Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: ZMFUr/8ixUYU7viBxKEsJeQcNttHlWaSX09JBJbx5FQ=
Subject key identifier: 02:EC:83:72:C4:C5:28:E1:D0:E3:FE:86:6C:A7:D7:19:CF:1B:A5:D6
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 0198507A18AAE92523D3209B9E8EF0DDBC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 0F47
Signing time: Mon 28 Jul 2025 10:00:35 +0000
Manifest this update: Mon 28 Jul 2025 10:00:35 +0000
Manifest next update: Tue 29 Jul 2025 10:00:35 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa (hash: U8WrE9TGTdUjZFCB6O02ti+OPe0fB0Uw0kiiaV4z4N0=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: NLXsWc0G7sEw3ZZONSJppGQjVhg2mXko/tcrx9SW4NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:7a:18:aa:e9:25:23:d3:20:9b:9e:8e:f0:dd:bc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jul 28 10:00:35 2025 GMT
Not After : Jul 29 10:00:35 2025 GMT
Subject: CN=02ec8372c4c528e1d0e3fe866ca7d719cf1ba5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:16:95:9b:64:42:46:e4:46:8d:28:c4:76:
be:ed:73:f5:38:11:bb:92:2e:be:68:7f:b2:6f:45:
8e:48:e0:c3:95:86:d1:67:23:a2:28:5d:88:4d:cc:
df:3e:08:8b:f8:3b:8c:cc:36:0d:df:a0:7b:fa:12:
ef:ea:54:d7:1a:77:43:70:98:77:84:0e:d2:ed:47:
0b:ee:b9:3f:da:34:54:aa:01:25:67:b5:97:b0:8b:
f9:06:e3:d8:e1:04:a2:a0:67:36:2f:a3:40:ce:24:
c6:33:76:6d:25:98:79:b1:43:b8:a2:30:83:54:7a:
24:7b:ef:ea:c0:8a:ce:03:5b:de:82:3e:cb:10:79:
cb:c7:af:a3:99:ea:3b:48:3e:ef:ed:8c:d2:e1:50:
b0:35:5d:6d:5d:6e:4d:37:18:94:f6:2f:ca:f7:32:
92:a7:e0:d2:93:b8:c2:be:44:2b:d4:51:d5:b1:3a:
51:ea:72:5a:47:85:d0:7f:dd:80:16:7c:02:09:b1:
9a:c4:9a:7a:64:e0:23:60:eb:56:f7:7e:04:d6:09:
51:3e:5b:33:84:6d:91:45:f8:a2:f2:c9:02:42:9f:
5a:21:a0:ba:63:a1:6b:5d:6a:b7:40:7e:54:e2:79:
ef:f8:0a:92:84:e5:34:d3:33:50:5f:4b:44:57:62:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EC:83:72:C4:C5:28:E1:D0:E3:FE:86:6C:A7:D7:19:CF:1B:A5:D6
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6b:9f:cc:80:1c:00:69:b5:d8:15:28:fc:3c:e4:ed:1b:1c:
5c:b1:8b:bf:eb:8f:21:cb:26:0a:74:2a:b5:5e:6c:d5:e7:52:
c1:3c:39:77:8f:e3:a9:a5:cb:6d:69:2e:4a:c7:5b:ca:9a:a4:
57:3c:d7:fc:61:8f:16:32:83:88:f2:6e:00:94:23:5e:68:53:
3a:dc:58:5d:c4:8b:fa:b8:fd:db:be:07:96:a4:46:17:56:1b:
55:00:2b:97:d7:db:b7:f9:a8:2d:f4:85:78:38:cf:32:fa:64:
ad:69:6b:a2:d2:bf:10:7a:26:54:e8:c0:4a:7c:7b:51:fc:2a:
ed:4d:a9:84:ae:89:37:8d:00:ca:78:90:5a:7f:42:15:8b:51:
6a:84:71:42:d6:dd:f5:15:92:71:42:ea:71:80:1b:b7:5a:5d:
dc:81:49:88:65:9c:01:98:13:be:e6:d0:48:91:82:e5:a9:8f:
e4:d3:d1:bb:42:17:70:83:20:50:63:05:17:76:f0:3d:9f:f7:
1d:17:a5:b1:97:05:48:3b:2b:70:88:f6:bc:0d:dc:25:59:82:
d9:25:3e:55:70:e0:cf:52:ba:83:73:5b:28:8c:7d:31:d7:30:
5d:f4:e6:f0:dc:73:2d:a4:1f:7a:f8:23:25:5b:98:15:04:70:
0d:33:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 16:25:00 2025 by rpki-client