Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: nsbiZ0g1wtmINeFFfK4azL//iboN0fV/jl7g+YS6cG0=
Subject key identifier: 5B:0C:A3:B0:A7:39:78:85:62:9A:75:A5:39:D4:09:02:E0:2C:FA:90
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 01993726083F5029D3972EB2DA26792DD697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 02FC
Signing time: Thu 11 Sep 2025 05:01:03 +0000
Manifest this update: Thu 11 Sep 2025 05:01:03 +0000
Manifest next update: Fri 12 Sep 2025 05:01:03 +0000
Files and hashes: 1: CON1qItWtbrKIYXRdV_TEeDuWKQ.roa (hash: krT8XWx87IlYD5e3RTY90vBER8rVmDuOSR/mGg/Tnd4=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: VKkjSzM9cjYr7xWpPaJkHsbrfBwwykHH/+FEN/vEmos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:26:08:3f:50:29:d3:97:2e:b2:da:26:79:2d:d6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Sep 11 05:01:03 2025 GMT
Not After : Sep 12 05:01:03 2025 GMT
Subject: CN=5b0ca3b0a7397885629a75a539d40902e02cfa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:7c:1e:ca:37:7b:8f:ff:a2:53:3f:31:7a:
63:2c:3d:03:e4:ca:fa:7c:98:1f:a6:16:e3:52:4a:
65:c3:ec:ff:11:d6:e8:b1:1b:13:90:52:bc:1f:2a:
f0:d3:d1:2a:71:6e:23:cf:8e:b3:70:3f:9b:f6:17:
41:ed:bb:e0:97:d5:ab:dd:dc:63:8c:45:b1:33:13:
34:0b:2a:2e:c9:52:f0:87:8d:46:06:03:18:2c:60:
0a:cc:c1:f5:e3:db:11:a3:24:8d:e2:56:ca:a4:78:
11:75:8a:11:20:52:12:36:7e:8e:04:b5:0b:ce:05:
82:3d:92:47:fd:7c:5a:90:a7:b4:f8:bf:bf:18:d4:
39:47:c4:74:a0:be:5c:e0:e7:3f:eb:d5:f0:c2:78:
e9:92:de:d0:a9:3b:62:47:79:dc:94:b1:6c:fd:a6:
b3:58:5d:61:db:0f:7f:84:63:bf:f1:be:6e:d1:39:
4f:27:67:7e:d9:f5:3c:91:48:e3:50:e5:03:f6:27:
39:e1:c0:ae:a2:18:fa:3b:b9:01:fc:28:76:c3:30:
19:e3:65:b5:2f:8d:a9:95:34:53:4e:7c:ea:dd:3a:
02:08:6b:0c:da:71:97:f4:15:4e:2a:46:5e:5b:c8:
89:94:50:c3:88:28:33:bc:f8:8c:67:2f:2e:f8:ad:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:A3:B0:A7:39:78:85:62:9A:75:A5:39:D4:09:02:E0:2C:FA:90
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:37:e2:2c:66:bd:27:08:7c:9f:e4:56:f0:3b:cc:2e:28:e2:
d0:72:31:53:3c:a4:6a:3d:cb:e9:f0:38:05:45:46:45:4c:90:
e8:76:5d:49:88:11:2c:4f:9c:e6:cb:45:63:c3:bf:a1:20:df:
1e:17:67:58:54:61:88:75:52:5b:8c:69:0b:a1:2f:b7:0c:c1:
a7:8b:98:d0:87:e1:cc:ea:66:87:9b:6c:70:30:02:3b:7b:08:
ca:77:c3:e0:bf:33:2a:a7:a5:82:f1:ee:e9:49:99:17:c8:02:
a3:24:fd:9b:87:97:ad:04:40:38:68:11:28:b1:a5:12:01:21:
e8:aa:3d:b2:e1:e2:b1:8b:d5:0e:64:2f:00:f8:4d:bc:bb:f5:
e2:d1:67:64:7e:2c:d5:b3:c8:5e:86:27:e0:f8:e9:d3:0a:ac:
68:ca:31:4e:f4:60:7a:b9:70:9d:ce:3d:42:d4:f5:fa:c6:f5:
41:da:60:e3:2d:09:b1:33:c3:99:d9:09:f7:9d:f7:56:36:10:
10:21:dd:1b:75:e7:d9:78:03:60:21:af:4c:30:2f:45:29:dc:
28:26:f8:e2:63:d6:0e:c0:0d:4c:bd:6b:38:cd:c6:a2:09:fb:
24:6a:9c:a0:c7:cc:17:04:75:1f:8f:58:2d:aa:ae:bb:fc:69:
3b:54:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:41:33 2025 by rpki-client