Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: ZiDdzzDoQ1sevA7StntIbK0+5oaC8IBEa/owz8mw2RU=
Subject key identifier: 31:40:3A:9D:15:A4:D1:E4:B4:7B:60:28:74:C0:24:EE:D1:57:40:D7
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 01984F310D4C54C0E27B239A684FF383FDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 10D9
Signing time: Mon 28 Jul 2025 04:01:11 +0000
Manifest this update: Mon 28 Jul 2025 04:01:11 +0000
Manifest next update: Tue 29 Jul 2025 04:01:11 +0000
Files and hashes: 1: cTuB-ABZUf0AWR__0VF3CDRNo30.roa (hash: YL1vZUc95MXZVuCPTTh8OWx5ow2ebJPHUlFFR9eeynk=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: AuaVTfsNzuEZUOa5WKb23/WMEHa9P2xmcqzn0eqqF9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:0d:4c:54:c0:e2:7b:23:9a:68:4f:f3:83:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Jul 28 04:01:11 2025 GMT
Not After : Jul 29 04:01:11 2025 GMT
Subject: CN=31403a9d15a4d1e4b47b602874c024eed15740d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:78:f6:5e:42:c9:2f:8e:78:43:46:ea:8a:
1e:e5:63:e5:9a:6e:99:b7:b3:e6:4d:63:2d:f3:29:
c3:df:7a:d0:92:2c:44:7c:5b:8f:2a:da:61:99:5a:
01:5c:9c:37:83:4e:bb:ed:c4:34:41:57:1e:f5:eb:
87:22:00:7f:76:00:c6:7d:e0:8e:6a:9b:7f:f4:9d:
4a:99:a3:93:62:28:da:ce:7c:63:2e:bf:0f:b2:da:
75:20:b6:0a:88:11:59:c2:0e:ee:df:a6:79:0a:29:
97:22:4c:01:a8:c7:a2:12:9f:f3:06:80:4a:98:24:
fc:18:b7:d4:69:5e:8a:b2:45:21:16:22:17:c7:5b:
0e:88:5d:0e:48:81:3b:ee:c4:30:a7:0b:27:16:23:
11:d2:14:f2:35:23:bb:3d:91:34:33:ef:f6:39:a9:
e9:c9:8d:40:52:12:86:0f:5e:7e:38:68:7c:da:8a:
7d:d5:38:41:9b:d0:0b:84:0b:82:a8:fa:b8:4d:2e:
8c:08:a9:49:a4:fe:fa:6c:6a:7e:68:24:2d:a9:71:
ee:e1:a7:a7:4c:05:e0:23:23:10:93:68:8b:1a:f1:
b0:41:9b:9b:df:cc:c2:9e:08:ea:09:7f:9a:f8:7a:
3c:6c:6b:93:7f:4a:1f:55:49:51:19:36:7f:57:48:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:40:3A:9D:15:A4:D1:E4:B4:7B:60:28:74:C0:24:EE:D1:57:40:D7
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:21:be:b1:c4:26:09:bd:ca:d1:85:af:d4:ec:d9:e7:d8:a4:
7f:d3:12:26:ab:40:94:4f:fb:98:45:0c:67:cc:a7:dc:ee:90:
53:c1:ec:43:7f:56:5a:74:b6:f9:f9:e2:3f:dd:5f:cb:6a:ab:
5b:e0:5f:7d:12:a9:89:7b:b8:80:e6:1d:3e:57:8c:14:b9:8b:
ba:26:03:74:75:a7:0c:ad:ac:80:9e:c4:ea:00:af:73:81:bb:
39:42:2c:83:d7:cb:b4:06:46:4c:13:5b:a8:d2:9f:f4:e8:43:
72:78:9e:76:2d:0e:52:77:4b:2f:34:03:a8:48:43:db:89:09:
6e:cc:b9:35:0f:51:35:73:ef:1c:f3:25:78:1b:15:ab:64:47:
bb:65:6e:98:df:35:c4:8d:d0:30:36:01:27:a9:3b:25:ef:a9:
dc:53:79:79:d2:e0:35:7c:e4:01:f9:28:5b:74:56:2c:31:0f:
9a:36:ef:54:c0:48:f4:53:b1:cc:7b:04:b3:60:31:2f:ff:d0:
20:e8:ec:c5:86:d9:b0:77:ce:2f:a1:01:c3:cc:2d:71:c6:90:
45:c0:10:f8:0d:bb:a6:1a:1d:ed:54:89:97:1d:a7:1c:42:7f:
8d:04:39:11:6a:54:82:2a:da:a5:7f:08:4d:3f:64:d0:31:d1:
89:51:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 11:04:50 2025 by rpki-client