Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: Rz358qPvWablBmIomCISDiM2F6esQiVzkONWEpeO2FE=
Subject key identifier: 3D:7B:5B:1D:03:A0:02:54:DD:36:01:C7:69:B4:B6:71:8B:3C:96:BF
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 01983FBD4FFFEF660955F5815B399490BBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 15F9
Signing time: Fri 25 Jul 2025 04:00:27 +0000
Manifest this update: Fri 25 Jul 2025 04:00:27 +0000
Manifest next update: Sat 26 Jul 2025 04:00:27 +0000
Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: 89BEFitdqNusKWeNve5JCsPGg1Usu05uqH6zSU0M6ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:4f:ff:ef:66:09:55:f5:81:5b:39:94:90:bb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Jul 25 04:00:27 2025 GMT
Not After : Jul 26 04:00:27 2025 GMT
Subject: CN=3d7b5b1d03a00254dd3601c769b4b6718b3c96bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:03:0b:fe:df:4d:d9:a4:95:90:db:8c:b9:
ba:3c:58:29:cd:ac:39:e7:49:e0:d9:f4:e3:09:06:
af:b7:c9:e6:64:02:39:e1:5c:ec:ca:7c:07:9d:c4:
f5:75:4e:60:25:3a:06:5c:fa:90:b6:23:d9:2d:89:
4f:e6:87:4d:79:51:42:db:86:29:3a:53:83:aa:87:
f6:3a:a2:b8:d1:29:dc:8f:ba:9c:d9:0b:ed:93:9a:
70:28:02:aa:68:45:5d:73:92:eb:0c:fa:9c:9d:66:
14:0a:8e:9a:f1:67:8f:12:56:0d:a1:08:50:87:4c:
71:85:0f:f9:d0:6f:c9:fc:39:d6:22:cc:7d:a4:c6:
75:7e:42:48:4a:38:61:b1:f9:d5:9e:f6:19:02:4b:
e3:0c:2c:91:5e:63:ac:39:f3:fe:b3:3f:8d:c9:ea:
c4:c2:13:d6:81:6d:c4:df:0e:e1:aa:56:36:8e:9c:
74:9d:44:6e:78:5b:17:3a:23:00:a1:3e:5f:b7:6b:
bd:13:71:d8:98:9f:0d:66:5f:d5:c2:0d:da:34:5a:
1b:98:2d:e6:07:d6:f1:5e:08:16:bc:77:5e:23:bd:
8e:ed:c5:b7:a7:51:e3:c9:b9:f0:2c:b0:7d:59:c0:
5e:f3:37:e6:d7:7a:93:85:95:ba:b7:76:09:41:90:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:5B:1D:03:A0:02:54:DD:36:01:C7:69:B4:B6:71:8B:3C:96:BF
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d5:e4:70:98:61:3d:c6:82:9a:0a:41:e4:41:31:bf:94:c7:
d8:79:8d:8e:95:86:57:1f:12:fd:d8:eb:4d:00:d6:ec:97:83:
de:50:75:fc:be:59:14:79:3a:5e:01:c7:ea:de:e6:4c:4a:13:
b2:40:0a:31:f2:92:df:66:60:b1:b5:84:40:93:b6:01:40:ed:
41:e0:6a:1c:75:5f:5b:42:87:ac:18:91:b3:6f:41:8f:59:68:
c9:5b:26:25:10:9e:b3:dc:4f:45:1f:e5:33:26:86:dc:2d:7e:
7b:34:54:83:82:1c:10:56:43:6a:fb:11:80:21:45:5f:61:74:
54:2a:68:13:2e:af:2b:52:43:6f:84:62:b3:47:08:13:a7:15:
f4:34:81:d2:60:7a:da:6d:11:b3:db:d6:6e:56:bb:7d:66:26:
90:6c:2b:df:c2:a8:73:ef:e0:1b:a0:33:70:3b:c7:2d:ed:30:
31:50:a2:16:16:83:37:43:f0:d6:cb:37:69:a0:a9:2a:3c:fc:
72:a9:ba:0d:57:05:f6:69:a0:f8:a5:3e:af:67:fc:b2:25:84:
f1:a2:03:60:90:0d:48:a7:f8:36:13:f1:c9:59:50:be:db:7b:
12:35:49:8a:df:bd:3d:3e:11:ef:e0:a2:63:c5:3a:50:c6:8b:
4a:5b:a5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:49:10 2025 by rpki-client