Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: gF6Wl4QOXm+LTJCQm7bcRqzO5MNGyWyzlRNGzL9oVN8=
Subject key identifier: 5A:1D:3A:CD:3C:E1:96:34:9F:49:55:9C:BF:2E:A0:1E:81:A5:A2:7E
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 01988D6AD8A25760CD320534F5BA4F0383CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 03F4
Signing time: Sat 09 Aug 2025 06:00:46 +0000
Manifest this update: Sat 09 Aug 2025 06:00:46 +0000
Manifest next update: Sun 10 Aug 2025 06:00:46 +0000
Files and hashes: 1: 1-jvgd6RnvKghGloVJb1Iw3eDs48.roa (hash: B7s4SajlBd3EvNe+3zoLXiT8A5U0bChHVGW9zyQgNFY=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: XxUQ9hjYf1xqMx+T2D0Vf5R9dbO0ywtOzlm1HYGoqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:d8:a2:57:60:cd:32:05:34:f5:ba:4f:03:83:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Aug 9 06:00:46 2025 GMT
Not After : Aug 10 06:00:46 2025 GMT
Subject: CN=5a1d3acd3ce196349f49559cbf2ea01e81a5a27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:89:e9:79:36:77:e9:85:dc:d3:0f:af:e0:
f3:7c:08:90:1e:46:02:30:84:a5:80:7b:eb:68:78:
6b:07:ee:01:ac:d9:7a:d7:82:27:6d:29:7b:2b:7d:
1a:36:9a:a9:83:e0:ad:eb:f2:b8:ae:78:a2:9b:a7:
be:6a:cf:e9:cd:0d:4f:18:19:8b:17:c0:64:c9:c1:
e7:e0:c9:51:48:76:79:65:fe:49:26:e7:4d:a0:24:
39:4d:d5:33:1f:05:00:7d:46:d0:f3:e7:b2:23:b8:
69:0c:5b:c4:ba:f5:49:5d:6b:84:81:91:18:54:e1:
2a:66:57:48:c0:66:a4:d7:a0:e1:7f:49:0c:73:18:
2d:c7:8c:5a:d7:4b:af:52:af:5b:ea:81:ea:06:f9:
b3:ca:f8:70:ee:11:b8:eb:c0:03:d7:6e:f9:e4:94:
f1:23:cb:dd:aa:e1:51:01:fe:2f:cb:42:c0:c7:26:
8e:2b:c9:b2:88:7f:98:b1:a9:81:92:9e:46:ed:7c:
f2:3d:ae:5d:dd:93:4d:a7:7b:28:2b:a5:62:59:7b:
2d:2b:79:f8:11:60:13:78:96:dc:e8:d9:2e:ae:38:
83:7e:7f:98:3e:d3:a0:21:bb:4a:0e:c0:c8:66:b8:
44:2a:2b:68:86:f2:eb:3d:ad:1a:55:ea:7e:73:d3:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:3A:CD:3C:E1:96:34:9F:49:55:9C:BF:2E:A0:1E:81:A5:A2:7E
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4c:dc:86:57:f5:ea:ca:dd:7d:29:6c:e8:a9:07:33:5c:64:
ec:a1:e5:ea:72:9c:24:9f:cd:1e:89:10:ff:19:b3:39:cc:55:
58:3a:ed:cc:bd:30:61:25:47:dd:9e:94:ca:96:99:c2:3d:92:
8a:01:52:04:10:f0:97:70:9e:3b:ac:3c:3d:51:b3:50:04:0d:
e3:68:d7:ee:e3:db:0c:b5:d2:ce:e6:df:fc:6b:78:ab:32:d3:
e0:45:86:2a:0d:43:6e:d5:8f:7a:28:81:87:6c:0c:25:fa:39:
78:59:05:cb:86:a2:cd:44:d0:38:0b:4f:0b:05:5e:0b:0f:00:
79:d3:1d:f2:1c:6d:2f:6e:01:47:27:6d:d1:68:88:87:cf:2c:
0c:3e:e1:f7:f1:80:ba:2e:d6:03:4e:a4:ef:9e:c9:64:8c:2b:
56:15:42:42:f4:5d:10:0c:e9:09:d4:8b:66:eb:92:6e:35:6e:
54:75:85:2b:fc:53:f9:e3:06:60:b2:52:eb:f1:a2:3e:f9:f1:
a6:5f:c7:1f:82:65:f7:fe:e3:22:ce:77:19:96:88:59:ec:b8:
86:67:b0:41:6a:86:63:b9:c9:1c:54:c8:c5:1b:62:26:a1:d7:
3a:1a:21:74:72:1d:a5:99:65:01:a2:94:68:94:bf:0f:37:cb:
a0:e9:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:15 2025 by rpki-client