Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: NbmynuTSqr3kvTN+zD8V1mAOaBWCEUZ6qk7zLKOF1g0=
Subject key identifier: EB:72:BD:57:FE:FD:25:D1:E7:A3:7F:06:2D:C1:B1:E7:59:A0:A8:B9
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019895C9761631E471161FA41515ED09FF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 093B
Signing time: Sun 10 Aug 2025 21:01:04 +0000
Manifest this update: Sun 10 Aug 2025 21:01:04 +0000
Manifest next update: Mon 11 Aug 2025 21:01:04 +0000
Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=)
2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: R1VkG0LVhoEUSNyE8nymEgKP1GB6QD8Vk5qfeNYomlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:76:16:31:e4:71:16:1f:a4:15:15:ed:09:ff:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Aug 10 21:01:04 2025 GMT
Not After : Aug 11 21:01:04 2025 GMT
Subject: CN=eb72bd57fefd25d1e7a37f062dc1b1e759a0a8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:96:37:a1:47:fa:45:61:56:c6:58:a9:70:
03:67:2f:86:8b:d3:e4:2c:1c:22:43:1d:13:5a:a0:
cc:29:10:84:cf:bd:d3:16:c6:ba:8b:62:08:57:50:
c2:41:90:9d:b8:15:1d:dd:35:1f:b2:bb:92:b4:55:
1a:df:de:18:6a:52:84:1e:63:48:99:f1:ed:0d:ac:
bd:80:1d:91:9e:e6:b7:9a:46:12:5f:93:3b:ea:d5:
a5:6a:e0:01:eb:23:81:3a:a5:96:58:8d:f6:ce:88:
fe:71:36:aa:24:9b:d8:e7:e9:c5:c5:2f:4f:3f:e4:
54:a5:ee:9c:cf:e5:3a:26:3c:a7:b5:0b:12:00:f7:
d5:dd:09:ee:f0:64:ff:e4:41:ea:ce:9f:5b:81:dd:
b2:ed:43:16:55:63:9e:4f:af:e4:e2:fb:8f:3e:52:
26:51:85:c5:e3:5d:7e:7e:9e:0e:ac:ee:07:25:7c:
8d:a9:1b:53:5e:30:50:c3:82:3c:df:c0:c2:41:d9:
52:86:74:71:38:ab:e4:73:8a:c8:77:dd:85:ed:1f:
22:94:7e:7f:5c:a9:c4:dd:fc:da:d7:1a:12:d4:5c:
1d:62:43:3a:3b:ca:3d:e7:f6:99:d2:4a:52:f4:bd:
98:7f:7b:30:1e:71:45:d9:1d:db:cc:77:04:67:b4:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:BD:57:FE:FD:25:D1:E7:A3:7F:06:2D:C1:B1:E7:59:A0:A8:B9
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b8:62:09:a9:33:fc:cb:d0:f8:0f:42:ad:53:a3:5d:49:51:
96:f7:75:1c:d1:21:d3:80:d2:f4:ea:dc:f5:63:08:57:71:e5:
60:6d:9f:ba:23:2f:3c:bb:f0:4c:fb:0a:63:25:43:40:45:c2:
4f:45:54:ba:a6:c3:5a:df:cd:05:c2:b0:6b:98:ef:e2:e5:40:
3e:a7:04:49:b7:61:80:41:3d:f8:89:86:07:ea:94:f6:59:e0:
67:a6:a3:75:3c:ec:50:44:40:33:d4:9e:9f:69:95:fe:31:9f:
79:0f:fb:87:2a:68:5f:af:be:3f:8b:55:84:e8:a8:ae:9b:e7:
b4:55:9e:8f:80:7b:67:c0:23:a3:fc:3d:3a:8b:79:2d:f6:71:
a4:37:52:0a:bb:77:b0:e0:43:7d:1c:3e:98:e9:19:9d:3d:af:
23:5a:b9:cd:53:b2:ec:2f:c6:70:48:3b:8d:0c:61:63:cd:a0:
b6:28:00:a0:6c:38:48:e5:a6:f2:5d:4b:60:d9:c6:c1:c1:c1:
3f:29:e8:4f:1f:cd:bd:68:07:2c:2b:62:22:9d:9c:18:c4:ab:
67:46:62:27:c4:2d:23:d1:18:3a:48:44:33:d5:a7:61:83:64:
67:d7:83:6b:43:02:11:27:58:67:7e:be:e7:2d:4c:6b:d8:39:
08:b7:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:10 2025 by rpki-client