Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
File: zUNP2FkiOudujXhkipNylejs15o.mft (raw, json)
Hash identifier: OBvGIZUOOI4s+MmFeWWieNMlm3uJm6VnU3uQgOwLStA=
Subject key identifier: 45:EC:8E:02:60:41:F9:DE:EC:FE:28:94:44:0D:47:DA:AD:70:8F:9F
Authority key identifier: CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
Certificate issuer: /CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Certificate serial: 01984966902271D042CB18206AE9E8BDD8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
Manifest number: 05AE
Signing time: Sun 27 Jul 2025 01:01:55 +0000
Manifest this update: Sun 27 Jul 2025 01:01:55 +0000
Manifest next update: Mon 28 Jul 2025 01:01:55 +0000
Files and hashes: 1: R9FIW-YXitjJpX1Q3jcy6-oEIFI.roa (hash: UPbldeCj6tFYKOIutM8BR+cGGez6vIB0/3ZKKmpjUZo=)
2: zUNP2FkiOudujXhkipNylejs15o.crl (hash: h1lIy9MdPwZVn9G4rP4EU9CW5wG/CTCARZmJRlag4FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:90:22:71:d0:42:cb:18:20:6a:e9:e8:bd:d8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Validity
Not Before: Jul 27 01:01:55 2025 GMT
Not After : Jul 28 01:01:55 2025 GMT
Subject: CN=45ec8e026041f9deecfe2894440d47daad708f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:bf:13:dc:5b:3c:bd:f9:f2:dd:a6:3c:e3:
1b:ad:78:82:df:8d:9b:14:01:54:28:e2:05:07:fb:
7a:a6:25:c4:a1:06:de:92:ec:77:a6:36:67:9c:30:
10:4d:3d:49:0f:0f:00:38:c3:33:cd:05:6c:73:ff:
6f:f0:3b:89:10:3a:19:92:90:65:7e:ef:08:ba:f7:
18:80:d1:32:10:83:53:de:fa:ca:51:08:2b:d9:88:
32:aa:22:b5:0d:bd:05:e2:f9:c3:01:e2:ad:47:04:
5f:59:21:18:10:5e:de:4b:33:a4:24:5d:d9:a9:0d:
36:67:0d:dc:1b:d7:6e:62:13:12:40:bf:9e:8c:8a:
6b:b2:cb:d9:6f:2d:dd:ee:81:29:79:2f:cd:af:69:
08:12:55:63:27:f8:25:2b:ac:b5:db:bb:14:ed:d9:
4e:9f:c3:ec:76:3f:f7:99:70:f6:29:83:6c:e0:de:
60:80:e6:fe:81:36:54:bc:55:26:51:57:c5:07:9b:
00:be:a1:4b:b6:f2:a5:ca:fd:7c:8f:6c:b3:81:9f:
9a:fe:38:85:8f:c9:e9:77:74:6d:25:78:96:3c:16:
81:f3:09:3a:04:19:77:86:3d:39:2a:1a:92:9b:39:
56:84:52:a9:45:62:38:9c:c8:b7:05:a7:50:76:21:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:8E:02:60:41:F9:DE:EC:FE:28:94:44:0D:47:DA:AD:70:8F:9F
X509v3 Authority Key Identifier:
keyid:CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:83:eb:ba:38:ce:28:2c:f9:6f:db:3a:8c:79:9a:d9:8a:d4:
56:23:fe:fd:b6:40:43:86:b7:20:58:2b:84:76:72:d1:08:13:
6c:96:91:58:a2:e9:1b:87:2c:5b:19:09:ac:37:a4:d1:ec:f7:
63:3c:d1:8a:ed:7d:32:16:7d:c9:05:06:1f:36:57:c6:70:1c:
86:1f:07:3c:97:e1:10:33:f9:7f:e4:57:2c:18:97:2c:eb:a7:
46:39:0a:12:35:20:f2:ed:a2:76:ae:54:b5:e1:cd:a8:dd:b2:
5d:f8:5c:85:a9:1b:00:f4:20:84:e3:ee:85:d4:43:c4:75:13:
55:73:f7:26:77:84:a8:e5:86:2f:5e:b1:60:be:66:62:f2:4c:
13:96:a5:ac:0c:74:10:de:e9:07:6b:ef:78:09:bd:ee:a3:33:
f7:cc:b5:03:fe:95:1e:f0:70:c0:1f:1f:75:00:ce:f6:cc:3c:
c8:1b:08:c8:98:f9:26:77:3d:fb:cc:1a:bd:82:f8:6f:d8:75:
9c:03:cc:28:7a:6f:04:1d:37:f9:ee:ed:8a:81:66:fc:14:27:
a4:2b:7f:9a:95:75:a6:79:29:9c:2d:f1:93:f9:1c:ea:ce:79:
5c:ce:0b:ff:d6:fd:0b:97:7a:37:3d:65:ef:6f:2d:3e:80:98:
ad:71:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:20 2025 by rpki-client