Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: zNOQfhG3to0+zTjzXQwPqD7BuCWPzIxWP/8RMonA5H4=
Subject key identifier: A4:31:8B:F1:B4:95:48:72:8F:C0:99:B0:FA:07:64:86:E5:13:72:54
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019849D2F37A222EBF8BE022DA9F50824341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0E96
Signing time: Sun 27 Jul 2025 03:00:18 +0000
Manifest this update: Sun 27 Jul 2025 03:00:18 +0000
Manifest next update: Mon 28 Jul 2025 03:00:18 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: itmfkQFDCfmjR+Wi3B9f2Qd5KqN7soQwVaspn2AG77s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f3:7a:22:2e:bf:8b:e0:22:da:9f:50:82:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Jul 27 03:00:18 2025 GMT
Not After : Jul 28 03:00:18 2025 GMT
Subject: CN=a4318bf1b49548728fc099b0fa076486e5137254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:eb:0b:a3:79:2a:be:3c:5a:4d:3e:f2:ad:
a6:dc:d8:c2:07:4d:2f:e6:1d:22:d6:e0:7f:2b:b4:
4a:46:c6:3f:ca:c2:a7:cd:e1:b0:ff:8c:b2:e1:ab:
78:80:46:5b:8b:cb:7c:bd:4d:36:f2:ac:ad:e3:09:
e5:d1:63:4a:11:89:b2:a2:92:9b:bf:5e:bd:e1:96:
f7:ba:61:08:eb:2c:45:19:2e:55:31:6a:05:5c:da:
5f:43:98:04:62:ee:00:d5:c2:2e:33:46:91:b2:98:
07:86:14:bb:89:ab:5b:80:f3:a0:d8:36:95:7e:31:
3b:7b:7f:a4:d9:13:68:0b:94:5c:48:a6:ec:23:c6:
aa:47:c6:3f:4c:a7:bd:ae:db:83:6a:f6:7c:ac:fc:
89:02:42:4d:2e:b0:d5:e6:4b:10:01:27:e0:b6:ec:
1e:12:96:bb:ec:37:d3:b7:45:5a:d0:0b:40:89:73:
93:ce:07:4c:d2:89:54:67:a0:e6:85:69:52:7e:01:
9d:be:72:68:a9:49:3f:0f:66:a5:39:8f:77:a0:88:
6f:21:92:ec:a3:2e:ab:29:87:b1:d3:8a:5c:13:4b:
43:e5:be:b6:f2:18:c5:c0:a1:d7:1a:74:fd:e7:e4:
56:a0:87:ca:d2:6a:52:70:f0:7d:90:ce:24:eb:88:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:31:8B:F1:B4:95:48:72:8F:C0:99:B0:FA:07:64:86:E5:13:72:54
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:54:af:4e:19:a8:ee:2c:39:22:68:ce:72:95:5a:e8:60:ef:
40:12:f9:c0:48:3f:8c:55:94:a8:91:dc:96:fb:74:0b:b8:32:
0b:ef:8c:64:89:84:77:b2:89:a4:09:2e:ef:0b:59:55:47:c9:
0a:80:f8:94:d7:13:97:95:64:8f:1e:df:52:62:2c:18:e2:90:
4e:56:03:e5:57:02:3f:b4:6f:07:db:b6:a1:23:bb:dd:3e:fc:
93:b3:cb:b8:49:d7:5c:00:80:98:18:8e:74:4e:b2:30:cb:b0:
03:6f:cc:52:7c:6d:70:85:af:cb:17:db:1c:0b:76:39:82:a1:
28:38:b0:c5:c9:78:ec:3a:8b:54:a7:18:06:d0:03:8a:a1:2a:
7e:2f:6c:3a:4f:64:c3:fd:a7:81:b8:7e:6f:e6:74:bc:c8:91:
73:79:b2:45:29:32:94:f6:ae:e9:11:c0:70:ff:6c:e3:8f:af:
8e:ee:c4:c4:d4:9d:91:4a:d0:e8:f7:7f:73:18:20:45:51:39:
c4:15:3e:05:54:dc:01:39:5d:0f:1e:e1:60:74:f5:24:f0:53:
1d:c6:d7:15:7c:d3:64:13:69:94:81:9f:0a:a8:ed:f8:38:27:
48:ff:60:bd:a4:6b:84:1d:59:ad:cd:6d:7b:2c:69:39:52:7c:
7e:42:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:44:46 2025 by rpki-client