Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: sNLbvHPxeDlroGKIsnIE7t8SvfhlI+o0uWkyJntDTh8=
Subject key identifier: A2:9E:B7:BF:51:46:E7:43:20:FE:68:5C:5D:52:BE:48:01:55:1A:7B
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019846D26E77E95B2C2E37975FE49FBC9ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 13:00:52 +0000
Manifest this update: Sat 26 Jul 2025 13:00:52 +0000
Manifest next update: Sun 27 Jul 2025 13:00:52 +0000
Files and hashes: 1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: Izrud0THhUkgx2t2nEd+7u3AUMhzaoj0PMon3XcKY9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:6e:77:e9:5b:2c:2e:37:97:5f:e4:9f:bc:9e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Jul 26 13:00:52 2025 GMT
Not After : Jul 27 13:00:52 2025 GMT
Subject: CN=a29eb7bf5146e74320fe685c5d52be4801551a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:03:42:02:84:37:25:73:1a:77:bf:36:ce:
c7:75:0d:6f:73:ce:23:df:7f:c4:21:49:c6:71:35:
39:0e:33:1f:b6:3a:3c:de:5a:17:39:73:d6:da:e7:
15:7c:8c:56:87:61:db:15:94:83:91:70:f2:8d:c2:
8b:12:75:d3:65:80:ba:e3:cb:67:86:29:c5:65:82:
67:90:c3:f4:f5:8b:2e:5e:9c:3a:92:47:a9:e1:d5:
09:3c:7a:0e:93:59:d9:25:45:c2:80:23:f3:ed:47:
65:c1:84:92:71:c0:07:e2:c6:0f:6f:7d:a0:ae:24:
dd:0e:df:1f:37:34:59:1d:7f:f9:e8:d9:d7:c6:31:
28:2a:d4:fa:46:02:7c:69:fa:38:72:c3:25:3b:7a:
38:74:d2:7e:4a:dc:9b:61:b7:4c:82:ce:e6:cc:c0:
39:f8:a7:90:bc:13:ed:78:6c:a3:1d:42:72:fe:37:
79:97:bd:a2:ee:bd:47:e0:21:32:67:32:b7:02:99:
09:27:2e:92:63:dc:ce:cf:4d:cd:35:6f:f8:87:95:
da:3d:68:16:f1:19:b5:65:8f:19:92:d5:e6:9c:40:
ba:96:a2:3d:bb:f3:62:9d:24:a3:ba:87:67:cb:2d:
a7:04:5e:5d:88:67:c4:c4:a5:c7:16:b8:64:fe:79:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9E:B7:BF:51:46:E7:43:20:FE:68:5C:5D:52:BE:48:01:55:1A:7B
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4c:ca:31:c8:f0:0d:c3:8d:b4:78:82:93:44:36:a6:16:60:
49:25:36:ae:13:0a:74:75:ae:34:c8:02:4d:1b:83:94:75:c2:
49:40:6a:77:2b:3d:d9:4a:1a:5e:a3:15:53:d9:f7:a9:64:22:
f8:88:f3:9c:6e:1c:89:d3:10:18:94:95:ff:69:e2:8f:11:eb:
26:85:4b:01:a1:67:51:a5:2e:bf:ec:5f:d3:05:23:da:a2:74:
2a:03:9c:9c:fa:a7:10:e5:bc:bd:52:f4:75:24:69:17:74:29:
d2:b9:fe:49:78:6e:7f:53:78:ab:64:6f:a2:00:89:35:c6:db:
d2:af:1c:04:09:e8:4b:40:35:ce:df:48:a0:fe:94:ce:66:bd:
ff:26:c5:66:8c:58:31:9e:03:4c:32:11:90:6f:39:f0:d9:bf:
b3:9a:3b:17:2e:dd:ac:8c:5c:98:d6:be:58:45:b4:6a:b3:e2:
5a:c7:9d:3f:8b:54:3c:07:45:6d:df:bb:69:7b:c6:86:4f:b6:
46:60:3b:21:da:da:e8:4e:87:db:69:b5:2a:63:19:5a:13:66:
1e:8d:5d:81:87:52:85:20:f5:54:69:a8:e6:22:5c:97:3c:05:
6f:48:d1:16:06:44:69:ce:16:36:8b:a6:c9:dc:50:4f:c1:81:
21:af:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:20:41 2025 by rpki-client