Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: vVcOLOJFEVUwDDjvtqSJ+uPKBoABsBfrreIt2DqoanU=
Subject key identifier: 32:1E:BF:6D:16:60:E2:6A:69:35:9D:91:9A:43:EA:6F:E1:27:F4:59
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019857581044FCE4510A471C1B6385539827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 04DE
Signing time: Tue 29 Jul 2025 18:00:45 +0000
Manifest this update: Tue 29 Jul 2025 18:00:45 +0000
Manifest next update: Wed 30 Jul 2025 18:00:45 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: SjPseYHepVBqZUwnd7k/YVwiNWXxS26Xhf9y/s3Oj+g=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:58:10:44:fc:e4:51:0a:47:1c:1b:63:85:53:98:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Jul 29 18:00:45 2025 GMT
Not After : Jul 30 18:00:45 2025 GMT
Subject: CN=321ebf6d1660e26a69359d919a43ea6fe127f459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:5e:f4:a9:3a:8d:de:9d:72:ef:cc:fe:49:
aa:f6:80:19:cc:e8:6a:f5:39:6e:47:17:4f:9b:bd:
dc:5a:4a:a4:02:31:36:ff:01:9f:74:1e:1c:fc:e0:
76:3b:54:13:66:bf:22:96:3f:c0:f8:41:7a:30:5a:
ad:16:5d:b1:3b:e2:06:16:16:0e:9b:af:87:3d:64:
86:95:07:0d:d0:3e:2a:04:93:c5:c7:1a:82:59:f2:
1a:34:39:c5:fc:7a:f3:34:3c:50:a3:fc:6b:87:27:
20:c9:6f:6a:8b:31:b2:1a:dc:ca:a4:3e:08:04:56:
db:2f:5f:d5:32:5e:83:f7:f3:94:58:12:26:08:40:
a3:ef:54:a6:30:a2:c0:9d:72:70:92:4f:f7:35:27:
37:aa:ef:40:db:42:dd:16:8e:57:e4:80:d2:92:20:
4b:e6:b5:9b:eb:54:af:03:95:56:47:60:c4:12:fd:
88:f2:b0:07:f7:c6:02:d2:60:9d:1b:10:b6:43:08:
3a:4f:27:41:5a:af:e2:75:96:48:36:d0:b9:5a:03:
93:05:e7:3c:1f:cc:12:b9:62:52:27:6b:2f:8a:33:
98:d2:06:a5:37:3f:32:4c:bd:a4:5c:82:b6:50:55:
b9:83:51:28:eb:ff:1e:58:5e:4c:f1:a6:7f:04:c6:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1E:BF:6D:16:60:E2:6A:69:35:9D:91:9A:43:EA:6F:E1:27:F4:59
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:30:b0:29:c0:6c:46:36:91:0a:b3:98:20:99:0c:c2:5c:a9:
51:e4:26:a0:2a:a0:07:db:62:63:bf:77:b2:59:09:2f:10:27:
29:36:84:99:4a:ff:e3:8e:31:af:4b:b7:52:95:51:11:9e:f8:
1a:c9:e1:11:01:c5:74:3c:1a:e1:5b:06:25:6e:8e:8c:53:70:
71:c2:a4:2a:39:70:09:27:78:4b:8c:4b:1a:62:fc:a0:01:b9:
94:38:d1:10:d3:2c:aa:7b:5e:d8:c7:b7:2c:16:39:59:87:6a:
39:06:83:8e:9e:ee:cb:68:98:9c:75:6d:eb:d1:29:a3:29:46:
2c:4e:e7:15:c4:5a:93:15:aa:a4:ca:43:2b:06:5f:06:7b:32:
c1:d1:34:2d:cf:09:ca:d3:39:07:85:2f:07:66:18:97:31:fb:
e2:5e:fb:fd:6f:7f:39:0c:a1:d7:04:03:f0:da:dd:2c:ad:1e:
82:ed:ee:25:cb:b3:a7:90:40:a6:31:12:33:00:38:c1:68:d4:
af:1b:81:f5:18:0e:80:08:31:00:7e:f8:03:ae:bf:ca:13:93:
ed:ab:71:bb:6b:6c:55:94:11:95:90:1c:b1:09:ef:7e:21:8d:
94:3e:14:72:97:8b:f9:b1:35:53:a0:9e:f6:42:cc:61:c1:58:
24:50:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:47:39 2025 by rpki-client