Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: UsQ7XXdgeVJMKw1RH/nxlefinWvp8tJBIZcoFGGt31w=
Subject key identifier: F9:86:C0:4D:02:4B:F3:07:71:72:37:8A:A2:F5:2B:0B:32:18:D7:96
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 019921E7570D0405C07EE23B889F5FA6F27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 079E
Signing time: Sun 07 Sep 2025 02:00:33 +0000
Manifest this update: Sun 07 Sep 2025 02:00:33 +0000
Manifest next update: Mon 08 Sep 2025 02:00:33 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: //QXrZrgOS54I9PQdLUkb9AvNwuZLL7H5+4Q6DBlaAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:57:0d:04:05:c0:7e:e2:3b:88:9f:5f:a6:f2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Sep 7 02:00:33 2025 GMT
Not After : Sep 8 02:00:33 2025 GMT
Subject: CN=f986c04d024bf3077172378aa2f52b0b3218d796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:6c:a3:56:dd:49:6b:a1:1c:b7:ab:92:64:
37:ab:a6:c6:3d:da:d0:00:95:85:80:ac:c2:66:e7:
f4:51:9f:41:f4:c8:19:b9:fc:a7:67:62:30:06:3b:
25:9e:5b:3e:2f:50:5f:dd:d1:d3:38:25:9e:15:ee:
32:cd:ee:de:5d:05:27:df:04:81:6e:6c:10:fe:00:
7c:da:75:d7:2e:97:ac:aa:f6:1e:ca:1c:99:07:e9:
d4:44:bc:d6:99:12:06:d4:50:75:af:c2:1a:f6:39:
21:3b:7a:91:f9:91:92:27:9a:1d:e8:a6:95:5b:71:
fc:f7:60:e8:92:a1:e5:de:f2:b6:d2:5f:3b:d0:fc:
1c:2f:3f:95:b9:2d:ba:18:1c:fe:ed:e8:f9:36:6f:
f0:6e:32:f5:c1:66:bf:11:2e:ff:64:1c:35:0f:b2:
31:a7:95:a7:13:14:a8:fd:45:78:57:b6:42:0e:7a:
98:5f:32:4d:db:ef:6c:5a:ea:8d:af:67:c6:d7:be:
2e:e4:eb:ac:4f:c4:94:85:c3:30:8a:a3:2a:00:d4:
07:e7:34:23:f8:34:00:f0:75:04:bf:bc:18:45:8a:
40:92:06:27:44:4d:1e:8b:44:0f:30:24:66:71:9c:
a6:09:e9:99:1c:6f:04:54:22:05:50:29:06:a2:46:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:86:C0:4D:02:4B:F3:07:71:72:37:8A:A2:F5:2B:0B:32:18:D7:96
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:54:32:f7:52:65:2e:7e:61:46:1a:2d:96:63:3b:37:62:5a:
85:2c:56:a5:de:be:37:5b:35:7c:3f:69:8a:21:da:7c:f4:95:
b8:b5:cb:24:ff:c8:eb:90:83:06:d8:82:af:d5:a7:ef:9c:08:
1e:09:6c:65:a1:ad:d4:65:31:69:ff:52:28:af:22:71:f9:07:
a9:36:7d:47:d0:53:ba:5e:94:b6:41:75:76:b3:b0:81:21:15:
5e:0b:d3:ef:6d:a7:d6:dc:78:ed:07:b0:9f:57:4a:8d:50:af:
48:d0:b5:81:99:62:8e:af:91:57:ff:03:71:d4:9e:7b:69:d0:
f7:15:e0:62:fd:eb:ac:a6:99:bc:9c:00:f0:b1:67:86:30:f7:
cc:17:5a:c2:2b:2a:40:7f:d1:16:a5:9b:10:6d:52:14:cf:96:
6d:c1:12:9b:ea:72:38:7c:08:8a:02:6d:c2:c9:5f:9e:af:f7:
0d:f8:ff:17:02:a3:ac:13:a0:cb:ad:64:0c:a2:7a:7b:fa:c9:
46:7c:b7:7b:2b:a5:53:be:b4:4f:1c:d9:96:b6:66:1a:ee:ee:
b8:33:17:68:57:5f:86:3c:98:e2:b2:67:12:ac:4f:97:0a:c5:
e0:25:ca:d4:6d:7d:18:50:9f:f9:a1:22:9f:61:89:78:67:44:
25:ae:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:58 2025 by rpki-client