Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft
File: zCdbIX3x3piMohkqg64R3fQjpE8.mft (raw, json)
Hash identifier: S7KeOrY3iI82j8D5Jd8oQjOEyiCM0pcPM1xhnFuBYyc=
Subject key identifier: 18:41:27:3F:9F:D6:DD:92:F1:DC:67:36:E9:0B:8A:74:97:6D:9B:5E
Authority key identifier: CC:27:5B:21:7D:F1:DE:98:8C:A2:19:2A:83:AE:11:DD:F4:23:A4:4F
Certificate issuer: /CN=cc275b217df1de988ca2192a83ae11ddf423a44f
Certificate serial: 0198451ABE1D82582D1F5E9B9703C49D28E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft
Manifest number: 0AB6
Signing time: Sat 26 Jul 2025 05:00:37 +0000
Manifest this update: Sat 26 Jul 2025 05:00:37 +0000
Manifest next update: Sun 27 Jul 2025 05:00:37 +0000
Files and hashes: 1: Nr1R18FVhyzjXhL2YKl54Kz1CcM.roa (hash: Ka3gajN2kG5bn7od03MC2i4kFc5aTTook8osIu09I1U=)
2: zCdbIX3x3piMohkqg64R3fQjpE8.crl (hash: ZsD/fknW0yWB3g5p6lcns36eNcEyyXp7vwAxGqtAU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:be:1d:82:58:2d:1f:5e:9b:97:03:c4:9d:28:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc275b217df1de988ca2192a83ae11ddf423a44f
Validity
Not Before: Jul 26 05:00:37 2025 GMT
Not After : Jul 27 05:00:37 2025 GMT
Subject: CN=1841273f9fd6dd92f1dc6736e90b8a74976d9b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:09:f6:cd:aa:65:2e:f4:ee:a7:ca:57:cf:
b1:43:6c:dd:f3:d4:be:98:90:42:d2:91:11:95:92:
9d:33:ff:d7:41:ea:a3:17:02:47:49:37:07:65:b7:
2d:63:96:b7:fb:b0:f8:ac:ba:41:70:31:ed:6a:0b:
bb:3d:36:48:3b:71:b7:df:10:92:6d:61:41:7d:f1:
9b:c5:5a:56:a5:e5:a0:16:f1:d6:4d:6a:38:9a:94:
6c:b8:3a:35:23:1d:f4:d4:a4:95:d3:1f:6a:ec:5c:
2e:22:81:95:ad:cb:54:1d:8f:59:e9:9f:f7:ed:50:
67:17:6d:f3:76:2c:72:a0:19:af:a0:36:20:64:e1:
7e:59:22:c0:f3:1f:94:18:cf:8a:39:70:cd:87:d3:
c2:04:6c:c8:64:fc:b9:0b:ae:d0:29:34:57:9d:4d:
d9:e4:1b:34:28:64:68:4e:54:87:8d:87:c6:30:f4:
c7:69:37:bb:7c:ce:da:52:d2:80:e6:7b:eb:39:63:
5c:9b:ae:c8:1d:5c:89:68:03:ba:1f:93:27:d9:f6:
72:67:ae:3f:41:4a:b3:0c:6f:89:7c:41:f1:36:71:
34:ea:25:b1:60:cb:c4:10:8e:8d:0c:2f:5f:2d:e0:
2e:d4:01:3c:d0:3c:a1:40:e2:46:b2:02:9c:6f:23:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:27:3F:9F:D6:DD:92:F1:DC:67:36:E9:0B:8A:74:97:6D:9B:5E
X509v3 Authority Key Identifier:
keyid:CC:27:5B:21:7D:F1:DE:98:8C:A2:19:2A:83:AE:11:DD:F4:23:A4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:31:89:de:3a:c9:89:2f:33:c9:fc:ec:8c:16:70:63:ff:c9:
4f:ce:23:aa:21:aa:bd:af:e4:8d:21:9b:29:7d:1b:22:d8:8d:
22:66:c0:dd:9a:1d:61:f5:18:90:76:f1:63:41:1d:b6:09:b5:
bf:08:79:e3:5b:c5:90:77:15:47:51:88:00:29:7f:c4:4d:f8:
85:8e:9a:ab:85:40:1b:6b:31:5f:b1:c1:2a:f5:97:38:ae:e2:
64:ab:11:eb:c5:96:aa:e5:c4:2f:31:88:65:c2:3b:72:79:9e:
2e:46:69:38:f8:ef:63:fc:1c:e2:44:0f:17:75:53:d9:a3:c8:
c3:95:26:f3:1e:50:c3:2c:31:6b:3b:5a:4f:c7:73:62:b5:39:
40:4b:a0:9f:97:07:28:3a:8f:1c:f6:f3:3d:e8:7b:c1:9f:44:
ca:0a:d0:86:b7:8d:55:4d:1e:3d:1a:3d:5c:bb:84:b2:e3:00:
f0:bf:26:cf:0b:f8:f2:ec:49:9d:a5:70:eb:59:ab:64:3e:88:
0c:c4:e9:21:bf:6d:d7:8c:c9:a6:33:2d:65:1c:79:7a:cf:02:
53:af:6e:75:6a:5d:90:57:c3:fc:f6:f0:7d:68:f0:be:b0:75:
3c:f5:6d:79:57:c6:12:38:06:b5:7b:06:b2:93:57:7d:ba:78:
6c:2f:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:57:01 2025 by rpki-client