Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: ToajdoL36TY39bAwOs42MEQe63Em938wJC+OxzVg1v8=
Subject key identifier: 5A:F7:96:A1:4C:52:C5:7E:CE:64:F5:63:C4:49:A0:54:3D:18:35:DF
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 019873E31012A3FDA87B6E7C7BDEE33717EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 0F6A
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: YHvs9xeG5HAgOjGXpr03bheNLhkdlhAQuQmyyCWqw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:10:12:a3:fd:a8:7b:6e:7c:7b:de:e3:37:17:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=5af796a14c52c57ece64f563c449a0543d1835df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:bc:86:84:83:9c:9d:87:ac:33:08:be:3a:
0f:0f:9e:87:6b:1a:22:b8:e3:49:01:19:6e:21:e8:
a8:4f:23:39:55:f9:e3:16:0c:26:d6:3a:fd:4d:93:
07:90:16:0f:d2:c6:ea:61:e8:d2:1d:02:0f:22:bc:
50:91:cd:11:d4:7e:bb:aa:ee:05:a7:40:b4:75:aa:
b3:0c:88:6f:90:11:ff:3f:28:6a:1f:a0:7e:d7:39:
98:e0:9c:0e:95:f5:41:eb:52:cf:91:93:af:d1:8f:
08:19:d5:e1:5a:43:22:2c:67:da:7f:c9:bc:9c:6f:
10:6e:0b:d6:b3:07:36:bd:5a:49:be:38:e7:1a:3c:
11:4c:e6:fd:57:b5:ec:ad:0b:b8:6f:c1:65:95:42:
91:96:bb:d1:43:f1:80:19:27:9c:b2:98:b3:bb:29:
32:2d:c2:e3:be:9a:dc:be:9d:11:51:ec:e3:8d:70:
7f:57:7b:87:a9:b5:e9:8e:f1:15:8e:4b:b0:e5:32:
ee:d9:b7:a8:5d:61:db:6e:5d:2c:23:2a:26:18:f2:
16:8e:c5:11:d6:bd:cc:d5:50:49:45:c1:0f:91:4e:
0a:01:e5:ca:b0:35:b5:dc:83:51:6e:f0:e7:0c:c3:
14:34:cb:b0:25:eb:d4:04:56:fb:b3:10:36:0d:bb:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F7:96:A1:4C:52:C5:7E:CE:64:F5:63:C4:49:A0:54:3D:18:35:DF
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e0:cb:94:ed:9c:12:e5:8f:2d:4a:97:2c:48:bf:6d:e9:7c:
e2:02:6d:1d:ab:b0:64:c0:c0:bd:a7:9f:3d:cf:29:f1:30:77:
68:94:05:65:54:f7:c8:da:9e:af:fb:94:4c:18:f7:67:a7:67:
55:1c:90:2d:a6:2a:4b:a8:02:5e:f4:14:b7:54:82:60:0d:18:
07:9d:bc:ad:8a:63:c8:50:50:4e:c8:c2:cd:e9:c2:26:ad:ff:
7a:ec:a6:1c:fa:13:67:6f:b3:11:5b:f5:e4:8e:ba:09:90:ff:
41:99:03:08:db:6b:4d:1d:3f:31:32:a9:72:4b:33:12:37:bb:
f5:61:ac:f1:91:ae:c7:a8:7e:69:29:df:33:55:49:69:d8:50:
07:47:7d:45:a6:0d:cc:a4:58:33:1f:67:6c:12:64:c6:4d:62:
93:e2:78:25:b9:e6:17:9b:44:9f:bc:db:f4:1e:ff:8a:14:e9:
3d:f0:99:6f:8e:fc:bc:c6:83:ec:6b:b8:e9:3a:e9:8c:c1:70:
f6:73:88:bb:b5:c6:60:0d:c8:0d:90:6b:27:71:84:1e:4e:02:
50:a1:41:2f:15:11:b6:66:32:65:57:78:8f:3b:c6:b6:99:1c:
22:4b:b4:3f:2b:10:a7:b9:78:a2:a0:f1:d7:be:fc:7a:ac:ca:
b4:85:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:26 2025 by rpki-client