Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: 2uKDzeAAe5C/HSwrpHI6tF6dwcj2G7FKvoO+5Rm0cV4=
Subject key identifier: 04:F1:BF:54:04:32:45:C5:1A:C5:58:53:27:3E:25:E7:5D:04:31:5A
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019845F6EF4E45FCFC465F6A88EADC6378F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 0320
Signing time: Sat 26 Jul 2025 09:01:07 +0000
Manifest this update: Sat 26 Jul 2025 09:01:07 +0000
Manifest next update: Sun 27 Jul 2025 09:01:07 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: HQEUH/Tnlb/t92FuLCrNWolht6G84JjOrKwBUojDRBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:ef:4e:45:fc:fc:46:5f:6a:88:ea:dc:63:78:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jul 26 09:01:07 2025 GMT
Not After : Jul 27 09:01:07 2025 GMT
Subject: CN=04f1bf54043245c51ac55853273e25e75d04315a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:f6:d1:c4:dc:5c:4e:a3:38:8a:75:df:e6:
91:a0:e5:10:53:52:13:36:41:25:7a:9a:c1:94:b8:
4f:53:ad:a1:62:1b:23:d8:25:16:8c:62:5a:cf:52:
47:70:40:98:51:8f:d0:fb:b8:df:9c:ff:c4:f5:a4:
e6:07:bb:5d:b2:b4:13:68:8d:d5:8e:3b:a2:2e:52:
ee:ce:ae:b4:ed:56:51:20:a9:32:4f:4a:4a:ff:7b:
7c:34:9c:55:e2:2c:f3:af:48:0c:d3:2e:36:5f:67:
8d:24:85:de:4e:2a:5c:5a:49:2d:8e:f7:cf:ac:c2:
84:dc:5b:be:87:39:c1:55:52:ac:bb:f3:e4:9a:7a:
c2:d4:df:3f:78:46:9b:0c:89:56:8a:b9:0d:03:79:
cf:4d:2a:ca:96:fa:6f:ef:af:ba:5d:41:21:e4:b5:
71:a6:74:ef:3a:63:cb:9b:2e:5b:82:79:50:b2:f4:
f0:29:70:f1:3a:0e:f0:1a:ee:41:de:e1:7f:9e:7c:
12:69:b7:28:eb:51:8a:51:2a:f6:f9:65:68:31:7a:
f6:9e:76:fd:a5:f9:32:6d:32:fe:fa:03:bf:1d:fc:
ad:d7:c3:ff:05:68:0d:f8:09:7e:1a:b3:33:4a:1a:
82:47:b4:82:56:0f:85:c4:e0:2b:a9:22:ed:67:66:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:BF:54:04:32:45:C5:1A:C5:58:53:27:3E:25:E7:5D:04:31:5A
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:05:c9:d4:92:a8:39:c2:ab:d3:bd:1a:42:66:9e:5c:3e:cb:
f4:59:b7:45:9b:60:e5:2a:40:71:7e:21:ad:56:14:fa:7a:54:
be:8c:9c:58:23:5c:bf:67:33:e3:4f:85:f3:5d:dd:1b:00:9b:
ae:34:ff:a0:a2:96:01:37:65:f2:38:f5:49:3d:0c:58:85:60:
f1:22:ba:77:88:63:c0:ac:13:d8:97:7d:57:a9:0d:7d:da:35:
1e:34:43:87:80:82:68:23:e1:3b:2c:c6:8e:03:54:08:e9:68:
b3:d1:d6:04:ff:81:d7:0a:03:6e:f0:ff:29:e7:13:25:d4:76:
05:8e:9f:89:f7:25:54:25:08:59:2f:db:d3:34:9e:28:7f:3d:
c1:95:c3:54:29:86:25:97:92:55:51:ca:56:4a:fb:dc:0e:08:
7c:c0:b9:c7:b5:25:bf:1d:20:5a:09:8f:39:c7:e2:2e:05:56:
0b:34:c3:b9:38:60:f3:66:ff:f9:ef:d5:75:91:94:4e:48:27:
d0:a7:5e:55:9f:ef:94:74:a8:3e:b5:b8:df:5d:96:4c:cd:ae:
47:e5:a6:c9:40:7c:12:08:a8:57:4d:ec:df:86:46:f0:07:46:
01:a5:35:b1:ca:76:0e:de:92:41:48:04:ed:fe:43:a5:1f:62:
ce:51:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:50:34 2025 by rpki-client