Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier: 9UTgSikJ+DrC3XBNSGlpVFKGxO9EBXrks8C3IpTWtOw=
Subject key identifier: C2:1A:17:31:1B:51:7D:0A:51:A5:57:3F:09:24:81:76:8C:81:36:FF
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 0198469B1DCCD4AE7B4C35212CD2D52544A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 12:00:27 +0000
Manifest this update: Sat 26 Jul 2025 12:00:27 +0000
Manifest next update: Sun 27 Jul 2025 12:00:27 +0000
Files and hashes: 1: 6U3Xs040zPO-wT1n1ipqEnLqdc0.roa (hash: iVKPeVo4dn6/xoX4wf7rwRU8cdeCDU4NP9VqaFlc7Ic=)
2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: 5BIzXDbSeJZJwvfgb6fMnzmwGqtimqNmjjnTZ9wnTZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:1d:cc:d4:ae:7b:4c:35:21:2c:d2:d5:25:44:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Jul 26 12:00:27 2025 GMT
Not After : Jul 27 12:00:27 2025 GMT
Subject: CN=c21a17311b517d0a51a5573f092481768c8136ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:8e:88:60:1e:02:b2:67:80:52:bb:14:53:
31:fb:f4:e0:62:92:d0:ab:3a:f8:3b:ca:65:28:58:
6b:c3:b5:6d:62:7e:88:c6:e7:e7:fb:89:f5:3e:7a:
32:38:78:f1:9f:ec:13:3c:f1:4f:87:27:1f:b8:d5:
89:ef:ec:97:ec:cf:36:0f:f2:ee:88:7f:7c:82:32:
8c:b9:d1:6b:17:50:2f:a2:25:b4:20:15:f3:8b:43:
7f:b7:51:6a:0c:55:3a:d5:32:43:d4:7b:35:93:99:
ef:d1:45:ef:5d:7f:8a:42:89:f4:f3:e1:fb:a8:b6:
89:ce:b6:4b:b7:61:06:b6:ef:5b:c7:d3:42:e4:95:
ad:e4:e0:6e:e3:bd:32:23:94:9a:d9:57:25:eb:6b:
b8:df:7f:d1:79:55:ba:d3:fc:93:d6:96:bd:92:e0:
85:40:b5:88:09:84:0f:8c:8c:4b:f2:64:cd:22:db:
7d:6d:cb:53:8f:88:03:6e:1d:52:2c:62:a6:65:f5:
ea:f3:d2:df:7c:6a:5d:ad:43:6b:d8:af:be:c8:b3:
34:71:83:79:d8:f4:1a:9a:fa:dc:eb:11:65:c9:16:
17:ca:bf:32:80:21:0d:77:1d:82:d5:d8:2f:4a:c9:
74:6b:0a:0c:f0:db:da:c8:00:28:d2:b4:d5:f3:1a:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:17:31:1B:51:7D:0A:51:A5:57:3F:09:24:81:76:8C:81:36:FF
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2c:4c:98:e4:2e:9f:c8:ea:57:2a:50:fd:14:09:97:4c:4b:
8f:f1:72:c7:37:95:f5:e2:cc:68:4f:c0:81:f8:52:51:4e:18:
cf:1a:d5:16:bb:39:b5:06:49:58:37:96:ff:54:7f:48:0f:b5:
97:ee:8b:c5:94:17:29:08:91:44:d2:f4:7e:79:6a:f9:23:38:
6e:90:33:c9:2a:06:ff:23:03:95:66:af:f8:d9:5f:1a:76:78:
99:2e:1f:35:55:2f:00:68:d5:6c:b4:80:79:f5:4f:bb:ba:e2:
eb:dd:4f:64:78:b3:ca:7e:14:ef:79:7c:cf:84:b5:6c:42:b7:
79:c7:5e:6b:3a:d7:63:86:26:77:11:8f:2c:4d:df:c7:00:77:
57:37:06:41:bf:05:90:20:4e:fb:58:54:87:ea:8c:1a:4f:75:
50:1b:14:cb:7a:fc:e0:f7:17:43:dd:ca:61:2f:18:32:08:53:
1c:69:19:35:16:74:57:04:4f:11:22:15:4a:d6:1f:b4:4e:14:
34:d3:b7:ad:ed:8a:e5:94:43:07:16:c7:a6:06:16:3b:cc:d1:
44:19:76:e8:83:a1:17:cb:5d:ce:23:b5:f4:c5:f3:30:8c:64:
c4:ab:04:b0:de:3f:49:cd:90:87:f4:22:3a:10:00:a3:4d:ee:
a5:21:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:46:31 2025 by rpki-client