Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: iASF1y4bGDVBOGvfcBuaKeL8dik3SQBraeSdBpgfs0A=
Subject key identifier: 53:6F:08:3B:B5:3E:ED:3E:09:E1:8E:98:B8:7B:C5:2B:B3:AB:CC:E8
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019874875D01728B48848A2046973B33CD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0C0B
Signing time: Mon 04 Aug 2025 10:01:24 +0000
Manifest this update: Mon 04 Aug 2025 10:01:24 +0000
Manifest next update: Tue 05 Aug 2025 10:01:24 +0000
Files and hashes: 1: ZIl-tGPYsmILe8aUvhHfFRisBTg.roa (hash: ELX+nfW5VdhOFYsiqhpPo4rEHXv1DoXfvUrKNYNv+iU=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: 3fVtzSbYk/QmaKI5GR7w17GItoY0I+8ZOIwz0/Mam4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:5d:01:72:8b:48:84:8a:20:46:97:3b:33:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Aug 4 10:01:24 2025 GMT
Not After : Aug 5 10:01:24 2025 GMT
Subject: CN=536f083bb53eed3e09e18e98b87bc52bb3abcce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:13:8b:96:0d:c1:09:cb:d4:5d:fc:0a:c3:
3b:c3:db:a4:2c:4e:72:d4:bc:1c:d5:58:d2:e0:e6:
f3:1a:48:6f:07:c6:a3:1e:9b:41:d6:69:10:d5:e4:
46:dd:70:f3:87:bc:1c:4b:bc:64:d2:c6:6f:a8:91:
36:db:44:79:80:c6:4a:0e:2c:aa:9b:d4:46:68:be:
69:10:63:87:f6:de:b5:af:40:94:f8:60:f2:25:e8:
1c:f5:b4:04:9c:ba:d3:9b:53:18:5d:71:89:e2:98:
6a:b3:91:7c:e4:61:e5:f7:c7:c9:c9:4b:be:6e:47:
42:f5:c3:99:9f:be:52:07:48:c0:34:a4:e1:85:09:
25:ec:b1:70:30:3a:e9:b7:2d:c7:20:65:a0:f2:ba:
9f:e2:1b:a8:bb:7d:0d:ac:06:52:47:4e:35:64:e1:
91:29:7b:88:30:4a:06:71:ce:cb:74:cd:f7:5c:f7:
4e:d4:e6:83:fa:dc:4f:b4:40:cc:40:79:1c:cd:78:
0e:f0:1d:e8:3e:d2:92:a6:8d:72:d2:fd:f6:97:8c:
34:00:e3:83:c6:46:48:89:14:52:33:39:cc:83:4f:
3f:64:73:67:18:94:88:e1:fa:e2:8e:e1:95:6f:14:
ef:92:a1:a0:f7:8c:2d:a3:d6:f3:27:15:36:ad:97:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:08:3B:B5:3E:ED:3E:09:E1:8E:98:B8:7B:C5:2B:B3:AB:CC:E8
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a8:99:aa:3d:79:7d:08:c1:ec:30:29:ba:40:85:21:3c:11:
51:e3:d6:89:b8:3c:f3:f4:47:cc:4f:0a:2d:ef:d9:59:6d:9a:
c2:f0:4d:be:e5:81:92:06:f7:64:3d:46:56:f1:79:38:08:71:
46:13:14:af:36:48:6f:ea:97:1b:4d:5d:8f:68:0a:cb:66:3e:
50:f3:69:11:ed:12:67:2f:49:6a:f8:01:b6:4c:22:c8:f8:91:
7a:43:0e:5f:0c:65:8a:5d:65:4b:12:da:a4:88:92:bf:4f:88:
b3:b0:40:f3:c9:b2:d4:b9:a9:2e:68:f6:23:7b:9b:3b:25:50:
e2:d2:9b:3c:f1:3b:8d:c5:48:8d:c6:75:ea:48:c9:11:a6:fb:
cf:e9:68:e4:2e:8e:f1:5a:33:2b:84:ae:f7:18:48:c9:24:e3:
f8:36:57:c4:3a:45:c3:b3:bf:52:8b:b9:41:53:42:62:9c:8f:
c1:1e:ff:c6:24:99:d9:49:0c:bb:a8:75:77:95:0b:3d:f5:88:
f7:14:b8:13:f0:e6:da:f2:04:d5:78:32:ac:08:ab:f1:34:48:
b4:1a:64:65:5c:21:9b:fb:61:12:56:d5:88:5a:2f:64:62:90:
c7:df:21:51:d5:c6:69:c0:a4:bc:de:59:b5:7f:27:ab:2a:d5:
f4:f0:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:14 2025 by rpki-client