Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: 4BDhERWBHI9+EnYVqK3Ugj5F63KhvbwS3dFmcu/+TQM=
Subject key identifier: 45:50:52:AF:93:F6:A3:42:68:72:23:D7:7C:20:26:43:BC:FF:E0:91
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 0198971286060EA6F03E26EC229FF3CEDEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 05D9
Signing time: Mon 11 Aug 2025 03:00:30 +0000
Manifest this update: Mon 11 Aug 2025 03:00:30 +0000
Manifest next update: Tue 12 Aug 2025 03:00:30 +0000
Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=)
2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: Vg+ExH8R1itjD8eEVpLgWNGKmGEhvgVOMbex7IV8KoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:86:06:0e:a6:f0:3e:26:ec:22:9f:f3:ce:de:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Aug 11 03:00:30 2025 GMT
Not After : Aug 12 03:00:30 2025 GMT
Subject: CN=455052af93f6a342687223d77c202643bcffe091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:7a:e0:9f:fd:24:3d:e8:31:dd:3c:bb:03:
20:e5:99:b0:b2:4b:91:89:97:44:85:91:e1:5e:a4:
55:fd:45:d6:c6:c8:77:75:a1:8a:6e:23:6a:4c:6d:
32:e5:ea:72:c4:a7:fb:a8:ae:43:c3:88:72:f7:04:
21:7a:ef:31:3c:d0:ae:64:ba:f6:95:9c:0c:70:7b:
bf:8e:49:79:2e:20:28:63:24:fa:c8:e8:20:80:7b:
96:9c:c4:32:d6:c0:29:78:c6:a7:2b:06:46:0c:3c:
d0:e2:d0:7b:1e:68:a6:af:bd:1d:6e:ba:5f:ec:ca:
fe:e8:5f:52:0f:8a:09:90:24:ac:1f:7f:8c:67:92:
1b:7c:35:ca:3f:fd:5b:f7:25:9a:c3:2d:5d:34:09:
90:0b:ef:ec:46:43:95:95:97:21:86:f3:e9:f3:58:
02:ed:7a:96:a9:73:98:c7:3c:e2:64:a3:94:88:30:
03:fb:62:8b:0d:0a:6a:f8:fb:b4:10:0e:e0:10:eb:
a7:cc:c2:8d:e5:16:ff:2b:29:fc:1c:59:43:a9:86:
8f:62:a4:bb:e1:c1:ec:18:b9:1a:b4:43:50:a1:7f:
53:c9:e2:0f:98:63:7b:66:c8:73:16:84:47:2c:2f:
3b:cc:ab:5f:1c:cf:2e:d5:30:2a:4a:df:8e:f4:97:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:52:AF:93:F6:A3:42:68:72:23:D7:7C:20:26:43:BC:FF:E0:91
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:73:ff:47:ef:7c:7a:fb:db:17:79:90:0e:d3:5d:60:6b:
c6:a5:1f:57:5a:6c:dd:3e:06:eb:42:5f:98:3e:d0:6f:0e:53:
e2:78:1c:1b:6b:0f:ee:87:85:91:95:26:36:fa:2f:0e:5c:47:
a1:2b:cf:89:44:bc:f7:14:38:3d:d1:cb:d2:5a:c5:3b:4d:eb:
69:1d:f8:35:a9:66:67:3d:9e:78:68:06:30:5b:e1:2d:18:04:
8c:6f:bf:bf:2c:df:12:2e:6f:e9:a2:e9:4b:27:15:2c:f0:6f:
32:bb:89:64:de:32:5d:6e:69:d9:12:f5:a2:9e:d1:c0:39:b1:
96:ef:c2:27:35:17:1c:00:1d:63:03:e6:1c:7c:48:f5:91:96:
7b:02:e4:45:58:dd:d4:6f:2b:6b:26:f3:78:e6:95:59:e0:b9:
ea:96:0b:66:e1:04:c8:ad:7b:95:76:b4:a2:67:ce:5a:54:a7:
19:66:fc:0b:8a:4c:e1:88:b7:10:9a:fe:c0:7c:bf:3d:23:3c:
c9:5d:69:5e:d8:b2:34:0a:f9:a1:f6:f9:86:d1:84:8d:41:8b:
14:e2:46:1c:f8:8d:82:22:8e:93:ad:ff:c6:b1:f3:c0:ef:1e:
52:d6:bb:b9:e5:27:6a:02:75:94:72:ee:26:1f:a5:5e:8b:d7:
1e:1f:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:46 2025 by rpki-client