Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: r8fipObBRJ2yTdOZQPCf7ENkCg2/Fm19UjAZy7PZf3Y=
Subject key identifier: 7E:0D:A0:7B:4A:E3:64:10:BF:EF:03:8B:7B:BE:F9:3C:81:65:AA:61
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 0198443F211A71C6D576BBB2404679B938D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0BF2
Signing time: Sat 26 Jul 2025 01:00:44 +0000
Manifest this update: Sat 26 Jul 2025 01:00:44 +0000
Manifest next update: Sun 27 Jul 2025 01:00:44 +0000
Files and hashes: 1: ZIl-tGPYsmILe8aUvhHfFRisBTg.roa (hash: ELX+nfW5VdhOFYsiqhpPo4rEHXv1DoXfvUrKNYNv+iU=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: oR7KX77+5L92r4CmmrzryzTMsN3+kceuey5opxZEYaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:21:1a:71:c6:d5:76:bb:b2:40:46:79:b9:38:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Jul 26 01:00:44 2025 GMT
Not After : Jul 27 01:00:44 2025 GMT
Subject: CN=7e0da07b4ae36410bfef038b7bbef93c8165aa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:9d:dd:84:ce:49:f0:7c:18:6d:1b:ad:53:
04:c6:c7:9d:ce:1f:07:94:0c:ae:41:8f:e4:e0:9b:
f4:ae:39:b7:b3:d0:f9:06:b8:7a:e2:97:23:51:39:
9e:66:aa:c6:a2:24:d4:94:14:cc:e2:72:51:38:6e:
39:e9:dc:56:7a:b8:1f:c0:97:99:f8:85:a9:ae:9b:
df:d6:1e:d4:e9:0c:68:fe:df:57:6d:d5:81:00:b4:
03:b4:41:63:44:34:03:52:a1:da:59:06:87:af:a5:
10:85:0a:6e:8f:f3:43:33:00:96:df:c2:37:d1:83:
55:c9:a5:b5:bc:42:c8:18:f5:89:e3:1f:60:df:99:
bf:81:a3:77:e4:00:eb:84:50:1f:f2:6a:35:73:90:
65:60:cb:e1:4d:5a:0a:e9:7d:41:24:9b:85:32:5d:
19:cc:da:a3:56:ab:fc:0d:76:4f:bb:08:a6:24:e9:
f1:80:4e:fb:60:1d:0a:e7:48:d1:95:18:32:82:39:
80:0d:dd:83:70:a1:07:b9:8f:8c:be:57:fa:8b:6b:
11:dc:0a:09:99:19:df:f7:fa:6c:18:7a:cf:c8:0a:
e5:bc:67:e9:6f:ca:aa:7d:33:c0:4d:1b:fe:39:64:
a3:98:1e:af:4f:45:bc:58:e5:83:c7:d4:c4:4a:80:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0D:A0:7B:4A:E3:64:10:BF:EF:03:8B:7B:BE:F9:3C:81:65:AA:61
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f5:a8:1c:82:b1:e3:33:21:75:d0:dc:ec:66:6c:39:1c:f0:
f3:30:2e:b2:36:2e:88:80:3f:16:94:29:36:7a:75:90:a7:b7:
b6:24:a4:60:a7:92:eb:3e:8e:46:35:b3:01:fc:e3:a2:ec:03:
83:11:71:90:e8:fb:be:87:45:b7:d8:3a:cc:2d:f0:b1:9b:4b:
ab:c9:b6:21:5b:56:df:7a:d9:8b:67:20:42:9e:66:a1:d7:be:
6e:96:b7:3a:f4:ae:24:88:3c:73:0f:5f:61:d3:db:f6:65:d0:
0b:65:04:17:16:9e:b7:9d:7d:b0:eb:33:80:2b:f2:2a:3b:cf:
b1:39:27:0f:29:ae:2b:bb:73:b9:f6:2c:ee:02:1e:19:26:98:
81:47:a1:50:ef:a8:d4:24:23:d1:60:2f:cc:f0:e8:c6:b5:07:
14:93:8f:92:03:82:03:f8:dc:8e:c0:e1:8e:ed:f7:a2:5a:88:
7d:0e:77:82:ea:84:cd:44:cb:77:d5:c7:3c:01:2e:e3:71:c8:
f8:52:4b:d0:c3:26:f4:65:ca:66:b8:1e:e6:6e:36:bc:0a:bb:
e0:89:ca:3c:5a:1a:30:4b:cb:77:8a:52:3c:a9:5e:04:a3:86:
a1:a9:c0:a3:7b:48:40:7f:25:a7:04:f9:c7:96:3e:f5:dd:7a:
01:0c:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:37:53 2025 by rpki-client