Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: YMcEzTgRPke1n7xQxFsxs0MxuEnFoSpmN16ZkaA970E=
Subject key identifier: 5A:3C:D3:FA:A8:1E:3B:A1:E4:F9:C3:BD:78:07:7E:E0:87:8A:F0:7E
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019882431DF99B8F696FE8AECC2F71398C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0632
Signing time: Thu 07 Aug 2025 02:01:33 +0000
Manifest this update: Thu 07 Aug 2025 02:01:33 +0000
Manifest next update: Fri 08 Aug 2025 02:01:33 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: XYjZzu2MlTIXRGOYToTuMOidul2+rnCeRKTCRDUYuqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:1d:f9:9b:8f:69:6f:e8:ae:cc:2f:71:39:8c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Aug 7 02:01:33 2025 GMT
Not After : Aug 8 02:01:33 2025 GMT
Subject: CN=5a3cd3faa81e3ba1e4f9c3bd78077ee0878af07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:42:d9:52:9a:58:3a:47:5c:c1:b6:28:d1:
5f:c5:f1:b0:2a:58:39:96:7a:38:fc:d9:ad:f6:86:
7f:a1:ce:b2:21:e4:5e:06:4d:db:1d:42:16:9c:3d:
25:86:95:86:9c:91:88:d5:4f:84:1c:7a:79:97:b0:
4a:16:21:8a:1a:9e:22:f2:8f:42:94:61:e2:2e:dd:
74:88:0a:d4:42:2d:eb:a1:a6:0f:55:77:b3:be:a4:
73:0b:d9:6a:13:8c:5c:91:9e:d5:6f:e6:84:1f:14:
22:aa:a7:d5:39:7a:75:97:a6:43:77:78:14:83:53:
05:c2:81:bf:43:3b:52:f2:44:c4:02:07:eb:a9:4a:
46:b0:b6:1d:73:85:32:9d:cb:44:88:af:6c:da:4d:
64:0e:d4:cf:16:b1:fb:1d:c2:57:77:b5:b4:d3:fe:
0d:8c:35:13:ca:4a:21:fc:9e:16:08:a7:33:05:13:
ba:96:18:55:a7:23:04:3d:98:38:94:fc:be:7e:46:
9b:d0:76:78:b9:5d:71:44:9d:76:7a:e3:87:04:0f:
ec:94:a3:73:29:cd:f9:d1:6b:83:6c:2f:8f:53:f3:
72:9d:5b:68:2c:f6:0a:7b:61:24:20:a8:33:01:d1:
07:1a:3f:a8:ff:f9:8e:09:4d:13:15:72:5f:41:87:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:D3:FA:A8:1E:3B:A1:E4:F9:C3:BD:78:07:7E:E0:87:8A:F0:7E
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:72:01:1a:95:65:00:02:fe:cc:4b:c7:98:fc:2e:60:46:db:
c3:21:66:08:3f:ce:ba:ea:28:e7:2d:5e:ba:fc:c2:93:74:bf:
0c:23:fe:37:62:56:97:ea:d5:11:b2:3a:97:2e:0c:dc:02:b6:
2e:d5:34:40:17:9d:e2:eb:64:ce:c1:90:a6:73:6e:2a:84:b2:
cf:33:eb:24:fe:5c:78:7a:04:30:13:16:5a:97:3b:eb:c3:d2:
a9:52:14:87:fe:ed:aa:09:0d:28:38:2d:3f:88:81:3a:03:53:
23:d3:71:ab:3f:5b:65:8c:53:b6:1b:c0:b7:62:8d:8d:e5:07:
47:f3:4a:a9:44:af:4b:f1:d9:ca:9b:e6:a2:cd:e9:42:e8:e3:
f3:5b:22:75:fa:65:2b:67:df:8d:b6:57:3c:69:7c:6a:85:fa:
74:26:77:d0:51:2f:82:e2:58:4e:7b:c3:f0:ea:38:2c:2e:74:
6b:c9:70:6d:ec:ed:a7:83:60:f9:76:8d:f6:8c:5f:1b:d6:83:
2d:0c:1a:8e:46:53:34:f7:3a:ed:a0:cd:6d:a9:e8:9d:63:fa:
86:49:b4:fe:19:27:aa:e3:5a:75:62:0d:bc:e5:e5:41:cc:7e:
59:77:93:b3:eb:e7:d4:4c:13:12:23:9a:c9:2d:97:69:ea:27:
50:e7:a4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:25 2025 by rpki-client