Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: Dqacf7SDkV46fiv/o0Qm2/t7e+LaSnKEw1XR/qc05E8=
Subject key identifier: 1F:B6:02:56:B2:26:46:FF:5B:45:CF:A9:FE:8F:40:91:28:96:51:59
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 0198C9B85828A812119A901E1322383C94A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 10BB
Signing time: Wed 20 Aug 2025 23:02:38 +0000
Manifest this update: Wed 20 Aug 2025 23:02:38 +0000
Manifest next update: Thu 21 Aug 2025 23:02:38 +0000
Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: Yu2mRMg4o87krAyO/Z1vrsoftSPPnYeYODJHDCh5ByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:b8:58:28:a8:12:11:9a:90:1e:13:22:38:3c:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Aug 20 23:02:38 2025 GMT
Not After : Aug 21 23:02:38 2025 GMT
Subject: CN=1fb60256b22646ff5b45cfa9fe8f409128965159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:55:2f:56:15:4e:dd:75:b5:b9:01:17:83:
65:d7:7d:95:96:c7:30:ac:6c:8c:04:14:af:fc:df:
29:54:bc:ef:c1:61:e4:c4:43:9e:54:b8:4f:d9:52:
30:c8:77:94:15:c5:6f:91:2c:93:6c:be:b5:4f:d8:
e9:15:6d:eb:d0:e8:b5:cd:5d:8d:2f:b9:87:82:58:
51:71:1c:6a:c6:40:29:9b:51:67:d7:3d:84:fd:08:
3a:8a:d6:9f:77:cd:53:b2:2a:85:b4:a4:d0:1a:53:
bb:a5:21:4f:5b:b3:5e:68:4b:2f:90:d4:69:7b:95:
a7:c2:3c:bd:cd:d1:2c:22:62:56:7f:95:a6:b5:fa:
db:a1:22:f3:3e:6f:91:28:af:6c:f6:d4:76:0d:68:
fa:7d:12:52:c4:92:f0:80:2b:be:bd:d1:02:cb:0e:
29:ea:89:b7:a8:19:36:0f:ad:ff:c0:01:dc:af:ef:
bf:94:6f:34:42:98:f4:99:62:d2:1a:7a:5d:7d:26:
f2:c0:71:0d:df:63:3a:f1:64:1e:b9:f8:84:77:33:
e8:dd:94:ce:92:f0:f0:69:69:b9:70:b9:42:77:1d:
af:f5:f4:a1:b3:64:2a:3d:c9:80:c8:8a:b1:0c:e7:
9b:bd:67:1e:66:fd:c7:4c:72:b0:dd:99:75:9c:4f:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B6:02:56:B2:26:46:FF:5B:45:CF:A9:FE:8F:40:91:28:96:51:59
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:47:54:60:66:ac:0f:1d:dc:1a:73:2e:8c:85:37:5d:10:6c:
71:ad:a8:61:eb:a1:01:40:da:0d:c0:9a:8e:7b:86:f1:14:e6:
9c:2a:bd:7b:02:33:81:51:d4:6f:e8:0a:90:b5:82:e8:b0:89:
79:97:a5:9b:99:d4:86:d1:45:a2:d7:30:04:87:7c:37:13:f1:
c2:41:94:dc:cb:16:6c:ea:9f:d6:53:4e:3d:e8:05:0a:02:4d:
3e:ca:a1:1d:d9:6d:42:3b:da:a3:38:80:a8:b5:7b:c0:a7:9f:
66:76:6a:8d:bd:c5:3c:74:ec:7e:30:bc:5e:80:aa:e5:93:eb:
26:f7:8c:06:f5:3e:58:50:c8:64:fc:2f:ff:c5:1f:11:7b:1e:
52:7b:0e:7f:fc:08:5f:b2:4e:8d:b8:42:dc:cf:d7:c5:73:7b:
5a:4f:e6:92:59:36:26:83:d8:a8:f6:7c:60:53:95:ca:eb:44:
fa:53:b7:f6:6c:27:fa:ab:fb:08:26:2c:ed:5e:f5:3c:5e:fc:
7a:cb:73:02:51:63:15:26:4d:2f:29:87:fa:51:23:bf:af:fb:
ed:23:c9:63:83:c7:e4:8c:5d:8d:86:81:3a:2c:b9:76:c0:bc:
f5:e3:8a:14:da:5b:ae:44:e9:1a:78:fa:00:64:34:74:67:90:
c1:ab:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:01:54 2025 by rpki-client