Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier: GTb4bqxWg80Oj19v6OgyZ/9NfsjomOLtra30qtCRbyg=
Subject key identifier: 1B:CB:15:09:87:17:81:97:1E:4A:2B:60:51:08:6E:6C:9B:84:D1:D8
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 01993BA6F34968C3D1C0BF2D9BA3CE1C533A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number: 07EF
Signing time: Fri 12 Sep 2025 02:00:20 +0000
Manifest this update: Fri 12 Sep 2025 02:00:20 +0000
Manifest next update: Sat 13 Sep 2025 02:00:20 +0000
Files and hashes: 1: 7d2f98bHzqHWx5M7oEXVyJyz8B4.roa (hash: WP0mtIYc1sSiT/bxjFMuO4V87PtcesycNrQ76Yhzw5U=)
2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: 8aAEWx/vxxTAyrrgFTJfLR13uxtj2zRNd8QMaDFHZrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:a6:f3:49:68:c3:d1:c0:bf:2d:9b:a3:ce:1c:53:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Sep 12 02:00:20 2025 GMT
Not After : Sep 13 02:00:20 2025 GMT
Subject: CN=1bcb1509871781971e4a2b6051086e6c9b84d1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:48:94:99:7b:f7:1b:54:9d:eb:51:2a:f3:
04:0e:79:9c:4d:02:6d:53:e0:3b:68:c4:48:e9:7d:
6d:52:67:49:cc:27:d2:e3:7e:80:33:1b:ab:b1:57:
e7:4f:cb:c1:5c:a8:e6:27:ea:6e:32:e9:1c:f5:69:
a3:06:23:ef:5d:64:03:a5:69:83:03:cd:30:c4:5e:
ea:b2:b8:e6:9e:4f:bc:58:c0:e1:84:0e:5b:f4:85:
ef:d3:40:43:23:7e:50:2d:75:15:a7:c5:c7:4f:06:
04:41:b0:fe:38:5a:ab:94:f8:23:c8:87:7f:bd:83:
54:20:2f:53:2e:47:10:ae:b1:d5:3b:17:7b:8f:25:
ae:b7:c3:ae:4d:37:25:a4:e4:9a:95:4b:ef:ee:f0:
11:dc:9e:7f:e9:d8:0d:8b:07:12:cc:19:d3:46:14:
26:00:8f:ca:e1:37:da:d4:a2:5a:30:91:2e:dc:7d:
32:63:45:5b:ea:bb:df:07:e0:50:95:55:1b:2d:a6:
1e:73:30:68:bf:79:4f:bf:26:30:83:70:7f:d0:e5:
e2:2c:ea:2c:ef:53:2c:99:c5:91:76:5d:8e:68:21:
71:d2:6f:ed:4d:b1:32:d1:ac:b3:bf:7d:62:b3:1e:
a0:9b:8e:cd:04:21:4f:24:72:9d:1d:86:71:32:64:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CB:15:09:87:17:81:97:1E:4A:2B:60:51:08:6E:6C:9B:84:D1:D8
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fa:81:43:f8:87:68:f6:7f:99:01:9f:57:dc:1d:a2:92:b8:
c1:1e:dd:ec:12:71:8a:57:84:d8:85:77:26:f7:d1:4a:27:8a:
d6:13:89:fd:e4:31:a4:3f:1b:5b:9b:51:c1:91:85:a2:37:12:
60:26:ab:2d:78:5d:f3:cd:f7:a1:8f:0c:32:1d:bb:c5:ae:a3:
3e:cf:66:ea:8e:61:bc:ca:35:3a:91:47:43:97:19:57:88:9f:
2a:af:3d:a4:02:d9:40:84:1c:86:db:bd:c0:f3:78:47:28:c3:
0e:a1:10:0b:ae:60:3b:a1:dc:f9:d4:dc:e5:10:68:55:ed:35:
1c:74:77:41:50:59:21:6d:fe:64:20:d1:ef:d1:6e:a3:26:6d:
29:c1:ba:3d:00:a8:d0:45:f1:56:49:83:f2:fb:41:68:94:3a:
17:4b:b8:fd:a6:10:7c:b3:c4:78:7e:e4:61:59:be:db:da:92:
34:82:05:96:ae:a4:7d:26:0c:a9:42:78:fe:72:ae:a5:8f:87:
7e:a1:47:51:19:42:29:f7:4c:ae:c4:ee:d2:43:fe:29:6f:48:
bf:b1:b6:24:53:c5:42:5f:9b:85:a0:a9:4e:d1:50:9c:60:63:
af:6d:e5:36:35:c3:c2:a8:96:5b:d6:20:66:5d:02:a7:f1:22:
07:6d:fe:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:16:55 2025 by rpki-client