Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: Gq8m6MD8bqE3Pz/pOYp1jsg6ua+kfH8K51mVml6JGhQ=
Subject key identifier: 70:F3:9C:8B:79:F0:CE:69:C4:28:84:0B:BA:7F:A3:E6:EA:9D:25:0F
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 01988167B4A0930C110C3DF5F7F9F840355B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 03DC
Signing time: Wed 06 Aug 2025 22:01:53 +0000
Manifest this update: Wed 06 Aug 2025 22:01:53 +0000
Manifest next update: Thu 07 Aug 2025 22:01:53 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: pV9Ve4ocq/ZYBe+NE1SsLJfZXDoMMOAcRzCalStCe90=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:b4:a0:93:0c:11:0c:3d:f5:f7:f9:f8:40:35:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Aug 6 22:01:53 2025 GMT
Not After : Aug 7 22:01:53 2025 GMT
Subject: CN=70f39c8b79f0ce69c428840bba7fa3e6ea9d250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:81:49:76:63:72:9d:0b:f7:f4:46:b9:35:
80:79:54:66:7c:f7:c6:87:f5:cf:92:52:31:d4:01:
ec:13:a8:3e:3c:2e:b1:fc:fa:6b:1e:65:99:3c:ef:
79:61:40:a7:07:d0:77:ee:9a:34:0a:e5:91:73:7c:
09:40:83:73:dd:83:11:4e:d2:2e:42:bf:2b:b3:0d:
23:58:36:43:af:25:1e:71:04:43:66:ac:40:aa:e4:
ed:7c:45:e0:87:af:80:fc:6a:d6:48:8a:a4:1e:73:
5e:6e:b3:fe:fe:2e:f1:37:7d:fd:46:d5:5e:ef:d3:
56:25:3a:2b:fe:d0:8b:ec:c2:c6:1f:3d:ac:6f:97:
72:d5:35:8e:f9:fe:27:5f:8c:39:50:c0:a8:18:82:
6c:cb:a9:f4:08:31:f2:7f:d9:7f:96:4f:c2:03:ef:
27:8a:33:d0:23:86:4e:3b:e0:4f:89:39:80:03:65:
b3:0d:8c:c1:09:78:b5:40:fc:7c:4d:d3:06:c8:66:
c8:6c:1a:05:94:72:0d:ba:b9:f5:6b:95:41:ba:4f:
03:72:28:67:e9:fa:89:08:33:73:f5:f1:f5:c0:79:
c0:d7:b7:3c:40:a1:c1:2d:7e:98:e4:8c:a3:ae:90:
3a:01:62:6f:d3:b3:6b:96:d5:0b:c9:a5:d4:7a:e3:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F3:9C:8B:79:F0:CE:69:C4:28:84:0B:BA:7F:A3:E6:EA:9D:25:0F
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:56:c9:6f:c9:88:cc:9a:6a:82:35:26:e2:67:66:df:6f:ed:
3a:04:dc:a1:12:5c:fd:94:50:47:4e:08:c3:28:d2:17:e3:95:
61:19:f0:c5:a1:79:41:12:21:8b:15:09:ca:ca:73:7e:98:c3:
1d:7b:b8:26:78:46:d6:17:02:a0:6d:bc:a5:20:9b:13:97:9b:
d2:ec:de:d6:26:d3:46:f4:a8:38:10:e1:c5:46:38:df:72:9e:
0c:d0:39:9c:bf:d6:16:e1:73:9f:c4:ee:10:6b:34:7d:dc:ad:
d5:27:92:2b:2b:66:d7:52:38:a6:f4:cd:11:4d:10:fc:e3:f6:
d1:e4:23:69:b8:88:b1:c1:7d:0b:77:59:f8:37:b1:4b:20:f7:
4b:75:0e:a9:ff:6b:60:45:00:60:3c:f9:46:16:6e:7f:99:6d:
f7:7d:5d:ff:9b:f9:61:1f:5e:bf:75:db:18:44:62:66:99:58:
62:78:89:ae:94:52:a8:f4:15:aa:ce:66:20:86:d8:01:ad:49:
37:60:3e:5c:95:bb:e1:57:2d:bc:06:03:99:1e:8f:83:4b:ef:
0c:ca:cb:78:13:83:94:1b:aa:0e:0c:a9:88:98:65:6d:ba:55:
ef:49:b0:3a:dd:8a:31:c9:75:fd:6a:e0:86:8f:ce:e3:01:66:
cd:42:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:25:52 2025 by rpki-client