Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: bWlCA4WXBN/HFjr7a25eQBcYJKS+cGsp3nFno+yPstg=
Subject key identifier: E1:19:70:2B:8C:15:F6:E1:EF:5E:FA:2A:48:97:1C:7F:A7:C5:08:A6
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019933804E6847CD166CAAC4E2DB891C12CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 039B
Signing time: Wed 10 Sep 2025 12:01:10 +0000
Manifest this update: Wed 10 Sep 2025 12:01:10 +0000
Manifest next update: Thu 11 Sep 2025 12:01:10 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: kUqfd8TILMiUnX7TCkG2c3o0yWla1oEMnMn9f1+xjP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:4e:68:47:cd:16:6c:aa:c4:e2:db:89:1c:12:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Sep 10 12:01:10 2025 GMT
Not After : Sep 11 12:01:10 2025 GMT
Subject: CN=e119702b8c15f6e1ef5efa2a48971c7fa7c508a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:4a:94:f7:46:d1:0e:44:83:42:c0:ae:2e:
d4:fe:86:62:3b:eb:67:08:16:98:e0:12:1c:7a:c0:
7c:e8:0c:54:5e:29:0e:81:ef:32:8b:b0:bf:4a:22:
b0:3a:c6:e0:c6:4b:47:aa:57:35:bb:e0:c3:ce:2c:
ae:05:18:bd:c6:32:4e:b8:01:3e:4b:08:41:eb:a2:
04:d1:fb:07:ae:95:e0:bb:e0:05:bc:dd:9e:56:ea:
31:2d:b7:60:04:23:d4:ca:4b:f1:a8:6f:54:ba:fd:
67:8b:13:15:2f:d7:fc:18:c0:c7:56:2c:38:11:84:
ab:4b:c6:e4:55:dd:9f:5e:b5:62:4b:3e:54:ee:ab:
2c:ac:e7:be:33:51:0a:44:a7:39:a7:06:38:56:54:
38:f9:e7:eb:e6:33:f9:79:8d:b6:16:6e:18:b9:ca:
5e:c7:a7:34:26:74:f0:ab:8a:54:8e:18:82:da:59:
65:dc:24:ec:e4:0d:76:18:56:3c:95:ac:33:70:cf:
e5:56:3d:ca:48:cd:9e:62:96:94:b6:1a:d1:ae:36:
60:d8:ef:f3:a9:db:55:5c:b8:c3:b5:b5:cc:7f:ad:
f3:78:d6:d2:9c:4c:0e:88:df:ae:b8:44:26:e8:59:
84:5d:45:92:dc:de:e9:5a:5f:39:b5:79:b7:b8:98:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:19:70:2B:8C:15:F6:E1:EF:5E:FA:2A:48:97:1C:7F:A7:C5:08:A6
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c8:02:d9:27:ff:7d:7e:7e:cc:73:eb:7e:d0:de:e2:52:9b:
00:14:56:32:ec:67:3f:73:6a:29:0b:77:ec:b1:53:29:4a:2e:
64:c8:9b:fb:d9:87:bd:d1:77:f1:5f:24:9e:da:7d:b3:fb:d3:
0a:e8:12:7f:fa:44:c7:bf:12:f9:70:bc:14:c5:f5:26:ae:14:
11:41:35:f0:0d:0c:16:d6:04:ef:fe:61:b0:cc:49:c6:e8:64:
f7:67:6d:8c:25:a7:6c:03:0a:33:a8:1d:bf:8c:85:e1:2a:b1:
68:7f:33:48:19:b9:5c:5e:83:ff:e3:62:1b:2a:15:4e:4b:84:
08:02:9d:df:28:da:db:31:a9:64:e3:a7:91:1e:12:2d:ee:25:
cf:9f:5c:40:ff:a2:29:10:28:80:7f:7b:c9:5b:d3:d0:fc:13:
81:4d:f1:a1:ae:0f:16:12:0f:fc:40:6d:ff:0f:3e:a3:76:55:
63:e5:61:66:9f:45:86:50:44:44:b4:c9:cb:24:6c:67:f4:a5:
b8:c7:84:fd:46:4f:04:d0:5e:96:a5:4f:fa:22:f3:82:b0:1b:
42:43:72:94:d0:97:d0:37:37:6d:3b:ed:ff:3b:aa:3f:95:e9:
a6:f8:7e:27:e4:49:a8:b9:bb:d8:2c:31:d3:ff:74:63:98:20:
d9:5f:78:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:40:51 2025 by rpki-client