8:5b:e8:fa:fb:fa:d4:9d:
53:98:ea:1d:d1:d3:89:cd:3f:08:62:1c:49:a2:9a:
e8:e8:c3:d3:61:69:bd:51:f3:52:cd:87:38:a0:43:
98:dd:0a:da:fe:11:6d:6b:59:90:08:42:27:99:66:
4f:ca:7a:05:25:00:16:4c:2b:f7:1a:15:4e:fd:19:
46:4f:12:d7:20:a0:5e:93:c9:8c:d0:00:15:2a:9f:
57:58:33:b8:63:1a:71:a6:16:fe:34:bc:64:cd:ed:
37:ec:47:b3:e9:d4:1c:96:32:d2:32:a0:cf:3b:7e:
66:ac:e6:87:f4:68:e0:1f:c9:65:a4:e3:e6:b1:1d:
32:c8:40:fc:3c:2d:8f:1d:3e:04:3d:4a:95:21:5d:
6c:7a:2c:22:31:72:ac:b8:ca:e9:84:72:b9:9b:55:
8e:97:6c:fa:c2:45:5f:fd:8e:91:f5:05:9c:40:4d:
bf:dd:b3:98:2b:99:e7:d1:8a:6d:2f:c9:75:10:f2:
cb:00:d9:d2:be:3f:5d:d1:2d:25:b7:45:31:ad:43:
54:87:e6:1a:48:c3:28:08:20:3d:88:de:e4:2d:5b:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:2C:97:3E:C6:BE:E9:D0:8F:A6:B6:1E:93:65:E0:D7:19:12:B8
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:06:47:21:e2:12:cb:a7:d2:e5:3e:fb:57:e1:f5:57:35:2b:
9a:8a:d4:28:f4:16:17:e6:b7:e6:86:57:f2:5f:b9:aa:32:99:
8c:81:8b:88:29:42:98:d5:5f:b9:cc:4a:ca:ce:78:8f:d4:5b:
26:c5:9f:0a:f0:76:79:9f:1d:e3:45:57:04:0a:b5:80:1c:4c:
b8:e7:69:e0:f6:d3:f4:36:f9:3a:41:35:e2:b3:97:11:4b:a2:
66:cc:11:e5:ed:87:6b:a1:30:3e:5e:f1:26:f0:02:dc:70:5e:
59:19:8d:38:57:3b:1d:0e:50:ae:ff:2b:d0:82:3e:58:89:eb:
e1:43:8a:15:87:cb:fd:ee:dc:6d:29:ba:fd:b4:d0:b1:57:9c:
df:79:69:e5:41:15:ad:4e:9e:5f:a2:ed:e1:af:a1:b6:15:64:
02:09:19:27:87:95:45:13:af:05:e4:19:6b:08:d2:05:8c:b6:
64:2c:44:17:de:d3:3a:a0:7d:c6:5a:3d:c6:ba:30:8b:08:ff:
69:b3:8c:4a:09:f9:3f:13:4b:42:60:50:8f:08:55:b6:ab:5e:
06:48:4d:f2:b7:1a:9b:4f:ee:2f:a9:e2:fa:26:aa:f9:62:cb:
b4:4f:b8:39:ec:47:48:6e:75:ff:63:ed:fa:a8:a0:81:ed:09:
2a:a0:9f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:48 2025 by rpki-client