Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
File: rzA4pxexVOHPpHEWgy2ibyiyowQ.mft (raw, json)
Hash identifier: M63Ysdv5LwaEFpu6+trnlSbU5u3y3zcvUdU2ffgJCGk=
Subject key identifier: 65:DB:DA:59:04:F4:9C:AD:F2:B8:AC:A2:AE:05:68:20:B3:7B:54:24
Authority key identifier: AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
Certificate issuer: /CN=af3038a717b154e1cfa47116832da26f28b2a304
Certificate serial: 01989335C969507280C4F60A9A053802BF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 09:00:32 +0000
Manifest this update: Sun 10 Aug 2025 09:00:32 +0000
Manifest next update: Mon 11 Aug 2025 09:00:32 +0000
Files and hashes: 1: 9-nqsKi4Ev5jKkuKWzG_WIBo83k.roa (hash: SHAm2ssxR7ZkFZ7Brw788jEHfHi8MZS6JxMLuTDqDJs=)
2: rzA4pxexVOHPpHEWgy2ibyiyowQ.crl (hash: pTd2asJGB/sp8linNuMXXeiijDOoW4dWeNYdcvrFiEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:c9:69:50:72:80:c4:f6:0a:9a:05:38:02:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3038a717b154e1cfa47116832da26f28b2a304
Validity
Not Before: Aug 10 09:00:32 2025 GMT
Not After : Aug 11 09:00:32 2025 GMT
Subject: CN=65dbda5904f49cadf2b8aca2ae056820b37b5424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:c4:ce:d7:25:9e:56:de:17:3f:f8:a3:bb:
72:1d:52:42:c3:f4:03:8d:ab:94:42:e7:da:92:74:
af:80:23:e1:54:56:c8:4f:9c:63:27:08:9d:7e:77:
25:1b:8e:5a:71:26:b4:b9:d2:80:13:b1:a5:af:66:
88:fb:53:05:b2:69:ef:d0:7b:b8:b4:7f:82:13:4e:
26:e8:95:44:c2:11:28:3b:9b:10:2e:2e:26:71:af:
12:6f:48:db:de:fd:1d:bc:27:95:94:0e:a6:a7:24:
dc:6c:6a:49:e7:bd:eb:e1:f2:76:f0:cf:f1:34:81:
cd:4b:e7:e0:02:ca:8c:4b:cb:6a:1d:40:d6:e7:29:
c2:41:e8:b9:cd:ee:78:34:01:a3:12:49:0d:98:53:
c9:82:fc:1a:70:32:65:34:cb:48:77:d7:bc:f4:97:
4d:76:e6:d6:ab:90:8c:6d:25:4f:2e:f8:17:e2:ce:
b6:6a:35:86:60:9a:10:d5:85:58:9f:66:7f:7e:1f:
c2:37:b5:e7:79:c8:7f:08:71:b0:ac:2f:64:38:ae:
9e:36:dc:dd:c3:c7:95:2a:87:3c:b2:7e:c4:1c:bc:
3a:cf:af:e1:55:98:f3:39:ea:48:cd:a1:96:a3:ef:
a5:3c:19:d5:d6:a0:ab:04:48:b7:4c:a9:c1:1b:9a:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:DA:59:04:F4:9C:AD:F2:B8:AC:A2:AE:05:68:20:B3:7B:54:24
X509v3 Authority Key Identifier:
keyid:AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bb:90:55:2d:09:17:56:1f:24:1c:0a:dd:9b:2c:e7:55:ae:
72:55:4c:18:9b:73:7c:0c:bd:e4:3d:2c:c9:99:d5:67:31:dd:
72:7d:da:a1:0c:80:d6:a5:c7:82:09:a8:a4:d1:78:0c:61:77:
be:0d:c4:77:eb:30:bd:9d:73:58:39:b2:a0:b8:8e:0d:0c:87:
7a:60:cb:84:5b:83:89:e6:5e:a9:48:4a:4c:88:fc:ba:da:be:
6e:35:df:7c:16:52:29:26:03:3c:81:c3:ae:71:12:59:8f:9a:
af:e1:ef:9a:97:a8:e4:5b:df:2f:98:c6:a1:da:dd:bb:5d:a4:
d6:7c:0a:ac:00:33:77:a8:e3:3c:c3:c2:e7:1e:a5:3f:ce:2a:
24:50:6b:6f:cd:a1:f1:38:a4:2e:cb:bd:76:d0:e9:68:15:c9:
87:2a:d3:8c:2f:2c:f1:36:d3:15:d8:93:56:62:dc:c5:cb:05:
71:b0:7e:68:8c:ca:24:33:d1:b5:db:86:9d:6f:d7:cb:b2:27:
9f:89:77:66:49:71:5a:c3:e4:0a:cf:c7:cf:91:de:e7:99:6d:
a3:a1:21:fc:00:7a:be:50:9d:62:a3:48:45:f0:e9:2e:b9:db:
08:8d:43:b4:79:bc:0c:31:5e:74:ea:fe:b9:b6:60:a8:7b:cd:
00:27:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:47 2025 by rpki-client