Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: 8ttsHE6ne7ApC38brwtIgt0m3rPZP7PzJpjFBTFBIUE=
Subject key identifier: 8F:04:3F:4B:5D:CE:DE:0A:74:49:2D:A1:51:0B:D9:6D:D8:D7:ED:06
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 0198481BB7515587E734F4094EE152DB5658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 04F8
Signing time: Sat 26 Jul 2025 19:00:32 +0000
Manifest this update: Sat 26 Jul 2025 19:00:32 +0000
Manifest next update: Sun 27 Jul 2025 19:00:32 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: 8wMHJ0R/b9IOGtLLLM985Syo6Z3vFQL0yepAqEwXKi8=)
2: qV1VADgnM-UwMyvnzX700wlOQrY.roa (hash: fchq7gmgdQ6iV6UqjjJyNU6Y7myn1bicxh9WArTx5O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:b7:51:55:87:e7:34:f4:09:4e:e1:52:db:56:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Jul 26 19:00:32 2025 GMT
Not After : Jul 27 19:00:32 2025 GMT
Subject: CN=8f043f4b5dcede0a74492da1510bd96dd8d7ed06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:a3:67:71:66:4f:d9:37:4d:17:a9:6f:59:
e9:95:17:fa:32:c7:ae:3f:e3:fb:61:5b:6b:43:f8:
4a:91:66:d0:1e:cc:42:4a:61:4a:66:e7:a8:76:bc:
e6:db:de:7e:cc:5b:87:06:ee:ca:8e:c1:0e:60:55:
37:c9:69:82:c6:f7:b0:12:e3:f7:5f:d4:97:81:c4:
8e:81:bc:e9:fc:c6:a1:b8:52:e1:60:e9:cc:8d:2c:
70:eb:54:c2:f9:8f:15:5e:23:d5:96:49:63:06:08:
89:72:05:1d:87:95:8d:c3:54:91:f5:d0:40:c7:84:
91:c4:07:60:cc:c2:fb:fe:0e:11:94:83:04:da:cc:
92:f8:22:19:b7:be:5d:87:85:4b:dd:6d:13:f2:4c:
61:3e:13:58:29:a3:a0:43:07:da:56:b8:72:e8:b3:
e5:64:3f:07:23:03:c7:1b:49:35:56:86:10:48:2e:
07:69:9c:84:8f:cc:d6:02:6a:a8:7b:bd:e6:94:db:
99:f0:61:b9:3f:45:07:64:a0:c8:d5:f3:50:e8:a2:
cf:88:c6:9b:6d:3f:96:17:7c:7f:2e:b7:40:2a:03:
ae:eb:f2:47:22:35:55:8c:a4:da:8c:e4:35:42:ba:
00:de:12:8e:86:87:5c:5b:0d:c8:9c:f2:a0:4d:22:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:3F:4B:5D:CE:DE:0A:74:49:2D:A1:51:0B:D9:6D:D8:D7:ED:06
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bc:18:ba:35:c3:43:91:f7:af:ec:bc:81:af:d1:7c:1d:0f:
49:2b:32:cd:52:d9:9f:d1:df:b7:bc:79:b2:9e:fc:fb:3a:53:
c2:e0:eb:88:c2:e9:35:db:75:22:69:b8:5c:da:ae:c4:1b:b6:
52:b1:94:99:b9:db:1e:f7:9d:b8:5d:3b:ca:63:93:01:7b:28:
56:03:37:72:71:35:53:ea:7c:6c:1b:db:b3:a4:70:9a:09:d2:
83:0c:da:c3:ec:79:9e:78:d4:3d:ca:35:1c:e0:d8:34:0c:53:
f3:a6:79:42:12:88:d3:7a:b7:f5:7b:c7:e3:fb:ea:80:4c:10:
f9:df:ff:10:d6:52:eb:3f:e3:72:46:62:70:13:d5:4c:05:73:
b3:2f:86:e3:bd:7b:0a:b1:72:da:32:8c:73:85:68:52:91:6a:
2e:da:4b:30:a1:32:8c:79:99:97:b2:8a:f4:05:f2:aa:7c:fa:
d3:fe:0b:10:00:1f:bd:a0:05:4c:8f:9a:83:17:85:5b:b5:66:
0f:4d:c9:f3:03:94:92:d9:c6:36:ba:46:28:9f:48:73:9c:a4:
42:1f:c6:ed:1c:8d:94:da:41:d0:ae:80:10:ef:01:11:7b:e9:
c5:62:28:d3:fa:02:87:60:1b:38:a7:a6:58:2b:57:bd:c2:55:
9b:2f:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:51:03 2025 by rpki-client