Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: 03lBm283dlnACHuFgQHalkzsKHTFyEg9CFniViRyDBU=
Subject key identifier: 73:13:B2:B5:60:4E:ED:93:45:47:8B:BC:D4:C2:A5:A9:D2:60:47:04
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 01984967017059AABB36512052B0BAFACBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 056F
Signing time: Sun 27 Jul 2025 01:02:24 +0000
Manifest this update: Sun 27 Jul 2025 01:02:24 +0000
Manifest next update: Mon 28 Jul 2025 01:02:24 +0000
Files and hashes: 1: PYhNNzuk9SlKthV_33iOWNORmCM.roa (hash: 8PTIGwrPsJPGQk8kIZHLm7NCCrY0xp7lDA1kLSNWPlg=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: 6YynW58JCG5xD1Cx6Hv03yC2OsA1lxJs4U8c30hGfmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:67:01:70:59:aa:bb:36:51:20:52:b0:ba:fa:cb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Jul 27 01:02:24 2025 GMT
Not After : Jul 28 01:02:24 2025 GMT
Subject: CN=7313b2b5604eed9345478bbcd4c2a5a9d2604704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:65:a5:8e:6e:5b:18:64:7b:b4:0d:26:d9:
ba:7f:77:c6:e8:a7:ee:1b:61:34:c0:35:fe:0f:d6:
73:f9:c0:73:0c:4c:ed:e8:5e:48:6a:86:74:9d:39:
16:4c:bf:7f:cf:60:5b:e7:38:8a:72:36:6f:68:99:
ae:9e:85:bd:dd:ca:05:1d:f9:03:1d:c0:f7:bf:42:
58:b7:2a:54:08:36:af:5b:be:0c:63:58:e6:5e:0b:
44:b1:7b:a2:0f:e6:49:4b:0e:89:6c:0a:43:d6:75:
47:61:cf:a0:0c:28:89:6f:ac:a8:73:b0:c0:d0:6f:
9d:ba:6f:81:5d:45:fc:af:8d:cc:70:b3:3f:75:5c:
ee:ae:f6:32:3c:99:1a:24:13:4a:d9:7e:45:8f:90:
a5:33:c2:db:c4:34:f4:2e:07:4f:73:ab:69:56:37:
a5:2e:a3:2b:17:0d:07:14:af:43:b9:a1:2a:0d:6b:
76:44:52:a8:a6:b7:06:b0:85:3e:b7:b2:03:73:ac:
70:09:c7:29:66:5f:fc:df:13:01:14:33:9f:da:43:
90:a0:6d:5d:75:34:bc:f8:67:2d:70:b4:9a:2b:bb:
55:19:e5:80:de:58:03:90:52:5d:ef:68:22:50:71:
35:c6:57:e3:5e:e5:e9:5d:18:ce:6d:95:cc:11:04:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:13:B2:B5:60:4E:ED:93:45:47:8B:BC:D4:C2:A5:A9:D2:60:47:04
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b0:9c:16:0e:b7:a5:27:83:75:d4:65:d1:96:6b:7d:d7:ec:
b5:c8:68:9f:8b:51:1a:1f:9d:6b:8c:6e:66:38:51:3e:3c:bd:
0b:d4:2a:46:93:af:d0:97:ad:e8:62:f7:10:d8:2b:09:6b:bb:
c2:4d:2c:48:c3:b1:c7:2c:5d:b5:0a:49:aa:bc:fd:e4:d6:d6:
82:f9:2e:6b:c5:65:29:7e:2e:d8:6d:fb:6a:17:c4:bc:53:e4:
d6:f5:1f:ae:2c:96:8e:20:25:41:d6:dd:6e:38:ed:e5:46:f2:
2c:30:68:aa:77:c7:21:ce:4e:9d:80:57:64:c5:1f:c0:13:54:
f5:87:89:0f:8f:1f:a0:35:4d:96:48:09:ef:27:4b:d8:dc:b2:
e5:3b:16:52:cb:27:d4:f3:4c:2a:df:45:1f:ae:e4:91:b8:d6:
9f:17:45:16:d8:77:7d:65:90:c8:fe:df:c4:c0:04:0f:f8:17:
5e:0c:f3:94:38:a2:b2:81:97:ef:3a:06:a9:d0:3d:c7:bb:e5:
0c:65:8c:b0:9c:92:79:f7:55:d1:a6:fb:7e:03:c5:e3:61:07:
51:d3:af:b0:60:21:88:0b:ae:ef:58:2a:d1:f4:ac:59:25:63:
f1:2b:fc:29:d1:81:de:97:fd:49:be:dd:61:07:48:52:6d:e6:
d0:fa:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:06 2025 by rpki-client