Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: ntnbEZCfLiKUp9axa5ZwGai1iQ+jNaaU0hQwUMVu3VY=
Subject key identifier: EE:AB:CC:C6:67:58:6F:CE:BE:49:B6:7F:A9:12:DA:DD:0B:40:3F:6F
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 0199364A2063E858D8EF8C7934A45D582474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1689
Signing time: Thu 11 Sep 2025 01:00:51 +0000
Manifest this update: Thu 11 Sep 2025 01:00:51 +0000
Manifest next update: Fri 12 Sep 2025 01:00:51 +0000
Files and hashes: 1: kNClGUwsPzE1RbZ5kG_8xETA5bQ.roa (hash: roFZQPowyRc/yMP0/ECMaCg3rilRHfIteyaYIvj0RIc=)
2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: AUMaGSCvTMP1qaX8Hk964L3/yNaAA/axhcbLjvU8fbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:20:63:e8:58:d8:ef:8c:79:34:a4:5d:58:24:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Sep 11 01:00:51 2025 GMT
Not After : Sep 12 01:00:51 2025 GMT
Subject: CN=eeabccc667586fcebe49b67fa912dadd0b403f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:83:ee:92:c4:68:e0:0b:0e:a1:ff:02:8d:
45:a5:95:61:d2:99:5f:32:cd:20:37:50:9e:9d:04:
df:8d:d6:84:6d:a9:3f:39:cc:3e:24:77:93:25:db:
a3:17:f1:9e:e6:54:96:3f:54:c7:53:64:cf:45:4e:
56:a7:56:22:b2:b2:9b:d4:1d:54:8b:47:88:b7:e0:
13:0e:37:56:f3:ba:93:a2:04:bc:bc:c8:c5:b5:52:
4c:ac:4e:16:fb:3b:17:fb:35:4a:49:b5:dd:d9:fa:
44:d1:2a:3b:f5:e1:2e:90:95:02:c0:c2:47:7f:b2:
0a:96:c2:4d:c1:a9:ff:cd:9e:b3:7d:0c:bd:c0:4e:
04:4c:a1:7c:22:46:9b:b0:fb:00:4e:94:ce:87:e4:
79:06:29:ad:27:e3:bb:6c:8a:bf:29:ea:2c:16:a3:
6f:91:3c:ef:70:6e:18:b2:d0:7d:88:cd:09:0a:d7:
c2:60:5f:d2:a1:58:05:6c:38:71:29:b7:f0:3e:43:
a4:6d:4e:95:4b:e9:05:bf:15:96:f8:c5:44:00:f6:
91:ea:9d:1b:82:96:ca:77:dc:52:1d:ce:ac:0f:87:
23:5f:08:a0:d8:2e:b7:92:da:b2:68:b8:93:1e:4e:
cf:2f:9e:30:98:6b:e1:38:bb:7d:be:38:fd:78:07:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:CC:C6:67:58:6F:CE:BE:49:B6:7F:A9:12:DA:DD:0B:40:3F:6F
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:71:d8:aa:c1:ae:0c:13:ea:68:38:aa:c3:0e:8f:61:79:ce:
1d:5d:22:7d:a3:70:8e:61:52:f1:0b:0d:72:e9:f8:e7:15:cf:
ea:14:a6:0b:53:38:1b:b3:35:2a:8c:05:e1:ec:5a:05:57:9c:
4e:4c:95:2a:62:3f:95:b7:f9:e4:d8:08:fd:49:26:78:6e:75:
df:80:22:b6:3d:ff:10:86:a8:24:9b:3e:90:9f:6e:07:01:e4:
0a:b2:ef:79:51:c4:7b:ba:22:59:85:65:5d:f8:7a:fa:10:e1:
b0:b5:34:dd:5f:44:fa:e6:3b:20:ce:f6:71:67:bd:56:75:1a:
de:93:16:65:89:f0:1e:b8:e3:ec:14:30:d5:ff:e7:7f:b6:48:
1e:2d:14:92:c6:d4:b5:0c:97:cf:4e:4d:19:cb:c2:93:11:74:
df:19:eb:13:44:f4:11:69:8a:14:e3:f9:5b:61:80:3e:35:8d:
76:85:0d:79:65:ee:2e:30:3c:0b:77:cf:bf:a8:53:8e:02:7f:
f1:08:34:6a:c2:1e:58:31:3e:42:99:c6:61:7c:94:f8:de:69:
59:64:7b:7d:fb:23:bc:90:19:7a:1d:3c:3a:c2:9d:e8:a0:b8:
b6:25:71:e1:6d:78:99:88:cf:b6:b2:df:b4:3a:06:34:f5:5c:
04:1e:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:54:24 2025 by rpki-client