Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: s1GdUU5ste4TyGpkI/5Bgu2QeNYSBQFDLg1+j+upofM=
Subject key identifier: D1:72:69:B0:86:B9:89:00:B8:29:56:7E:2E:38:B1:F4:93:AB:E7:07
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019882433C074E9DEC88A302E50E34B9F0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0C74
Signing time: Thu 07 Aug 2025 02:01:40 +0000
Manifest this update: Thu 07 Aug 2025 02:01:40 +0000
Manifest next update: Fri 08 Aug 2025 02:01:40 +0000
Files and hashes: 1: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (hash: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: y/nBC3lFDpMz6rnalWk3E0GBQaRYhol39f0BrgwxQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:3c:07:4e:9d:ec:88:a3:02:e5:0e:34:b9:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Aug 7 02:01:40 2025 GMT
Not After : Aug 8 02:01:40 2025 GMT
Subject: CN=d17269b086b98900b829567e2e38b1f493abe707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:f8:e5:36:34:1d:a7:84:5c:b5:5e:da:99:
d7:b0:54:ee:80:8b:f7:90:c4:16:7d:09:b4:55:4c:
49:2c:67:aa:63:0c:c9:72:e2:12:5d:2a:39:a2:94:
e4:82:20:f1:be:df:c6:d2:7d:0e:dc:ca:47:6e:71:
21:8d:57:96:ee:7e:9e:40:2d:07:5b:ee:5d:c8:d2:
34:8b:c4:a8:6d:ee:9a:ce:eb:f0:f3:c9:86:f4:14:
f7:68:83:a1:2e:70:ea:b4:ef:06:a2:eb:fa:f2:fc:
78:4b:fc:37:8e:5c:0c:a8:37:1e:7f:ca:da:9b:d6:
c7:74:01:dd:ca:f8:17:5d:2b:4a:e1:d6:1c:3c:8f:
3f:70:94:a6:ea:0b:f6:54:70:0d:09:0b:07:5d:94:
bc:e3:a5:e8:cb:7b:c4:20:39:c6:9f:84:45:2f:35:
5d:f5:07:42:75:57:14:e0:a2:66:41:30:60:10:17:
e9:32:ce:1e:2b:5b:29:c5:66:5c:9d:c9:dd:06:ca:
83:68:5e:19:55:37:31:51:a4:3e:da:39:ca:82:03:
15:d4:c5:1e:be:6f:a6:d1:19:3c:b2:71:df:5c:60:
d7:64:2e:76:b1:90:39:36:78:a4:8f:85:96:dd:78:
6b:71:c9:09:ce:0c:1b:59:78:00:76:4a:57:a2:0f:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:72:69:B0:86:B9:89:00:B8:29:56:7E:2E:38:B1:F4:93:AB:E7:07
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5f:b8:ab:f6:2c:b1:dd:d2:4e:14:81:d7:71:ac:84:50:ac:
a7:f1:53:c9:68:0a:58:0b:90:e3:66:ed:87:1b:0a:8b:f7:6c:
73:55:26:be:0a:d4:01:02:e1:4e:0f:ee:17:6e:c0:6a:ae:c4:
03:2d:c5:b0:3c:4a:70:f4:64:5d:49:2e:29:8b:b7:78:58:a8:
cd:d7:9b:16:dc:27:a3:9a:9b:e2:d7:bf:8d:67:39:88:e5:67:
9b:cd:a2:47:7c:5c:5c:ea:8d:df:1d:35:1c:29:e3:2e:f3:cb:
e3:cb:1c:92:a5:c8:fa:d9:d2:54:63:94:7f:28:d0:fe:3b:7e:
b2:c0:61:97:95:6c:ea:fb:f0:98:3d:83:ba:1b:b0:9b:96:13:
1a:2e:12:27:b0:3f:08:8b:70:be:af:a8:43:79:0c:f5:aa:a5:
c1:d1:63:a8:d1:9d:9c:bd:91:5d:ff:41:dc:cc:4c:67:09:1b:
39:63:a6:20:48:42:f2:7f:e5:26:62:80:c6:86:e3:10:56:1e:
17:3e:f4:4e:4e:77:34:f3:28:85:04:3c:6d:59:6a:5b:37:72:
5d:4c:e9:1e:cd:6d:1a:07:51:3e:96:65:e5:5a:b8:3e:2e:f9:
1f:ad:2a:bd:51:f3:42:63:42:9d:5d:f0:23:44:91:bd:bb:4f:
1f:72:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:17:42 2025 by rpki-client