Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: j/nngkYQ1D+guBbTzzRdyxkTYaWusWK9MZfSUfjctuY=
Subject key identifier: 5E:C2:CB:FA:39:60:D6:D3:A0:A9:98:83:DA:73:46:07:4B:20:14:64
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019891478E56E2983E27EB500CFF0A556576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 00:00:42 +0000
Manifest this update: Sun 10 Aug 2025 00:00:42 +0000
Manifest next update: Mon 11 Aug 2025 00:00:42 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: w8wHiIrK6AtddkQxjmEyCXc6HuWb90xJ6relrzD+F+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:8e:56:e2:98:3e:27:eb:50:0c:ff:0a:55:65:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Aug 10 00:00:42 2025 GMT
Not After : Aug 11 00:00:42 2025 GMT
Subject: CN=5ec2cbfa3960d6d3a0a99883da7346074b201464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:15:83:38:c8:a2:ff:91:35:5b:08:d6:79:
19:2f:8a:92:70:2a:4d:28:f3:d5:40:eb:33:e1:5d:
6d:6d:48:48:32:12:14:42:80:0f:44:b4:c4:24:85:
86:b2:58:29:81:ff:ed:44:02:e7:46:1e:be:95:6b:
ec:aa:3a:31:80:cb:19:b1:53:b8:9f:53:fa:de:c4:
1d:70:91:ce:4a:69:af:a7:29:a9:2c:e7:29:0c:d0:
2d:33:94:f6:9f:59:19:0d:23:80:8f:4e:66:e6:32:
87:fe:de:8a:04:98:4b:87:da:b4:39:91:a9:b4:c6:
1a:5a:d9:0c:f1:39:ca:8b:d7:b4:8c:64:a9:1c:95:
8e:25:5e:0c:e1:af:30:26:8d:df:6d:fa:c4:b2:79:
fd:87:96:33:d1:86:ae:44:3d:57:30:a1:1a:a1:e8:
06:d2:df:27:cc:53:7d:11:eb:80:e1:05:73:9f:ba:
85:bc:f8:89:02:a6:18:7d:b5:b8:81:75:2e:32:02:
f0:20:fa:7a:6c:00:c0:22:37:74:d0:ba:a2:a1:35:
1f:2b:af:20:e7:00:9d:43:75:3e:99:71:dc:ad:9f:
e9:9f:9b:bb:24:e6:61:6f:ae:3c:8b:0f:0c:54:ac:
05:4f:fa:fb:49:d8:1f:9d:f5:10:1f:98:2b:d2:b7:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C2:CB:FA:39:60:D6:D3:A0:A9:98:83:DA:73:46:07:4B:20:14:64
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e0:51:90:cf:55:66:5f:15:8e:c8:74:59:a8:49:94:53:b4:
6c:54:3a:93:f0:b2:c4:51:ec:16:24:f2:4a:3c:85:10:ba:32:
64:9c:5d:5b:e8:0b:fe:f2:e3:d3:e6:6c:f5:8a:23:f3:bf:92:
6c:8c:47:cb:5f:97:4c:46:40:9f:cf:c6:a1:1b:18:0e:d7:3c:
5f:f6:7c:07:b6:ad:92:10:6b:9b:74:4d:11:08:48:83:47:0d:
66:6a:33:6b:1f:57:68:db:37:1f:d3:f5:41:5b:7a:c7:8a:16:
ba:85:c7:b7:1b:c2:ed:79:83:cd:4a:6b:e0:72:6d:20:ca:91:
8f:52:0a:91:2b:80:b4:05:16:8f:54:72:d0:6d:48:02:48:ba:
ee:ff:8a:44:1d:f2:25:5d:50:9e:dc:3b:52:7d:d5:ac:7b:20:
99:87:24:4b:0c:f7:07:b8:bc:33:8d:60:1e:f0:00:14:82:e5:
45:65:83:9f:b3:86:ec:7a:8b:cb:4a:70:b0:69:b4:24:d5:30:
78:79:50:f8:32:e9:8a:5b:fd:e4:50:57:c9:ac:4f:df:2e:ed:
41:32:24:8c:01:a2:6b:c2:0d:0c:e8:02:7c:37:f1:ea:de:e1:
57:9a:89:e5:d4:65:5f:0c:20:1e:19:a8:f9:11:ab:58:42:2b:
82:9e:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:25 2025 by rpki-client