Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: Dk+FgzFcgmt8s4Faw12fa5yjr0OVeqKXkbtnW9p8ZQ0=
Subject key identifier: 46:23:B7:E5:E6:D8:65:57:94:81:9F:2C:13:B8:C0:79:D7:AC:71:21
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 019894B74385413E0064A54DB59041B940CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 06E9
Signing time: Sun 10 Aug 2025 16:01:34 +0000
Manifest this update: Sun 10 Aug 2025 16:01:34 +0000
Manifest next update: Mon 11 Aug 2025 16:01:34 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: 1eX8jZhQCWoS1enhmCPg7DI9e08VbSceBM0gQ8i3MPQ=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:43:85:41:3e:00:64:a5:4d:b5:90:41:b9:40:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Aug 10 16:01:34 2025 GMT
Not After : Aug 11 16:01:34 2025 GMT
Subject: CN=4623b7e5e6d8655794819f2c13b8c079d7ac7121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:23:34:f6:d9:dc:38:e8:8c:50:3e:fa:ca:
f8:89:f0:a1:e7:30:a6:55:06:a5:3c:fc:72:01:92:
87:a6:b5:27:89:7d:cf:83:79:1d:0e:a3:c0:da:31:
35:13:e5:b7:c6:83:62:61:79:4e:32:8f:d8:a7:0f:
fc:6a:e4:94:8a:68:0f:3a:47:ce:b8:96:15:55:33:
cc:90:f6:4c:05:32:ba:95:53:a8:8b:2c:43:b8:59:
0f:f7:f0:65:1d:17:90:6a:24:3d:fe:01:87:ec:82:
88:f4:4a:a4:08:25:0f:ee:8f:02:91:d0:4e:aa:f7:
39:9d:bb:50:da:47:1a:82:a3:e7:ef:c1:8f:85:cb:
50:bc:4a:bb:84:11:b4:19:6b:2f:ab:16:be:2e:e9:
cf:31:9c:71:3c:37:bb:7f:63:24:04:31:6b:f5:48:
0b:db:ac:bf:96:69:41:60:a6:bc:42:f6:47:b6:98:
18:30:a4:4c:31:a3:b4:fb:2d:7c:38:55:5b:d6:52:
b2:9b:1d:65:df:42:35:7c:26:08:de:2f:7e:61:0f:
4c:07:23:ac:fe:62:99:c9:d9:e9:2f:69:96:19:cc:
6a:ce:e2:66:46:af:62:04:ad:0d:61:46:8f:fe:76:
28:42:8a:e6:c4:4b:45:fa:21:4e:e2:d1:a8:3e:9a:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:23:B7:E5:E6:D8:65:57:94:81:9F:2C:13:B8:C0:79:D7:AC:71:21
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:69:a9:ea:a9:0a:06:0c:c1:30:fa:5d:2b:9c:a4:83:78:63:
28:0c:85:a8:99:38:39:b0:56:e9:f4:14:1d:f8:d2:37:cc:4a:
6e:97:a7:7b:d0:02:c9:42:12:cb:bb:a0:51:11:13:b5:bd:d4:
d8:02:54:a5:58:54:9e:74:4a:40:9b:d9:f0:07:23:26:4c:5e:
00:5c:5d:1f:7b:fa:a9:71:9f:f7:05:8a:73:04:5b:ab:e1:9a:
ea:4e:69:0b:02:d5:dd:3d:5b:6f:4c:fd:35:fa:c3:cb:e6:b6:
90:8b:4e:d0:fc:db:f5:3d:a1:2c:21:82:7c:92:f8:08:08:d3:
3a:c7:f4:0a:8a:a3:d3:6c:53:6c:af:aa:e1:b3:43:42:8c:bb:
34:fe:c3:bc:92:48:57:50:36:38:2b:fa:74:f1:79:7e:64:41:
df:0d:9d:dc:e9:5f:08:84:2e:83:dd:f1:91:56:23:7c:ed:ea:
49:d0:7b:aa:a9:5b:ea:88:7e:17:93:e0:d5:89:a2:65:0f:ae:
9e:fa:f7:bc:f3:bf:9b:6f:d5:2c:d5:ca:d5:38:7d:69:e7:3f:
68:71:b6:6e:88:c7:7e:d5:b3:39:e4:33:97:cc:cc:5f:45:9c:
0a:5b:19:a8:19:bc:c2:bd:9f:11:42:b9:89:56:78:30:14:3b:
1a:3f:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:30 2025 by rpki-client