Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: swU6tw1259MKbR0xrwPFw1csC44BgxGqt9r93il6810=
Subject key identifier: C3:FC:0C:C7:D0:FC:D0:27:1A:4E:83:11:CE:93:01:4C:09:39:48:1A
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 01994E8946C10D36DF2C8CFB86F31EF9C4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 055E
Signing time: Mon 15 Sep 2025 18:00:43 +0000
Manifest this update: Mon 15 Sep 2025 18:00:43 +0000
Manifest next update: Tue 16 Sep 2025 18:00:43 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: aEDbukRVj70su6UXkxMn1lPBiTPjgEIzPt3hyZUTgDs=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:89:46:c1:0d:36:df:2c:8c:fb:86:f3:1e:f9:c4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Sep 15 18:00:43 2025 GMT
Not After : Sep 16 18:00:43 2025 GMT
Subject: CN=c3fc0cc7d0fcd0271a4e8311ce93014c0939481a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:7a:7b:6a:a1:bc:07:62:8e:28:f4:22:55:
5d:58:4f:92:6e:c8:57:c2:e1:d3:e1:ec:45:7a:80:
2b:7e:40:2e:43:82:f7:50:f2:d9:0a:67:e8:79:f2:
e3:a7:84:1c:7d:2f:4d:70:ea:27:e0:4a:b2:17:3d:
f3:2d:c1:b5:19:a0:04:f4:82:07:a6:94:22:f7:e3:
46:20:5b:c0:df:d0:28:87:c7:5e:92:66:54:be:f0:
cd:3f:c5:7c:01:2f:bf:05:cc:ff:01:ed:18:23:4c:
3c:b4:75:1b:9c:b8:b3:c6:eb:61:d8:df:82:68:e8:
5e:2b:73:3f:61:a3:22:03:f9:30:98:50:28:06:1a:
33:64:91:f9:d3:1c:65:00:5c:20:ab:0b:07:58:b4:
70:d6:1f:2d:f3:5c:4a:3f:c4:62:bd:c0:05:00:c0:
c2:60:d0:47:30:b4:ca:09:70:90:03:f0:93:87:db:
d0:32:c1:73:7c:f9:a3:2d:1b:05:e9:a0:2c:b0:9a:
63:2c:ff:6c:13:08:4e:a0:9b:59:da:9c:9f:08:09:
20:a8:a5:87:23:44:66:1e:20:60:4b:66:a1:72:6a:
53:cb:85:0e:76:bd:30:04:11:c8:a5:4d:c7:7a:2d:
20:fd:cd:bb:61:9f:eb:bc:2b:14:f7:61:2c:89:c6:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FC:0C:C7:D0:FC:D0:27:1A:4E:83:11:CE:93:01:4C:09:39:48:1A
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f0:99:1b:af:01:8b:4f:a4:c0:30:cf:a9:82:93:80:58:86:
23:69:07:10:9e:d9:55:cb:bb:78:6a:3e:8c:25:6a:3b:be:c0:
1c:38:04:eb:f0:ac:c2:1f:d7:dc:a2:32:8f:2e:82:f0:8e:20:
d5:37:cc:27:94:bc:2d:65:f7:53:29:da:2c:49:5e:c4:cf:32:
9a:2f:98:72:17:64:82:5a:4e:be:7c:d3:eb:4a:74:a7:8c:ed:
49:17:da:af:eb:2d:af:f9:b4:0e:ae:24:35:33:92:f0:d1:36:
5d:ed:40:4a:a1:75:65:26:17:99:7b:7e:3c:81:c1:85:8a:c8:
6c:16:64:af:68:4e:8e:98:c4:b9:d3:7b:32:8f:22:e3:b0:95:
3b:81:49:b7:eb:8a:0f:b7:7b:72:83:c3:e2:cd:50:f4:00:86:
2d:30:a8:e7:5e:7b:14:44:d2:7b:c7:38:ea:7f:04:e4:d0:b8:
21:34:97:cb:b5:95:7a:91:7c:38:a4:d8:33:40:c2:5c:63:17:
98:10:f1:fc:2f:84:31:c8:52:ba:47:68:08:88:da:e6:c7:1d:
30:ae:c4:6c:dd:b2:f5:8f:5d:cb:83:94:d0:24:b4:a6:aa:92:
f3:a1:ba:44:4d:79:18:89:df:05:51:53:11:ac:7a:f4:82:44:
04:0f:58:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 23:12:58 2025 by rpki-client