Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: i3Aaj2ft8T/60nnAw3wDYHzNJqvbUhqxjnDjsHFHO/s=
Subject key identifier: E5:B7:E3:FE:AF:BC:38:C9:81:F6:F5:28:1E:34:85:93:04:A5:B1:D7
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 01984889C6772A28C6E3570A2C4746C9DDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0865
Signing time: Sat 26 Jul 2025 21:00:45 +0000
Manifest this update: Sat 26 Jul 2025 21:00:45 +0000
Manifest next update: Sun 27 Jul 2025 21:00:45 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: M9AeGZjDACj0vsME7/SQW0VU/U/yziob4It3BPXg+lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:c6:77:2a:28:c6:e3:57:0a:2c:47:46:c9:dd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Jul 26 21:00:45 2025 GMT
Not After : Jul 27 21:00:45 2025 GMT
Subject: CN=e5b7e3feafbc38c981f6f5281e34859304a5b1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:cd:de:f1:a2:58:c0:de:ae:77:c4:b0:da:
9c:75:c5:6c:53:1f:d7:9a:a7:eb:b6:e6:26:05:07:
8c:56:1f:6c:55:5a:eb:e7:0b:b7:dd:56:ef:1e:72:
26:be:51:8f:d4:80:0d:65:44:19:dd:ef:20:a9:16:
78:8e:c9:62:27:d8:f1:4b:bd:e1:db:32:b2:f3:9b:
e8:5a:ec:35:b1:2d:8a:85:c3:bb:c5:48:e3:59:68:
5c:21:90:ba:fc:cd:d0:0a:0a:6d:e0:51:83:65:89:
20:fc:6f:99:07:bb:af:e3:6e:ad:9c:8e:ed:fe:ba:
d5:b9:24:cd:c1:22:1d:19:7a:38:0d:3b:65:77:7c:
3e:d7:0c:48:b8:c7:ff:77:b0:32:6d:13:d2:56:b9:
35:a3:38:b2:a7:99:ad:3c:bc:c0:5b:3b:9d:c9:2e:
09:9e:4d:3c:1d:ae:69:e5:66:b2:30:64:17:9f:68:
f9:ba:10:6f:6a:01:e1:ed:97:81:d5:e6:20:a3:f4:
f9:31:af:ee:08:30:e3:95:87:46:52:77:d2:36:5c:
cd:14:26:25:90:2a:cb:7f:f2:30:dd:93:ee:a3:ae:
87:f3:3b:7d:dc:2e:4d:5b:3c:92:09:36:4a:52:11:
3f:64:c4:b0:2f:41:44:7c:85:70:66:de:49:7e:75:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:E3:FE:AF:BC:38:C9:81:F6:F5:28:1E:34:85:93:04:A5:B1:D7
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:19:f6:2c:84:fd:ae:53:6f:50:76:69:4e:09:5b:76:57:8d:
3e:6f:66:78:bd:c7:01:7c:a5:2a:0a:04:df:4c:4c:3a:22:17:
18:bc:77:e0:6b:9d:3a:cb:25:40:ff:e2:e0:3e:62:99:2b:0a:
99:d1:03:95:22:08:b5:fa:7a:dd:0d:af:8f:7b:84:5d:ef:2a:
a8:81:eb:79:40:91:d4:c8:00:4f:c2:e5:00:87:60:7f:16:ae:
32:c3:11:b0:e1:2b:05:85:73:36:5f:13:d3:7a:c6:3a:e5:7e:
ba:5c:51:f8:a3:2a:a6:0e:2d:65:86:8f:df:83:19:43:d6:28:
46:cd:e8:2a:c7:07:51:b1:f7:62:86:1a:0f:5c:78:2a:dc:03:
4a:72:db:25:b3:bc:ef:5b:13:c1:1e:be:d1:20:ba:2e:7e:15:
1a:1b:77:a6:81:93:92:2b:80:17:6d:e5:46:18:22:8e:55:65:
05:e1:26:80:3d:1b:cb:1a:78:bb:1e:43:27:a4:30:f7:98:59:
9d:ae:42:78:d6:fc:01:e0:7b:08:be:31:a2:c5:09:33:f7:84:
97:e9:fc:3d:80:7e:eb:84:1d:c5:0f:4c:70:0f:9c:d7:16:47:
b3:7b:93:51:81:dd:e7:23:73:e4:99:46:5e:96:08:67:ff:80:
99:7b:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:47:58 2025 by rpki-client