Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: sLFhaJ6xetyNP3iQdD3ZWOLWXqIHO/RuykQUgAW3UUs=
Subject key identifier: 3B:9C:38:DF:51:62:D2:02:A9:8C:23:CB:E7:D2:42:C2:36:1D:A6:36
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 0198496591F2491414B98E3F4B789499E7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 1303
Signing time: Sun 27 Jul 2025 01:00:49 +0000
Manifest this update: Sun 27 Jul 2025 01:00:49 +0000
Manifest next update: Mon 28 Jul 2025 01:00:49 +0000
Files and hashes: 1: vHQRV0jRUXExLLAYBdY2ODpzWoo.roa (hash: 7UhAMCr3OjHllJdnfdmjdJInrKVauXU3M4e5nn0fWuA=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: m3HT5XaP8yE6ValFW6wDU8OiXb0AkTMbzUvFYaiAkqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:91:f2:49:14:14:b9:8e:3f:4b:78:94:99:e7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Jul 27 01:00:49 2025 GMT
Not After : Jul 28 01:00:49 2025 GMT
Subject: CN=3b9c38df5162d202a98c23cbe7d242c2361da636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:43:60:0f:27:bb:67:19:08:af:5f:fa:eb:73:
48:71:6b:2a:bb:8b:22:01:b5:67:a7:49:e9:19:31:
0f:8e:c0:03:ac:72:a0:af:f2:c2:b8:3a:f5:80:f0:
b4:fe:92:fc:b5:87:f0:35:9b:c1:ae:e3:e1:58:db:
ef:c1:0a:1d:31:45:8b:4f:da:e2:2a:d6:81:e1:5c:
f7:69:47:0b:91:7a:d7:2f:cd:2d:42:6a:54:96:49:
ed:5b:54:b0:d2:32:10:dc:ac:0e:f5:ff:96:d6:81:
36:de:70:2c:86:db:a8:52:3b:41:46:1e:a6:81:94:
50:96:0c:e8:c1:87:22:d9:d4:4c:f0:d4:fd:96:35:
fa:66:81:f9:4e:55:a1:8e:16:93:24:9b:0c:46:d2:
1a:79:88:91:a6:97:10:86:ce:3c:73:7d:54:ac:00:
64:a7:8b:78:2e:ae:02:6b:c7:68:0f:e1:65:c1:c1:
24:71:ee:02:5f:9f:1f:2a:d6:b7:e6:75:54:5c:c3:
c4:d2:35:bc:28:3c:e7:d0:cf:30:1d:14:72:9e:b6:
05:aa:3d:a8:00:4a:d9:79:14:4f:13:84:9c:2e:6e:
54:cf:a9:f9:69:e3:43:6f:29:f6:d0:e1:fe:f9:10:
27:a3:d8:0c:a8:d7:0e:30:32:64:89:b2:1f:4e:f9:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9C:38:DF:51:62:D2:02:A9:8C:23:CB:E7:D2:42:C2:36:1D:A6:36
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9e:b2:fa:5c:56:93:c3:47:0f:8a:30:fd:f1:74:c9:2e:25:
ac:5c:e8:cb:75:fd:98:cf:3e:e9:19:a2:19:fc:28:20:fb:0b:
25:1f:93:17:70:88:24:6d:36:3a:50:9d:ad:30:dd:b8:e5:22:
77:a9:9e:c2:62:99:8a:1a:6a:52:8c:41:1e:be:bf:9b:eb:4d:
f8:43:d8:07:b2:53:ac:87:ca:05:6e:38:a6:94:30:30:d4:05:
d7:f4:58:f7:66:67:f1:1a:fb:b3:b1:09:90:20:cf:6e:0a:25:
45:a1:26:da:2c:fb:91:c0:ae:71:94:4a:67:66:91:85:05:46:
72:e8:b1:55:07:49:d7:e7:5d:15:dc:a5:eb:f4:d7:27:78:c9:
06:49:f8:dd:b3:3c:08:d2:6e:7d:49:38:6f:66:b2:1e:27:bd:
d1:a1:4e:24:ea:79:67:d7:7d:6e:12:21:59:eb:60:c8:8e:80:
96:8b:a0:e1:da:1a:4c:8a:e6:86:01:47:d7:b6:75:dd:39:b8:
1e:2b:d8:d4:f5:bc:17:6a:42:d8:3a:01:05:50:1d:4d:cf:27:
ca:bb:a8:9f:01:a3:74:c6:bd:98:17:c8:32:53:8d:84:93:30:
db:b0:d2:4a:11:9a:f4:c9:ae:b5:8a:48:1e:a9:66:77:e9:19:
b3:ad:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:00 2025 by rpki-client