Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: gL0terC0FbtVy7y4uYSY7P4hv7C9QRwz6BYJLiwbReA=
Subject key identifier: 9B:6D:64:9C:0D:A9:59:25:EC:BD:C0:5C:E8:F8:15:72:B7:24:CE:F9
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 01985CECBF752F6FF6CE0E182ED86778931C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0B1A
Signing time: Wed 30 Jul 2025 20:01:16 +0000
Manifest this update: Wed 30 Jul 2025 20:01:16 +0000
Manifest next update: Thu 31 Jul 2025 20:01:16 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: Lb01HJGMltZ68lhgseueNwu8h+J5m1h1qfhAZZinb9U=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:ec:bf:75:2f:6f:f6:ce:0e:18:2e:d8:67:78:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jul 30 20:01:16 2025 GMT
Not After : Jul 31 20:01:16 2025 GMT
Subject: CN=9b6d649c0da95925ecbdc05ce8f81572b724cef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:1b:f6:5b:25:4b:eb:d1:b9:76:a7:bf:8e:
cb:82:61:e4:b5:c7:63:5a:10:54:95:b6:86:c9:78:
6d:06:fb:b9:44:fa:d0:5b:2f:bf:ea:5a:f6:2d:e6:
eb:c8:31:f4:57:d7:75:04:19:69:7a:58:8a:ed:31:
73:4c:df:89:48:2e:fe:3f:e8:ec:52:40:77:10:08:
f6:61:d5:f7:ee:83:b1:19:3e:17:53:89:e4:d1:75:
dc:4b:ba:5c:13:28:71:51:93:69:5b:19:ff:18:c4:
4e:58:2e:5f:e2:3b:60:72:a4:c3:1d:05:04:b3:04:
3b:ba:97:67:de:ab:8c:82:27:16:82:3b:82:a2:43:
10:00:dd:f4:19:af:61:7a:73:f2:08:88:ed:ae:74:
50:55:33:02:c2:41:30:ee:3c:e5:1f:4e:28:b8:5e:
eb:f8:2b:8a:77:63:21:9c:90:76:54:af:59:91:c0:
38:ca:8b:00:de:c7:29:32:62:be:b6:20:66:81:e2:
8e:cc:ca:ec:fb:da:54:0d:81:b7:62:ed:83:e5:66:
eb:d6:ec:1a:b1:d1:a8:83:ef:b9:c7:23:4d:5c:fe:
b9:cb:2e:a5:2a:c7:8a:5e:82:ee:0a:a4:01:65:79:
b7:bb:09:b7:14:22:d8:85:dd:d2:1d:db:a2:70:0e:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:64:9C:0D:A9:59:25:EC:BD:C0:5C:E8:F8:15:72:B7:24:CE:F9
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1a:66:c4:bf:01:56:fb:9a:0a:c2:e4:20:7f:5c:b2:7e:cb:
8f:16:68:62:61:86:fc:88:67:a2:20:c9:94:76:05:c9:61:33:
a1:c8:8d:40:97:05:29:8e:15:48:7b:23:26:9a:0f:e7:d9:f2:
c7:5a:87:8c:f2:dd:c1:46:30:09:f3:c1:f0:9d:87:28:c6:9d:
f1:d4:d1:dd:e2:be:4c:b9:6d:a0:54:b5:8d:41:6b:dc:9a:ba:
bd:dd:2d:af:eb:58:08:a8:5e:f9:97:06:bb:65:ce:92:1c:37:
5e:86:e6:cf:dd:19:60:b0:ae:6d:ca:23:ec:7a:ff:29:fd:b2:
e7:ae:09:94:8d:59:98:c0:3a:22:d9:36:d2:c4:35:c8:88:0b:
55:21:fd:e7:2e:c2:05:21:6b:af:f9:87:11:2d:60:a2:53:ac:
1f:18:17:d3:3b:c9:f1:46:f7:db:6b:c1:79:32:12:d0:81:9c:
b9:78:cc:e3:fb:78:e3:b5:f5:5b:39:85:2d:48:a3:b0:45:da:
7c:8b:49:20:38:0a:c6:7b:af:6a:0f:c9:fc:20:1e:d5:43:07:
3a:f8:7b:3b:80:44:24:cb:0a:a9:df:43:77:1f:64:d4:af:74:
ab:51:9f:99:b3:f4:e6:7c:52:ca:a9:e1:94:6a:67:36:c0:81:
6b:cb:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 03:52:57 2025 by rpki-client