Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: JVAnvD20zclKYn/nJuIE6LEUmIg+K84rg0MORHTrPIk=
Subject key identifier: 1C:63:2A:69:84:83:FA:30:28:1C:BD:7D:4F:6B:E0:E7:70:EC:0E:0A
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 019921B24B6B3A9A8E467EBBA42193C958A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 02DF
Signing time: Sun 07 Sep 2025 01:02:36 +0000
Manifest this update: Sun 07 Sep 2025 01:02:36 +0000
Manifest next update: Mon 08 Sep 2025 01:02:36 +0000
Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=)
2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: ZEb3ETxFaq/1wSAiPYfUwtOPUtPjYd2LzILF9645FZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:4b:6b:3a:9a:8e:46:7e:bb:a4:21:93:c9:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Sep 7 01:02:36 2025 GMT
Not After : Sep 8 01:02:36 2025 GMT
Subject: CN=1c632a698483fa30281cbd7d4f6be0e770ec0e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:0c:ef:3b:47:9a:a6:97:9e:a1:be:9d:97:
06:49:19:af:b7:54:ee:4c:24:be:a9:50:de:71:34:
a7:48:8e:1c:ea:2b:d2:6a:3e:95:b5:05:c7:eb:22:
87:c9:9e:48:68:36:e5:1c:19:b4:da:f4:01:df:33:
a7:c4:fb:3a:ee:28:ea:20:c0:8a:90:58:04:c9:87:
f1:b9:bc:93:1f:43:65:ba:34:7f:16:e0:0a:89:3b:
bd:3b:d4:9d:b1:0e:85:21:0b:d7:d0:d8:45:c3:09:
ee:6c:a8:19:b0:f7:51:4d:82:84:fb:81:44:e7:cf:
f9:ad:c0:78:d8:6d:7e:fc:fa:05:ef:4f:15:84:45:
18:0c:33:4f:b7:7f:83:3e:f0:a6:65:75:b3:f2:a0:
ed:9e:0b:e1:15:c1:4f:17:e3:31:6b:11:b4:c2:5a:
da:9d:63:7c:34:fa:9f:52:74:28:e5:f9:fa:66:ed:
27:f3:78:3c:d1:71:d2:97:80:61:7c:9d:97:48:ba:
35:6e:62:dc:4f:eb:e8:5c:0c:b7:1a:8d:b1:99:5a:
9b:32:43:f4:77:30:d0:78:83:2f:76:c7:de:90:89:
d6:b0:80:54:f3:15:f9:ff:df:d0:2a:3e:10:ad:ab:
84:91:f5:d1:81:b6:eb:b1:c7:86:38:f9:83:bd:ca:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:2A:69:84:83:FA:30:28:1C:BD:7D:4F:6B:E0:E7:70:EC:0E:0A
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:db:2b:ad:83:4d:12:22:7e:de:1d:be:2d:d9:1d:17:78:be:
1f:4f:38:cf:02:13:e5:45:33:b4:f3:6b:23:21:5d:dd:d2:ff:
42:7a:ae:b5:59:81:23:a0:b3:ae:4f:99:59:05:6d:34:f3:cd:
27:05:43:8f:7f:1c:9d:bb:3b:9a:78:44:e8:04:da:06:8a:31:
eb:48:03:4d:0b:2f:09:da:60:86:97:1b:3c:2e:e9:3d:e5:96:
d9:55:7b:3c:7b:4d:62:65:09:1a:d5:2a:f8:12:5e:fd:70:4f:
22:98:dd:f7:53:12:ad:f2:02:5c:0f:6b:1a:64:f6:b6:e6:b2:
e5:03:4c:76:75:0b:9b:74:d6:63:01:cf:de:df:93:fb:56:a9:
3a:51:57:af:c6:f3:82:96:f5:8f:d8:66:31:f2:2f:65:65:4f:
53:bf:18:c1:34:86:ff:79:76:dd:84:a5:55:5c:37:7d:20:0d:
2c:bc:56:b8:28:00:e6:ba:83:78:2a:b3:8c:0e:d1:0b:6e:a2:
e6:03:bc:92:b4:42:74:44:b6:82:bd:5e:94:a2:6a:1f:2c:7d:
17:2b:a4:03:0b:27:9a:6b:cf:4d:46:f9:d1:86:b0:ad:00:fa:
16:d4:1e:1e:79:81:bc:c5:bd:2c:66:b0:bd:ca:3a:54:c4:85:
4d:77:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:01 2025 by rpki-client