Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier: 33Jw8TeXT6E+bhzW+5Gp7UsWIX3tujTr1HV61NvxPtU=
Subject key identifier: 8A:59:7E:C5:A9:66:0D:7A:44:A4:CE:E6:D1:19:08:23:12:1C:34:FE
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 01987306BCB9AEFECAA9F42F923FFFA388CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 03:01:17 +0000
Manifest this update: Mon 04 Aug 2025 03:01:17 +0000
Manifest next update: Tue 05 Aug 2025 03:01:17 +0000
Files and hashes: 1: 6U3Xs040zPO-wT1n1ipqEnLqdc0.roa (hash: iVKPeVo4dn6/xoX4wf7rwRU8cdeCDU4NP9VqaFlc7Ic=)
2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: o0JVzzbaMUPTQV8/uSZrz9VBpkrKNKzEV5tD/9aAYx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:bc:b9:ae:fe:ca:a9:f4:2f:92:3f:ff:a3:88:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Aug 4 03:01:17 2025 GMT
Not After : Aug 5 03:01:17 2025 GMT
Subject: CN=8a597ec5a9660d7a44a4cee6d1190823121c34fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:ce:6c:d3:c3:69:5a:ee:9e:35:00:99:d6:
ad:6f:c8:a5:86:11:eb:7d:5e:11:ea:16:12:bd:68:
32:08:13:87:1f:d9:f7:93:19:c8:03:9d:bb:6e:93:
12:93:13:42:25:a2:bf:dd:4b:7f:90:f6:d6:f2:88:
13:85:a5:39:b9:eb:44:dc:bd:fd:53:83:e7:76:d9:
58:d7:cd:56:a1:ff:41:c8:c2:ea:a0:32:fd:7f:e5:
40:76:d7:a6:6c:1d:33:ce:da:1d:6a:f1:b0:2c:69:
7d:47:26:24:15:5f:55:2a:66:c0:09:c2:f7:ce:51:
2d:7a:72:7f:b7:df:2a:5f:a4:be:af:f9:56:e4:59:
91:e2:48:fe:6e:26:6f:4b:3e:ef:0d:37:43:28:d6:
b5:01:b1:0a:47:9e:21:bd:b3:7d:35:d3:43:8e:cd:
d6:d7:d2:5e:f0:ac:75:8b:09:1e:e5:7f:39:f7:00:
2c:ed:04:64:96:a1:30:70:2a:0f:8e:b8:81:95:86:
72:b8:83:10:f4:c1:39:57:e4:30:e8:f8:f3:69:62:
cf:4b:29:16:e4:6e:d9:d4:fd:2f:4a:38:58:cc:4a:
78:81:5e:65:fd:7a:a9:c3:87:db:e8:ee:96:f8:bd:
01:c3:4d:58:28:55:10:e7:a2:03:b8:7c:e7:b3:1b:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:59:7E:C5:A9:66:0D:7A:44:A4:CE:E6:D1:19:08:23:12:1C:34:FE
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:94:8e:04:68:9c:d2:9a:34:68:09:eb:96:8a:db:c7:e4:76:
30:24:6a:e1:89:b9:16:ad:e9:2d:c2:04:ca:7d:29:4b:bf:ab:
89:b4:b4:b6:cb:f8:58:0f:74:85:b1:f8:8f:d8:91:b2:fd:7c:
a8:51:87:41:cd:85:94:fb:76:0c:dc:b8:3c:2f:35:09:34:34:
5e:16:89:f9:33:9a:b1:12:d5:99:0a:46:96:14:1a:e1:ea:91:
7a:f0:8e:ac:94:fb:b6:98:7b:f6:7c:1f:23:32:2c:21:ae:3b:
2d:8e:64:84:04:08:ca:7b:a8:df:fc:b3:96:78:29:1b:6b:35:
a4:bb:d4:d0:d0:45:4a:5f:a3:61:d2:31:70:18:5d:0c:87:da:
69:3d:4f:33:09:24:d1:43:0d:d9:c3:e4:ea:35:b1:cc:a5:ca:
8b:95:f3:40:56:53:20:ee:b2:bf:b0:7a:5f:83:f2:23:0a:0c:
83:38:b8:99:57:77:b4:69:14:28:ae:be:8c:9e:dc:9d:74:a0:
00:77:97:be:a7:db:67:1b:ee:d7:1b:d0:44:72:92:48:7e:b5:
61:5f:43:d8:52:60:19:8c:af:21:8f:14:eb:99:3e:e7:ed:70:
92:84:dd:e8:59:40:ac:4a:d7:87:42:ae:b6:e8:64:eb:6b:e9:
21:ef:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:53 2025 by rpki-client