Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: 3kH73wvwHHcFcMT5FUWDwveGzO8WJx38QA1KK2WnTrY=
Subject key identifier: CD:1A:94:26:2D:C9:11:33:04:24:B2:96:A4:C8:07:D3:6D:7A:72:D9
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 01984AAF058E885F61C67D46291381F65478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 0DB3
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: BwnHgQdnSW_44Zer0BPcUVfjgDQ.roa (hash: b79Q7WZT/53by0ulZoD5j5IcmVLwQi3rmkQDc+HVWZI=)
2: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=)
3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: x8I0daBT+yqSpYxxLc9JB2KpGEFQkSBxW7vB45tDx0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:05:8e:88:5f:61:c6:7d:46:29:13:81:f6:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=cd1a94262dc911330424b296a4c807d36d7a72d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:ad:5b:d0:8c:3b:34:0d:e2:4a:94:bb:f4:
70:93:35:c0:6c:59:0e:33:ce:c9:d1:39:20:69:48:
6c:84:5f:91:4f:3f:11:ad:d7:81:6c:a2:f3:11:8e:
e1:f9:ed:5b:ed:5f:bb:e9:7b:1f:e1:74:99:db:41:
98:74:ab:81:4d:c5:da:a7:20:9e:c1:5d:a2:b1:bb:
e4:23:81:2d:05:38:1d:62:32:0e:b2:dd:74:89:4f:
97:90:2a:2b:da:b5:52:78:73:1f:2b:b2:9e:b4:99:
19:03:e9:7f:76:71:22:7a:1f:d3:89:6e:9f:91:31:
00:f5:ad:28:88:41:d6:51:bc:58:9a:fe:ff:c9:ad:
ed:3b:f9:7d:fb:b4:05:c3:c9:fe:b2:da:f2:65:ef:
51:fe:7c:df:ae:cc:59:fc:e1:0f:23:f3:ca:52:36:
ca:3a:74:11:78:1a:b1:95:ac:e9:4e:4d:44:9b:ca:
f4:ee:77:d2:6f:93:0d:26:44:bb:8a:08:68:c1:d1:
ec:53:ce:e1:63:60:9c:49:94:d6:57:58:33:99:d7:
36:19:b9:ea:12:2d:6c:df:d0:3a:81:db:80:73:92:
b7:ac:58:e3:ae:f1:d4:5c:47:a6:51:27:d5:24:d6:
57:c9:2e:56:13:67:9d:83:54:ef:82:26:9e:e2:b5:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:94:26:2D:C9:11:33:04:24:B2:96:A4:C8:07:D3:6D:7A:72:D9
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b9:31:e0:1d:2d:b4:bb:73:32:44:38:b8:b7:53:e4:8b:c0:
64:8a:77:ed:03:e2:0e:dc:bc:c7:bf:fd:7a:cf:57:7f:7b:b6:
6c:12:c4:23:86:9a:6d:bd:3c:0e:c5:a5:68:9d:bd:71:8b:f8:
f7:43:48:95:e1:12:5c:9d:c0:31:36:de:d7:96:d4:fe:36:43:
3a:d0:b4:79:33:4f:35:d7:2c:c9:5a:36:2f:fe:b4:4a:7f:9d:
98:6a:4c:db:07:4f:9e:b7:88:96:5b:3e:87:1d:9c:a0:36:ec:
57:0e:a5:93:c9:8f:69:a3:99:10:61:5a:6d:c3:47:37:ef:77:
89:05:fe:80:6b:a8:15:9e:dc:0d:ca:14:be:17:fe:a1:d8:be:
bd:e6:fe:07:7b:48:e8:e0:bc:0b:ba:94:6e:79:49:35:0b:6d:
f5:fd:68:8d:4b:b3:22:06:2e:ca:04:37:05:f0:24:bd:cc:21:
41:60:65:e2:7a:c5:02:43:eb:72:cd:63:24:2b:56:47:95:50:
ca:1e:30:eb:6b:9c:18:ee:27:9a:bc:09:85:6a:b0:e8:73:de:
97:39:04:cb:9d:2f:60:f6:d6:93:cf:0a:b6:ad:98:64:9e:c9:
98:42:c4:18:98:bb:ab:7a:f7:e0:44:46:15:af:9c:2c:7c:62:
d6:63:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:25:01 2025 by rpki-client