Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier: DKjw0BV2F7aFQkDkSvY9pdDZzE7NOI+pwQwEeXaI7oc=
Subject key identifier: 50:E6:93:55:FD:A1:71:3F:71:95:8F:AA:90:14:76:1E:29:F9:AF:60
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 0198481B5F39D36506B362547A0C0CABDF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number: 0BEE
Signing time: Sat 26 Jul 2025 19:00:10 +0000
Manifest this update: Sat 26 Jul 2025 19:00:10 +0000
Manifest next update: Sun 27 Jul 2025 19:00:10 +0000
Files and hashes: 1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=)
2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: I4Xid2g0wd8A62kXqTEvX2PXC5rh1joIz7f41ZNHhKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:5f:39:d3:65:06:b3:62:54:7a:0c:0c:ab:df:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: Jul 26 19:00:10 2025 GMT
Not After : Jul 27 19:00:10 2025 GMT
Subject: CN=50e69355fda1713f71958faa9014761e29f9af60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:4d:28:6d:3f:f1:e4:44:89:40:be:13:77:
ab:9f:f0:97:8d:30:a9:1d:01:ce:67:a0:01:a8:3c:
b2:45:50:b0:59:bd:7f:1d:b0:f3:4c:fc:75:8b:a4:
6f:c2:bd:65:06:35:c7:3a:ce:45:44:4c:1d:43:b2:
5c:f3:0b:59:02:4e:a0:c6:9f:e1:0e:42:f5:66:62:
a3:a6:90:c2:cd:4f:d6:93:06:be:78:41:55:3e:0d:
fa:15:0e:b7:0a:2d:45:42:50:5a:fb:91:37:25:bb:
c1:7a:17:a2:18:cf:c4:f0:43:01:93:74:35:43:58:
39:1b:00:6d:b5:95:82:c5:2b:a0:a5:f7:41:d0:d1:
03:bb:60:c8:59:b1:2e:4e:09:00:b7:bc:2a:b6:fe:
f9:48:fe:af:d4:8a:06:44:7f:89:9d:2a:90:ed:a6:
37:19:5c:5c:52:d0:93:3d:90:9e:81:be:75:fe:64:
c7:89:aa:93:57:3e:6f:73:e6:95:b7:e0:aa:dc:f8:
30:29:cd:d0:ea:6b:fe:1b:cc:e1:94:30:b9:b8:48:
36:fe:75:13:9d:1b:61:fa:77:b0:cb:02:19:62:c3:
89:35:83:d4:05:f7:ca:d0:15:90:1b:fd:41:59:63:
6c:95:8e:b0:41:d9:47:36:0a:80:8b:60:cf:9c:88:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E6:93:55:FD:A1:71:3F:71:95:8F:AA:90:14:76:1E:29:F9:AF:60
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c9:3e:1c:69:09:22:d4:d7:75:62:ac:1e:e6:c5:e5:85:e1:
e0:e7:58:09:b3:85:23:56:1a:b3:17:9b:23:c0:c8:93:34:f0:
f5:39:22:48:12:f2:80:73:d1:a3:b7:f0:7b:44:f9:b8:9d:59:
35:13:cb:bf:d3:66:ac:80:24:a1:57:48:54:60:59:7c:3a:a3:
4c:e0:e6:07:1e:67:f0:8e:63:c3:af:53:7a:6e:bb:cf:8d:13:
9a:21:49:4e:39:5c:94:c8:98:04:e6:3a:96:cd:e1:7a:d8:b6:
8c:1f:d4:6a:c9:3d:9b:64:98:28:af:bd:e3:7e:7b:2f:5a:9d:
ce:94:16:d5:39:0e:14:5e:99:34:4c:39:24:cc:01:71:c0:4d:
cb:f8:51:6c:ab:f4:1c:33:df:d4:e0:53:8f:fa:d1:66:60:47:
a9:9d:3f:a6:d8:07:dc:6c:31:83:eb:9b:10:43:43:e9:d3:be:
40:69:da:e4:f6:19:5a:7a:d4:ae:46:68:0b:bd:21:b6:c7:00:
5a:69:f2:9a:74:84:5c:bb:d1:0b:5f:5a:3c:6d:80:37:01:8a:
b2:b8:b3:cb:b2:49:33:a0:bd:24:8b:88:84:b4:42:f2:78:60:
c5:b8:b6:a8:78:96:5a:65:52:69:5a:86:c4:22:dd:4f:80:c9:
6d:11:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:11 2025 by rpki-client