Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: kX6Qg6oHuq5k7CsogCdG24+yeOfZCIcvHgnTQ3Wx2yQ=
Subject key identifier: 96:D8:EC:39:5E:EC:A7:64:A7:DB:08:79:6F:69:D4:B5:65:57:56:44
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019856EC60E23CCB4AA71F5F54F7F5798A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 164F
Signing time: Tue 29 Jul 2025 16:03:08 +0000
Manifest this update: Tue 29 Jul 2025 16:03:08 +0000
Manifest next update: Wed 30 Jul 2025 16:03:08 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: ZTYnwGzqutp+w7f8PNARrOr4FOcXbKp/6brv9+3TsnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:ec:60:e2:3c:cb:4a:a7:1f:5f:54:f7:f5:79:8a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jul 29 16:03:08 2025 GMT
Not After : Jul 30 16:03:08 2025 GMT
Subject: CN=96d8ec395eeca764a7db08796f69d4b565575644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:05:ef:d8:87:b4:eb:02:d5:c9:42:f2:88:
63:f5:aa:1e:45:ad:92:d8:6c:82:02:87:c5:d9:a2:
7b:24:83:55:c7:6b:d2:63:5b:82:9c:8d:5f:92:12:
83:48:47:88:b9:ff:c1:69:3f:56:2f:89:b6:1e:81:
d6:e6:86:9b:02:6d:5d:06:2f:86:14:27:8c:50:80:
40:d6:8f:6a:47:f4:5e:e9:b8:72:9b:96:5d:d0:df:
ca:c2:94:60:52:f6:74:c6:99:da:6d:da:d6:a7:5a:
87:c5:9e:4e:84:0a:3f:94:7e:72:77:86:82:4b:2c:
a0:5a:ce:56:d9:55:4f:20:23:03:9d:26:a2:54:53:
54:2d:71:77:a4:78:f4:1f:ec:ba:11:a1:3b:e5:0e:
d1:35:c6:66:d0:14:c2:24:65:17:52:12:2a:a6:c7:
8f:e2:d1:d1:48:0e:80:1a:7c:38:43:8f:5e:75:af:
6a:43:9f:b7:08:21:ae:92:51:2a:65:04:d6:72:ab:
8e:21:9e:6c:2b:12:27:3d:08:8b:44:85:36:07:30:
d1:04:61:b9:3e:00:15:8b:f3:10:9f:79:a9:82:dd:
c3:b0:49:35:f4:b1:0f:e3:d2:63:27:3d:79:2d:8d:
3b:71:f4:5c:08:7c:95:9a:54:39:4a:ec:d1:55:50:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D8:EC:39:5E:EC:A7:64:A7:DB:08:79:6F:69:D4:B5:65:57:56:44
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:aa:5c:92:c6:72:85:f7:54:1d:48:d3:b6:6e:7f:60:02:87:
00:f2:5e:e4:6f:52:66:38:cc:63:af:b5:32:a6:18:fe:6f:14:
da:00:6e:d6:2f:3d:43:1b:db:57:41:69:f4:0e:58:5d:78:e2:
ec:4c:15:66:e7:89:32:4f:72:ad:ce:27:88:2b:bd:ea:22:fb:
9b:21:ee:33:dc:e1:4a:85:e2:ac:6c:7d:82:58:d5:c6:a7:93:
97:a7:3c:ec:2a:f5:6d:c2:f5:f0:85:3e:16:48:00:5f:bd:0e:
cb:6a:a3:74:51:c6:da:3f:ad:c2:3a:97:4f:32:b7:fd:91:9f:
30:9c:12:b4:77:46:c8:7d:d5:17:4f:6d:ed:cd:6e:20:98:13:
6e:eb:97:9e:b8:43:c8:d5:79:b7:25:6a:7e:3f:2a:49:28:d9:
63:ec:a7:b7:76:af:90:69:a4:fe:f5:a3:54:df:3b:8a:92:e9:
a1:5a:fd:43:62:60:4e:0b:5b:05:bc:76:ad:34:55:a5:27:9f:
4c:b8:42:f7:ca:a5:b6:d0:68:05:7f:4b:71:93:e7:b8:c5:68:
65:e8:a1:10:22:7e:76:b6:e8:3e:b0:9e:4a:96:12:4e:84:0f:
c0:a9:64:9d:11:67:e5:03:00:fe:f6:ce:44:84:f6:d2:ac:59:
97:ca:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:08:12 2025 by rpki-client