Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
File: rz9wBQP0ByCoL3bvFc2mICLx-ak.mft (raw, json)
Hash identifier: 6g9kphIKFC5z1jtgKznp6LWkhwk3jE4K8izFkREy9rg=
Subject key identifier: EC:51:9F:D8:BA:21:CD:09:CA:FD:49:4A:1C:B0:5C:A5:37:EA:29:C3
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial: 01984DE6B74EF0B139FD01108315755C5992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
Manifest number: 0CC9
Signing time: Sun 27 Jul 2025 22:00:22 +0000
Manifest this update: Sun 27 Jul 2025 22:00:22 +0000
Manifest next update: Mon 28 Jul 2025 22:00:22 +0000
Files and hashes: 1: rz9wBQP0ByCoL3bvFc2mICLx-ak.crl (hash: FNGmlOKiIP7J82SoyQMm75pi2UEZ6oMqLXaw4jOsUKA=)
2: zHaHHwpWkvwMR4EBkRKLj2nL7g4.roa (hash: dEmOAj28ftGGpyQRnDV2quElsA9Yrv1JJIOo7l9XjEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:b7:4e:f0:b1:39:fd:01:10:83:15:75:5c:59:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Validity
Not Before: Jul 27 22:00:22 2025 GMT
Not After : Jul 28 22:00:22 2025 GMT
Subject: CN=ec519fd8ba21cd09cafd494a1cb05ca537ea29c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:97:eb:1b:2f:58:5c:99:08:c6:c1:72:54:
4f:20:12:a3:d8:6f:1f:53:d7:d9:81:85:fe:cb:9c:
93:5a:fd:33:96:7c:1e:f3:43:58:8f:e0:0f:56:23:
15:5e:45:9b:e8:93:76:29:3d:a9:e1:96:13:94:67:
21:63:b8:e1:dd:5a:cf:77:f1:25:43:4e:78:c1:87:
ed:8b:34:d5:52:00:6c:78:21:9c:62:b1:5c:6b:79:
47:c8:40:4e:2c:a5:13:f8:99:cd:5c:bb:63:65:78:
15:b9:ff:1e:ec:7f:a3:5b:be:23:83:59:9d:65:a2:
3c:0c:b3:49:94:69:c9:43:42:69:11:d7:6a:13:de:
62:32:83:6d:4e:38:7b:00:6a:6e:a5:7c:3a:cd:67:
e7:aa:47:a7:51:42:1b:e7:e3:d7:5d:82:bd:7e:49:
de:cb:08:54:82:6f:2d:8a:b1:1d:09:05:7a:98:80:
01:0e:09:8a:e9:e2:b6:a0:92:43:5a:8d:df:cf:14:
b8:39:d5:4b:6d:c9:9d:d2:41:58:2e:d0:5a:59:76:
42:e7:61:24:a3:a0:1c:89:73:19:86:e0:53:30:85:
41:60:8f:c7:0e:35:b5:06:dc:19:43:82:2f:f6:35:
44:65:f7:bd:dd:a6:1f:b7:42:7d:ce:ef:26:79:fc:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:9F:D8:BA:21:CD:09:CA:FD:49:4A:1C:B0:5C:A5:37:EA:29:C3
X509v3 Authority Key Identifier:
keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:0e:5c:5e:2c:9e:90:b1:cd:d1:1b:ae:66:f1:a1:61:b3:
15:85:82:61:37:67:97:ad:4e:f7:46:65:ac:cc:3a:ba:84:ca:
3f:b2:09:0e:56:e5:98:95:86:ca:96:44:28:9e:aa:bd:c1:98:
62:8a:6b:80:e1:de:bc:f4:c3:41:4c:8f:ab:75:93:29:38:fa:
ba:07:bd:96:fd:0b:29:9a:f0:48:b5:d6:10:b0:49:a6:11:ea:
3d:41:7e:79:5d:8e:9d:58:dd:d6:48:d2:f3:8b:1e:68:d2:8f:
d0:16:d3:a7:7e:36:99:6c:e6:00:f6:06:c7:30:95:0c:a4:5f:
f2:ac:3a:32:db:bc:64:28:f7:8f:db:57:4e:5d:23:35:46:8c:
55:41:fd:22:d7:b2:92:bd:0a:e8:45:dd:d1:31:f6:ef:3c:d7:
e1:76:78:2f:64:82:44:d0:af:84:e5:c3:f3:6e:d1:2d:ca:4d:
3c:89:76:1c:ac:7b:e4:8a:41:a5:3c:c7:cc:2b:db:18:1d:da:
54:94:c9:5b:1e:37:ec:a9:8f:9a:3f:aa:be:00:5c:3b:42:61:
99:a7:13:1e:81:f0:4d:44:43:9e:42:1c:a2:82:83:81:44:45:
1a:e4:97:01:43:5f:0d:bc:9e:4c:a9:c7:73:9c:07:5a:1f:07:
a1:b3:3d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:09:43 2025 by rpki-client