Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: klHsQK4uvl+IlId4kZiYne9JNRzy4O2kaboo52hnuco=
Subject key identifier: DE:4B:DE:88:0B:22:35:80:1C:D0:21:79:6F:CB:A3:A6:F8:1A:B5:09
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 01983126629FBE7C28ACE7C494CE6CA08470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 0416
Signing time: Tue 22 Jul 2025 08:00:55 +0000
Manifest this update: Tue 22 Jul 2025 08:00:55 +0000
Manifest next update: Wed 23 Jul 2025 08:00:55 +0000
Files and hashes: 1: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (hash: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=)
2: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: ZtOU0Scy8e/wyZf8+CKU6X+EVygBxbetrx/dGAKPpkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:26:62:9f:be:7c:28:ac:e7:c4:94:ce:6c:a0:84:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Jul 22 08:00:55 2025 GMT
Not After : Jul 23 08:00:55 2025 GMT
Subject: CN=de4bde880b2235801cd021796fcba3a6f81ab509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:68:d5:3c:94:85:d0:07:34:3a:ab:e7:2b:
aa:08:2a:2e:f4:a9:08:6d:ea:10:53:c5:c3:88:a0:
91:ea:51:58:ee:bd:b0:3f:6d:62:91:a1:3d:c4:ce:
2f:5e:0a:6f:5a:72:09:aa:7d:ec:dc:ae:fa:38:6c:
df:42:86:69:6f:d1:1d:c7:6b:57:1d:ec:59:89:7e:
97:4d:c6:43:40:2c:6c:c5:26:3b:56:76:ba:8a:68:
54:06:76:8a:d7:55:0f:c7:95:7f:16:c7:2d:01:dc:
dd:5d:87:10:c9:6a:50:28:aa:5b:7a:43:ce:f9:db:
d3:a8:41:8d:2e:b7:95:b4:86:4a:aa:77:e7:aa:5a:
51:fd:16:c8:70:23:8c:be:86:19:8c:d9:d8:b9:69:
42:9c:b0:41:be:33:9b:39:b5:d7:0b:c1:b4:28:0c:
06:85:62:ee:50:15:38:8d:1d:77:a9:9c:50:43:15:
a2:d5:0b:0e:a5:3e:e7:ca:48:0e:98:e0:c5:7c:9f:
36:28:93:d0:b4:ff:cf:08:af:e0:50:7e:9f:f3:5e:
de:b9:3f:83:56:21:a1:62:3b:9f:93:cd:0e:93:cc:
db:96:1a:2d:54:7a:d4:f6:74:45:d6:5b:7e:11:c3:
f7:03:c3:d7:3b:c1:8c:0e:e2:40:47:a3:23:af:de:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4B:DE:88:0B:22:35:80:1C:D0:21:79:6F:CB:A3:A6:F8:1A:B5:09
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f3:e5:ef:e1:21:56:05:44:d6:ac:e7:5d:86:19:ea:9a:76:
99:ab:4f:c9:a1:61:4a:89:f7:14:54:d0:03:bf:92:90:82:78:
c7:12:5a:a8:e1:ec:09:fd:cd:f6:94:1d:86:e1:c3:df:c0:b4:
e8:b9:7f:82:b3:bf:8f:36:3b:98:bd:49:d7:8a:36:fa:23:bb:
2d:07:78:cb:25:9c:26:97:c5:14:d7:2b:0d:cc:0f:2a:e9:f6:
49:52:0b:d6:7d:fe:90:df:ac:65:83:3a:9c:1d:9e:ab:b6:6d:
7b:fe:58:bf:21:36:29:c9:ae:79:25:4e:12:df:79:ab:61:2e:
42:b6:7a:03:94:35:4e:83:6a:ca:0f:ca:2d:e1:8d:09:51:f1:
10:af:72:84:cd:e5:25:d8:2d:a9:3e:98:f4:c5:f5:6f:78:21:
e3:e5:92:bb:90:b6:fb:94:4a:a1:78:44:08:b6:6a:28:81:df:
0b:73:18:43:03:c9:a6:17:0a:87:6d:af:c3:39:36:c9:19:6f:
f6:63:61:68:89:34:a3:25:7f:20:77:43:81:b4:4f:38:37:97:
2d:40:61:62:a4:eb:16:f3:56:dc:25:35:af:72:8e:77:2e:26:
26:28:6f:ea:c4:59:f8:ab:da:16:18:93:bd:ec:3e:d7:cd:ad:
ce:fa:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:05 2025 by rpki-client