Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: 65Oi3jj5wEdso8QNqLx8QBQ8DwgtpEsoxn0kmgMDaQw=
Subject key identifier: 2B:92:03:CF:0C:72:27:23:AE:9C:12:96:55:9E:B9:6F:09:32:3B:B9
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 01987C777C96F6AF07B5CF9347560E0BCDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 043D
Signing time: Tue 05 Aug 2025 23:01:02 +0000
Manifest this update: Tue 05 Aug 2025 23:01:02 +0000
Manifest next update: Wed 06 Aug 2025 23:01:02 +0000
Files and hashes: 1: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (hash: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=)
2: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: ZhWAZs6+AY9C9nNJH8EVAshUmbzWAUb73Ngq2pZYJDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:7c:96:f6:af:07:b5:cf:93:47:56:0e:0b:cd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Aug 5 23:01:02 2025 GMT
Not After : Aug 6 23:01:02 2025 GMT
Subject: CN=2b9203cf0c722723ae9c1296559eb96f09323bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:7d:ca:48:d7:e1:85:60:b4:8a:78:85:b6:
ed:f6:a3:14:d4:76:c7:60:68:e3:15:00:07:96:65:
66:ac:f2:f9:0f:1d:34:30:9d:41:3c:69:b4:28:5b:
13:ec:39:cc:7a:9c:73:d9:f8:2b:0f:3a:95:73:d3:
64:21:e0:02:a5:13:89:57:57:35:84:f7:f2:bf:2b:
13:3f:97:3f:14:1f:2a:12:c7:33:43:b1:12:54:91:
20:68:fe:48:95:b4:52:4f:bd:31:00:de:21:33:6a:
95:80:37:d3:67:9e:a7:1d:18:aa:1c:91:38:c0:d9:
cf:50:6e:07:36:31:77:b6:25:3d:fc:a3:81:83:9b:
fa:2e:4f:d9:c0:cc:f1:09:42:35:91:cc:4a:b4:ed:
a7:63:ae:e9:04:69:1d:c9:19:bd:43:b6:53:09:b4:
0e:8e:53:16:00:54:1b:2d:5f:81:12:16:a9:69:a7:
7e:f4:51:b2:40:c7:da:ba:83:72:8e:07:47:74:08:
de:2a:17:9b:f4:be:eb:f4:4a:3c:eb:aa:89:e0:3e:
52:33:08:01:e1:dd:72:7d:39:cc:18:fe:9b:48:0b:
8e:30:f6:99:d1:db:f7:4a:49:3c:78:54:72:44:c4:
ef:5a:1a:44:6d:29:7f:11:8c:2f:49:9f:aa:0c:e4:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:03:CF:0C:72:27:23:AE:9C:12:96:55:9E:B9:6F:09:32:3B:B9
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b0:5d:4f:98:2e:ae:84:9f:a6:7e:df:51:64:0b:ed:55:b5:
90:65:7b:f9:b4:ac:ff:7b:2a:d4:41:d8:f6:26:14:84:91:a3:
b4:cb:6f:d9:96:35:2d:61:56:22:70:c2:5a:31:6b:ee:dc:40:
26:f1:66:0c:1e:8c:5c:42:4b:f8:5a:bb:95:a1:c2:09:a4:c7:
33:ce:66:29:35:f8:f8:cd:ec:c5:f6:7c:57:fb:96:e8:70:87:
7b:81:b2:27:ae:cb:99:db:2d:7c:9c:c0:dd:ed:99:05:18:56:
63:cb:58:5f:8e:11:02:ab:a3:41:cf:6c:c7:a2:c1:8a:1b:a0:
f7:aa:d7:1c:df:29:a4:ad:41:b2:e7:6d:64:ab:f1:fd:d3:90:
f3:53:ae:f0:45:ef:17:38:34:33:69:a8:93:79:ca:99:a2:82:
04:07:5b:17:c0:05:bb:66:db:c7:c2:12:74:b1:48:0b:dc:75:
12:5e:18:2e:19:1d:4f:a6:24:0c:1b:1c:b3:eb:fb:66:55:0b:
6e:f2:68:65:bf:bd:f5:56:f0:65:13:5e:09:e4:0d:f1:80:c4:
89:7f:dd:7c:5a:44:17:53:dc:c6:f5:77:6e:9b:86:74:59:6c:
55:0e:2a:70:db:63:ce:79:97:a4:c6:f3:ad:5c:a6:be:df:01:
96:d7:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:20 2025 by rpki-client