Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: KqO7EN0TDI7C0qfkcVi0ZGfM7T5tgyPhJ1aPSmY/Aqo=
Subject key identifier: EE:CC:31:6E:2A:73:0D:97:DC:62:92:AF:BC:68:C1:0B:FA:54:1E:7A
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 019922FA681288D4BCABA2156CC514F372A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0AC4
Signing time: Sun 07 Sep 2025 07:00:59 +0000
Manifest this update: Sun 07 Sep 2025 07:00:59 +0000
Manifest next update: Mon 08 Sep 2025 07:00:59 +0000
Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=)
2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: BRxdsJHhQpDCBmnkablRrdtGVnWwbBLHxupP0Lt/NVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:68:12:88:d4:bc:ab:a2:15:6c:c5:14:f3:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Sep 7 07:00:59 2025 GMT
Not After : Sep 8 07:00:59 2025 GMT
Subject: CN=eecc316e2a730d97dc6292afbc68c10bfa541e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:71:af:b9:9f:eb:63:9e:a1:df:5a:f1:86:
c3:9b:c8:4f:be:c9:9c:36:5d:37:0b:bc:6d:ed:7f:
6f:bb:6b:27:4d:5a:4d:0c:a3:22:45:38:02:4e:d9:
56:a2:8b:94:13:31:df:4d:21:ce:e7:ae:ea:0e:fa:
12:84:e8:e6:fd:9f:40:0e:6b:2f:7e:cb:13:f8:f6:
d1:51:55:0f:ad:28:79:b4:72:f1:2e:34:4d:fa:8f:
6a:15:20:2c:d0:c4:3c:22:e0:6a:3e:67:27:04:b9:
62:95:1a:d8:3b:61:a1:d7:6a:9d:95:7c:05:08:d5:
7f:73:28:06:db:52:77:cc:b7:8a:cc:3d:d2:65:bb:
eb:f3:70:ed:9c:55:50:53:61:38:62:4d:e2:8b:c8:
5c:cc:a0:d8:7e:c5:71:85:a1:b3:34:b0:4b:6d:75:
36:1b:27:13:16:c6:50:5f:81:f5:8e:27:d4:a1:a7:
84:f2:9c:ac:f9:0f:3e:e4:13:b2:8a:03:0a:61:bd:
04:b9:a2:78:f6:ed:99:a9:a3:5e:43:ba:c9:f5:f7:
c3:44:9d:b7:9a:aa:6f:e9:66:9b:36:08:96:ce:7d:
af:cb:4e:37:51:10:dc:9d:60:8c:05:41:8a:5d:b2:
67:72:7d:66:f3:5f:8e:d6:cb:c4:7f:49:02:46:80:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:31:6E:2A:73:0D:97:DC:62:92:AF:BC:68:C1:0B:FA:54:1E:7A
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:20:ca:0a:a0:fe:41:1f:60:a3:b2:89:80:63:6a:e5:68:da:
ca:8c:e9:e1:27:0e:b2:ff:51:cc:a9:39:8a:7b:11:3f:a1:a1:
83:ce:2b:cf:01:4e:ef:b0:26:b1:0c:11:7a:85:fd:c7:99:90:
92:4d:b7:c6:cb:4b:12:41:4a:36:6c:78:4f:af:6b:2e:44:0a:
12:7e:78:80:e1:0c:9e:f6:7c:28:47:a3:e8:7b:ba:cf:51:99:
08:78:58:7c:c5:9a:69:78:71:bb:9f:3c:0e:b3:4f:e0:35:94:
43:8d:c2:f8:4f:d6:4a:a6:40:ec:87:be:44:1c:8b:78:6a:c1:
54:5d:f5:c6:a9:c1:5a:a1:ef:cc:06:c8:d6:7c:8c:04:db:1b:
03:8c:1d:bb:1b:85:49:7e:80:36:e7:8f:c1:ff:8b:e8:30:79:
b0:ab:97:ee:05:8c:3b:3d:09:41:92:9b:3c:af:54:52:d8:81:
8a:9e:67:c5:72:d4:6b:79:4b:39:94:fa:8a:b4:80:d7:e1:08:
80:8f:a0:77:2d:71:f4:bb:d0:ba:33:ed:96:2d:08:ea:eb:71:
29:f3:f5:d4:f5:84:81:1a:7b:eb:1a:19:7c:c4:7b:0d:bb:60:
53:4b:c1:91:79:39:95:67:9b:15:3b:85:3f:06:cd:8b:f9:9a:
06:24:c3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:08 2025 by rpki-client