Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
File: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft (raw, json)
Hash identifier: QDnnvpBDWXMELyMVmL9LM+iBjGDQpEVM1K/NzbxtpTc=
Subject key identifier: 9F:31:29:20:D3:A3:C0:32:61:B8:8F:41:5A:40:B2:8A:7A:B6:63:39
Authority key identifier: B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
Certificate issuer: /CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Certificate serial: 01992BFD7B5777791F8A0230AEF0102E55B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
Manifest number: 0AC8
Signing time: Tue 09 Sep 2025 01:00:56 +0000
Manifest this update: Tue 09 Sep 2025 01:00:56 +0000
Manifest next update: Wed 10 Sep 2025 01:00:56 +0000
Files and hashes: 1: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl (hash: IHn1EFOoYJvWSWji3VgaykCPzd2w4Ae6X8dIud4tZrQ=)
2: tyPwFquST_QYpMOQ15p0kPwIfBE.roa (hash: pgj4wMLIuT+JDsLGd7CH6ihopHeyqUjAH/pXaSBmiXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:7b:57:77:79:1f:8a:02:30:ae:f0:10:2e:55:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Validity
Not Before: Sep 9 01:00:56 2025 GMT
Not After : Sep 10 01:00:56 2025 GMT
Subject: CN=9f312920d3a3c03261b88f415a40b28a7ab66339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:6d:f3:d5:d7:52:fa:f0:72:34:80:a8:d3:
6d:02:76:8a:fa:1b:9f:58:49:dc:a0:93:9d:e1:e4:
fa:a4:27:91:a9:3b:00:2c:ff:59:79:35:44:28:fd:
99:9f:f7:f4:04:79:48:90:c7:b1:68:16:43:4d:09:
1f:2c:a0:31:d9:9b:f4:f3:06:50:39:9c:3b:2c:85:
18:c8:b1:19:2b:cb:ad:0f:99:2e:e9:4c:67:34:49:
94:aa:e1:8a:bc:5c:d0:1e:13:b9:26:3c:a0:40:3e:
23:b7:96:d1:5a:30:6e:90:a4:2c:c4:30:0a:90:af:
bf:64:5e:6d:11:06:e8:da:b5:5b:b2:eb:ea:6a:79:
f4:80:34:a1:55:bb:5f:fe:3f:ff:72:b7:2e:36:14:
17:74:35:ec:46:fc:6e:a8:0c:ed:fe:a4:42:00:8f:
27:84:c5:fc:3d:47:eb:25:8a:4d:85:93:36:7f:98:
cd:39:0c:ae:5c:44:c3:6a:a0:d7:a9:b8:25:2d:29:
6b:24:bb:c1:8d:31:d5:81:27:ee:56:7a:1f:54:b2:
77:55:96:70:54:fd:b1:f4:5a:6d:e0:53:63:67:17:
70:10:a9:02:69:a7:55:ca:d9:8b:9b:ae:a3:be:7a:
21:4b:90:93:18:e3:a1:8c:7a:c4:40:0e:ba:31:dd:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:29:20:D3:A3:C0:32:61:B8:8F:41:5A:40:B2:8A:7A:B6:63:39
X509v3 Authority Key Identifier:
keyid:B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e0:a3:85:ad:82:2e:08:7d:57:ac:a5:7d:70:7f:9d:a7:0f:
a2:14:27:27:82:69:f6:41:88:c1:87:4e:05:c2:d7:e9:dc:1d:
90:39:5b:0b:3e:8d:a0:a2:aa:f8:c4:ec:fe:45:6a:ca:9a:ea:
53:13:19:04:82:91:8f:d2:64:34:18:e1:82:b3:08:0c:8d:30:
11:dc:8c:3c:ff:25:b3:82:24:3c:c0:19:e8:8e:16:c4:3d:b3:
57:15:f5:6c:1d:78:e9:bb:d2:4c:c2:d3:14:a3:a5:20:25:cc:
9a:f9:e2:42:bd:f7:35:18:e2:f2:34:14:36:f7:ba:63:6f:c9:
bb:c9:68:18:4f:cb:30:44:57:1e:7d:55:5e:8d:76:fd:03:45:
1e:68:ea:2f:9f:72:40:5a:23:5b:51:39:44:43:47:dc:ff:79:
f7:21:5e:d1:fc:4a:eb:4d:50:17:21:fb:7d:e1:8f:15:c0:3b:
12:b8:c7:8e:ed:25:15:44:6a:65:e9:6c:ae:91:a6:21:f4:93:
05:5b:b8:ed:42:4a:27:23:4d:d4:4f:51:67:21:f1:4d:3b:94:
59:c6:e8:46:b0:34:ee:4d:ee:92:38:12:bc:f1:8c:3a:86:55:
58:93:b9:bd:19:26:ea:59:a9:77:37:35:c0:7e:d9:f9:c3:10:
8c:67:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:09:14 2025 by rpki-client