Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: iB0cWocmORBwijedJ+JC/pHU7HtBgnfzkG3h3BErCpE=
Subject key identifier: B3:4E:77:84:1D:43:3D:5D:F5:A3:36:8F:97:80:F1:70:DA:C6:BF:E8
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 0198541F99E41ED159C641DB406FDDD13852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0919
Signing time: Tue 29 Jul 2025 03:00:13 +0000
Manifest this update: Tue 29 Jul 2025 03:00:13 +0000
Manifest next update: Wed 30 Jul 2025 03:00:13 +0000
Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=)
2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: NzIy6rBQmH/rBYofs0dFGi8JGlYzgzjQZDyAHJNwRj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:99:e4:1e:d1:59:c6:41:db:40:6f:dd:d1:38:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Jul 29 03:00:13 2025 GMT
Not After : Jul 30 03:00:13 2025 GMT
Subject: CN=b34e77841d433d5df5a3368f9780f170dac6bfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:93:91:86:cb:bb:88:ba:8d:bd:6d:b7:5d:
01:6c:7d:bb:86:ed:f4:9c:cb:a7:9f:c9:81:e7:56:
5f:49:a0:15:ac:71:c6:a6:8b:28:41:d9:09:aa:e7:
06:99:99:a9:0d:4c:14:63:f3:16:a3:af:38:20:f6:
aa:2e:c9:2b:07:73:8f:aa:3a:75:57:1f:aa:6c:f7:
d8:11:e3:90:09:88:67:c4:a4:2f:93:ba:82:ed:07:
01:dc:49:b9:5d:81:b0:55:2c:42:d6:e7:ed:f0:13:
05:94:e5:28:ea:1e:25:1f:19:d2:6d:83:67:37:9c:
a9:58:20:c9:04:5f:25:14:64:44:c0:4f:06:a5:6d:
cb:cd:d3:e8:06:11:fc:89:df:b9:98:9a:39:e4:4b:
85:eb:64:4a:49:86:4b:17:e7:c4:51:1f:d3:04:fb:
89:9a:6a:30:bf:ea:f1:4d:f6:44:e1:e8:d1:27:ad:
97:40:c7:44:09:2f:82:3e:d8:23:4f:9e:0c:3e:69:
d7:b5:4a:e6:58:d4:d3:ca:fd:bf:be:1a:16:74:2b:
c0:25:ac:af:d2:45:fc:4f:e6:da:6f:97:cc:fc:d5:
a8:fe:7f:51:d0:11:73:93:e9:52:d7:12:e0:0d:ae:
05:2d:25:7c:e5:68:30:c6:69:2a:a3:36:d4:36:07:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4E:77:84:1D:43:3D:5D:F5:A3:36:8F:97:80:F1:70:DA:C6:BF:E8
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e9:59:9b:54:66:eb:b8:7e:09:71:10:34:84:e0:92:fa:0a:
cb:d4:1e:8a:8d:05:2d:2a:e9:b1:ca:f8:ee:37:15:f5:a5:2f:
54:17:52:67:83:ce:62:d6:79:de:15:5b:6f:9c:59:43:9d:ff:
82:5f:ad:31:11:1d:ce:9d:6b:8f:38:f5:cf:da:20:c8:16:b0:
1e:4a:c9:8c:07:29:22:c0:78:3e:18:a0:45:31:0e:78:a2:a3:
0f:16:b9:48:37:19:41:6b:d0:2f:64:2a:12:98:e1:6c:4b:88:
08:bf:99:9c:29:04:1d:75:67:c2:f8:b3:64:1c:a8:fd:e8:c5:
50:86:d1:d3:46:2e:a4:46:ae:f7:75:fb:4e:9a:ff:e2:9f:2b:
e1:28:d3:12:a3:60:19:8a:66:ac:77:e7:f1:e6:f0:1e:d5:90:
07:4a:d2:3e:91:90:1a:b4:08:37:a3:34:af:b7:f4:12:7a:c3:
17:4d:6f:46:42:43:30:2a:df:f9:f3:3e:3c:c4:e8:13:be:0d:
b9:8b:a8:c6:79:93:15:87:41:14:9a:3f:7d:d1:0c:82:ec:fd:
b5:f5:cb:26:65:3f:b2:93:f2:77:81:10:27:2b:de:53:3f:a7:
98:95:5d:a0:dd:ee:82:42:68:1e:ac:a7:f8:07:7d:0d:87:4a:
be:16:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:48:09 2025 by rpki-client