Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: q83cMNeFKmDxQPcbICQ1dBSpx1na4NdZzu/9chhLmiw=
Subject key identifier: 36:D7:65:42:A8:14:D0:9C:2F:13:30:A5:8C:1F:FA:88:37:02:68:2F
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 01988C8ECADF03EEB0F8814BE8DECACE25DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 1333
Signing time: Sat 09 Aug 2025 02:00:24 +0000
Manifest this update: Sat 09 Aug 2025 02:00:24 +0000
Manifest next update: Sun 10 Aug 2025 02:00:24 +0000
Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: eRkZPgOScTTq9c+TTTsCnf+azVCudI2JcsZx6QeYZ9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8e:ca:df:03:ee:b0:f8:81:4b:e8:de:ca:ce:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Aug 9 02:00:24 2025 GMT
Not After : Aug 10 02:00:24 2025 GMT
Subject: CN=36d76542a814d09c2f1330a58c1ffa883702682f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:8c:45:1f:56:94:c3:95:af:d3:32:d3:66:
65:5f:74:ba:c5:ae:53:83:07:42:d4:62:00:8d:e2:
b8:28:55:31:7d:04:11:7e:27:d1:be:32:23:17:7c:
b5:04:7f:41:26:8f:71:14:47:63:c1:e7:2d:2e:c3:
5a:2c:22:b6:6d:40:0c:51:dc:31:34:e6:38:76:53:
9a:b5:79:cd:3c:3e:0a:e4:68:c7:37:65:44:2b:45:
29:9b:42:89:b1:9e:07:de:f9:8a:a6:e3:50:dd:9e:
f1:cc:82:48:e9:98:c6:3e:4d:8a:04:4e:23:17:e5:
17:34:1a:25:d0:0e:c4:be:91:f5:e2:ac:5e:f2:59:
18:db:10:88:64:76:10:6a:04:82:b8:a5:72:f1:38:
8e:d3:77:5b:27:22:73:a3:53:21:49:d1:6e:b4:8f:
2c:9e:3d:03:00:de:39:70:9b:3d:bd:18:c5:46:68:
e0:87:5c:ea:13:ca:be:94:d1:51:53:54:69:e5:d7:
68:50:01:d4:75:92:d9:d7:87:be:f1:fe:3b:c1:3f:
89:cd:67:f6:a3:36:ab:71:6c:c2:7d:12:8b:ab:e9:
e1:6b:7c:be:1b:fd:1c:e9:99:c6:55:9e:fc:8f:00:
34:ff:89:22:2a:19:98:ca:e3:23:19:93:73:7a:83:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D7:65:42:A8:14:D0:9C:2F:13:30:A5:8C:1F:FA:88:37:02:68:2F
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:86:85:0f:5c:77:bf:a1:6f:8a:4b:cc:a1:e9:b6:1e:cd:20:
af:53:44:54:4e:9f:60:a6:7f:1d:c0:b8:66:5a:b7:51:75:be:
89:e1:c0:b1:68:20:4c:84:36:ce:36:40:f3:c4:45:4e:9f:93:
55:20:6a:35:f8:ce:a9:95:76:bd:61:ea:05:2c:33:a1:79:67:
01:df:f3:ac:fb:2b:7d:d6:8c:b7:ab:f1:b6:b3:12:fe:a4:a3:
91:5b:88:47:5f:a3:7e:db:10:5b:b4:fa:b8:b6:ba:02:6d:0c:
ab:57:98:24:6e:48:51:9f:af:f4:11:78:3d:fa:8b:f4:a1:92:
88:7c:8f:15:5f:71:5e:93:fb:fa:a6:cd:2f:a4:5e:5b:50:52:
81:57:be:78:65:ba:bc:39:dd:a3:d3:12:42:64:eb:3d:b4:13:
65:91:df:98:51:fd:e1:85:99:22:16:2d:9e:8d:a2:b6:44:20:
58:f2:2e:ae:e3:b1:15:a5:ea:16:ef:35:3c:a5:8d:61:94:c8:
81:de:0b:a6:fd:74:ac:c7:ce:70:0e:84:65:15:ec:f9:3d:b4:
9d:c2:e4:42:9d:a3:43:4d:f6:dc:53:d4:57:aa:bb:36:c5:6b:
02:ae:c3:35:3d:20:41:4d:77:d1:1c:69:28:e7:33:27:8f:cf:
fc:94:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:30 2025 by rpki-client