Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: vzfNtaOU8ajN+/8gD3J1osQBHr8cWGiuvYU6Ia2QnVc=
Subject key identifier: 8F:24:12:E4:65:DF:7B:B8:D1:DF:3A:26:B0:C4:9D:7C:92:8A:95:2D
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 01984B8A9B549ECFC3927A56DAF7FC9225E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 1435
Signing time: Sun 27 Jul 2025 11:00:31 +0000
Manifest this update: Sun 27 Jul 2025 11:00:31 +0000
Manifest next update: Mon 28 Jul 2025 11:00:31 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: QIkMkph9EiD6VWAWkFtMRnVTZsC6Ur8HNnqSDMV0ChQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:9b:54:9e:cf:c3:92:7a:56:da:f7:fc:92:25:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Jul 27 11:00:31 2025 GMT
Not After : Jul 28 11:00:31 2025 GMT
Subject: CN=8f2412e465df7bb8d1df3a26b0c49d7c928a952d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:04:b7:28:a7:78:d8:fd:2b:f0:ce:f2:33:
fe:3d:ec:ef:07:ae:fb:cd:e8:fd:0e:6a:52:35:f8:
d8:95:d9:e8:63:96:31:b8:d7:e5:c4:52:8a:89:51:
90:85:14:c7:9f:03:7b:f6:8b:1b:69:37:01:c9:fa:
97:1f:d7:c6:74:0c:92:b8:3e:34:95:1b:5a:a9:22:
d9:43:88:bd:d4:cc:6c:33:97:c8:fd:7e:f5:cb:eb:
f3:c7:ff:87:a8:20:8e:f8:59:29:79:e2:25:2a:a1:
4b:96:22:59:80:c3:07:d8:6c:4b:25:05:13:0a:40:
88:6b:f5:79:75:24:89:78:0d:69:8c:d9:de:9f:dd:
8c:d5:90:1e:8e:e7:30:b6:ea:73:90:e6:7e:08:a8:
81:39:99:61:e7:3b:97:d5:7d:e8:c1:1c:96:23:93:
6b:70:6f:4b:c5:9d:f2:95:38:56:b0:5a:ac:54:d7:
55:7d:dc:ab:c0:db:19:ab:69:dc:71:d9:47:6d:36:
fd:51:74:74:4a:c2:16:c6:21:10:61:9d:cb:6a:b9:
4b:75:82:51:47:92:c3:3c:a1:f9:5d:90:57:22:48:
68:8d:cf:35:26:c4:73:77:d5:e2:2b:8a:a9:6f:80:
01:7c:82:d8:d6:d3:41:15:fa:89:ce:2d:eb:5b:6f:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:12:E4:65:DF:7B:B8:D1:DF:3A:26:B0:C4:9D:7C:92:8A:95:2D
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:e5:1e:9a:40:1b:b5:d3:90:0c:ba:8d:9d:ad:39:cf:0c:
d0:89:c8:73:34:39:d7:9f:d3:d2:68:43:19:41:2b:de:64:fa:
b9:fe:34:e6:75:f1:19:ec:3c:4e:05:99:c7:b7:b8:06:20:2e:
89:d5:ca:ba:e2:d2:3f:56:fc:f2:c5:75:91:d3:3e:77:c1:21:
5d:8e:8c:56:5e:cb:60:f5:40:a6:ec:58:63:23:ab:02:5d:a1:
cc:89:cf:c1:7b:44:25:fb:f9:43:90:42:3b:a8:77:66:dc:61:
fc:1b:e4:b8:f8:34:b7:34:1e:df:67:3a:48:9c:ad:01:9b:ec:
27:a0:cc:ba:65:2f:fc:25:93:9d:08:e1:09:1d:1e:46:84:2f:
61:93:2a:b4:4f:de:c2:6d:19:fc:c0:06:1c:bd:5d:47:0a:49:
22:e4:14:b4:00:92:ab:52:04:a1:17:e4:97:e7:c6:15:0e:9e:
73:f0:ce:81:6e:27:cb:c5:85:ac:c0:5e:38:ae:a7:c8:11:4c:
84:cf:af:e5:b1:bd:b4:aa:35:68:36:7d:95:97:92:de:92:bb:
fb:99:48:08:df:58:e6:ed:b4:62:8d:07:8d:cf:0b:95:54:21:
c0:97:ee:f8:46:3c:a1:73:56:e4:16:4e:64:3d:b6:f7:ac:68:
b1:29:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:46:27 2025 by rpki-client