Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: hZsXULh4Y4GrNaxLmgiuXYR6lPPKi+BoANPjzQIVigM=
Subject key identifier: FF:92:22:4D:F3:E5:9F:49:9E:81:EA:8F:1E:7E:5F:EB:63:2A:9B:1E
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 01984A0A031CDAA8AF2F1E9638F04C5BF5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 05D6
Signing time: Sun 27 Jul 2025 04:00:26 +0000
Manifest this update: Sun 27 Jul 2025 04:00:26 +0000
Manifest next update: Mon 28 Jul 2025 04:00:26 +0000
Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: 6Tgdi2M1s/+UYQjSiG9MIPDO0gZoDo0vKWN+/jabxCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:03:1c:da:a8:af:2f:1e:96:38:f0:4c:5b:f5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Jul 27 04:00:26 2025 GMT
Not After : Jul 28 04:00:26 2025 GMT
Subject: CN=ff92224df3e59f499e81ea8f1e7e5feb632a9b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:b9:b2:cb:04:e2:cd:c8:4d:44:d0:1f:be:
c1:e7:f8:30:fa:c0:a4:70:e4:1a:cc:37:0d:12:4f:
dc:56:8a:cd:f2:16:33:bb:1e:b0:5f:7d:2e:2c:b9:
84:3d:00:96:45:40:10:58:05:20:16:6f:00:63:4a:
ed:d6:92:ab:a0:04:c9:3f:32:e2:f1:43:b5:cb:a1:
46:fc:7c:ff:e7:6c:60:da:b6:fa:b5:03:06:f2:5a:
1d:ea:78:1c:db:32:75:41:7b:54:c0:01:4b:dc:93:
f3:26:9a:4a:1c:91:cd:87:6c:69:ea:96:71:53:0b:
40:67:04:7f:2a:6c:98:22:3a:46:05:f7:ed:35:f8:
5d:f9:8d:f3:a2:6b:5b:27:03:7a:7d:ca:b3:4a:49:
05:1e:ab:82:f1:97:0d:80:35:b4:46:35:5c:31:39:
f7:e8:b1:d8:8e:dc:fd:23:0e:fe:a9:6a:31:27:a1:
c1:bb:5d:30:86:b6:0b:39:3b:e7:e1:54:20:2b:94:
0f:11:24:0b:c5:a3:bb:8e:f6:ac:28:c5:a8:17:ae:
fe:3f:88:40:f2:98:ba:52:62:e7:cd:69:82:c7:6c:
52:c9:4a:e2:30:0a:82:f6:fc:d7:07:ef:ae:ae:58:
4b:ee:ea:b7:9b:e5:6c:af:40:b6:f8:52:78:86:87:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:22:4D:F3:E5:9F:49:9E:81:EA:8F:1E:7E:5F:EB:63:2A:9B:1E
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f6:8c:0f:8f:eb:6c:3f:78:ca:67:93:13:5f:e1:de:2b:5b:
78:02:e1:25:00:91:ae:09:b2:11:2d:ea:46:48:77:14:35:3d:
40:70:c6:91:24:4d:d7:2c:b8:cd:df:66:ae:1a:48:c8:fd:2d:
28:44:5e:c0:70:3b:ee:6d:6f:4d:85:a8:5f:80:a9:8d:85:a8:
31:0e:3f:49:db:49:27:7b:fd:f8:2b:70:ca:d3:1a:fb:64:50:
7d:81:80:38:c3:12:3b:70:c5:27:27:e6:43:c4:3e:e2:f8:a5:
c6:46:6d:80:63:49:fb:37:2f:43:f0:e6:57:23:81:9b:a5:e0:
16:f3:26:1e:39:24:f8:c7:d1:bb:26:c3:ce:f8:85:cd:da:86:
35:23:52:b1:ce:05:ed:3c:7b:f9:a2:71:b1:6c:3c:cd:5f:18:
18:cb:19:8e:fc:25:79:bd:f0:80:f9:76:4f:47:67:cb:6e:24:
53:56:5f:a6:94:ba:26:1b:66:39:3f:ae:37:35:c2:52:12:c8:
98:4d:11:37:8b:7a:1f:b0:78:9e:76:84:e3:51:4a:5f:9d:72:
0d:dc:39:c4:d8:72:f5:98:52:fe:bb:6b:49:8f:59:f6:cb:74:
df:a1:a7:0f:8a:3f:4b:f5:4b:88:c3:98:08:3f:9b:13:8a:d7:
fd:b1:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:59:08 2025 by rpki-client