Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier: t+ZlbqIWE0cA5Gd5J4aJLcdG2pUlJBkz2/nCMrtQzUY=
Subject key identifier: 90:22:A4:1C:4D:AF:93:D3:A3:2E:47:85:4E:85:B3:70:0A:AB:08:B5
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 0198745000B642375BC242A25BAB745491A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number: 0DA8
Signing time: Mon 04 Aug 2025 09:00:56 +0000
Manifest this update: Mon 04 Aug 2025 09:00:56 +0000
Manifest next update: Tue 05 Aug 2025 09:00:56 +0000
Files and hashes: 1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=)
2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=)
3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=)
4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: VvzwtqzUsnYdUrpueyEB4HiCP/XvI8sgg7lXbD6mjXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:00:b6:42:37:5b:c2:42:a2:5b:ab:74:54:91:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Aug 4 09:00:56 2025 GMT
Not After : Aug 5 09:00:56 2025 GMT
Subject: CN=9022a41c4daf93d3a32e47854e85b3700aab08b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:08:d8:e2:40:4f:d2:78:df:a5:ef:16:24:
11:8f:82:27:70:5e:e1:74:f1:3d:d6:64:39:a3:ff:
d8:cc:92:e4:4b:d2:4b:cb:10:a3:62:f5:7d:8d:98:
db:4a:25:a6:18:ee:b6:4c:d2:c1:66:39:f7:14:5b:
43:ad:2d:76:c1:ba:9c:98:8e:1f:e3:b4:50:99:5a:
06:f3:a3:5e:db:fe:1d:4f:d3:fa:09:a3:ec:10:06:
7b:78:97:2b:e4:dd:93:f7:32:11:49:b9:2f:6c:52:
e7:a0:47:d6:2f:c7:1c:7d:b0:9e:3d:af:f7:6f:77:
a2:8d:95:e7:1b:2c:aa:6b:74:d0:93:e2:57:ee:b1:
9a:2c:b3:8e:40:3a:83:a9:74:33:e9:7c:87:74:d1:
76:d9:79:a2:21:a3:66:f8:b0:20:38:c9:a9:cf:c8:
0e:cb:bb:47:99:80:55:0e:d4:ff:4a:84:36:70:ea:
5e:32:fe:7d:47:fa:76:f4:70:d7:41:2d:40:09:6b:
b4:59:69:51:6c:fc:be:ef:62:29:0c:79:dd:56:62:
8b:f4:c7:04:9e:e5:d6:a6:ad:84:ad:e1:4a:ec:15:
6d:9c:c1:03:f1:2e:e8:2a:22:76:d8:94:ca:4c:f3:
40:c9:16:9a:33:4d:ce:5a:cb:5d:38:2e:cd:75:46:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:22:A4:1C:4D:AF:93:D3:A3:2E:47:85:4E:85:B3:70:0A:AB:08:B5
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f6:df:61:1e:70:18:61:81:b6:21:65:ce:77:84:6f:a8:29:
b8:11:30:27:7d:8d:92:08:9a:60:9f:1c:b4:0b:9d:89:0a:53:
ea:40:0b:64:0e:8c:1d:90:d3:f8:ba:e8:27:d0:f5:f7:fb:54:
24:d2:a3:e0:d3:f8:b1:af:9e:50:90:31:dc:f2:ba:c9:d8:e2:
2b:3a:57:c1:59:bb:e7:9b:27:9e:7d:f4:33:c5:8f:17:68:c4:
fe:dd:64:35:cd:99:4b:07:08:d1:45:ac:7e:e5:06:6c:a1:7d:
b4:33:06:0c:83:b3:92:4e:5e:ed:c6:c7:02:07:e2:27:70:6b:
77:18:92:b7:0b:d2:a4:0e:28:53:21:8c:34:97:fa:59:1b:8a:
0f:42:cb:41:fa:ef:56:ef:c3:b3:ff:ec:b7:73:62:b4:0f:70:
4e:9a:55:d7:c8:1e:46:6c:c2:1e:65:5e:61:af:26:8c:2e:fa:
98:52:e4:ef:7f:c7:33:c6:4f:30:ed:63:06:89:5f:71:67:b5:
00:4b:bd:1f:d4:26:bd:60:ff:8c:cb:9d:fb:d7:23:bf:9a:55:
d0:3c:d4:09:d6:87:a4:08:95:e6:86:21:f3:10:79:1f:b9:ec:
4e:3e:90:cd:9d:7b:d5:a0:b9:67:5c:52:45:82:36:57:57:04:
5d:4c:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:14 2025 by rpki-client