Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: kP5/YKy4hJdeTot6i/DuM9UTrikGevvrzYAAbDdLv8o=
Subject key identifier: 6A:03:65:F6:A4:81:24:6E:6C:78:16:FF:FD:73:5C:0D:03:50:0E:70
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 0198590FC94C822FC9EF5401F9D747E48B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 1608
Signing time: Wed 30 Jul 2025 02:01:03 +0000
Manifest this update: Wed 30 Jul 2025 02:01:03 +0000
Manifest next update: Thu 31 Jul 2025 02:01:03 +0000
Files and hashes: 1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: 6z2cQ12RYaQSSsjGv/lVzWCr0n9r4TF6BxiAx4G2Fxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:0f:c9:4c:82:2f:c9:ef:54:01:f9:d7:47:e4:8b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Jul 30 02:01:03 2025 GMT
Not After : Jul 31 02:01:03 2025 GMT
Subject: CN=6a0365f6a481246e6c7816fffd735c0d03500e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:9e:1c:6b:e4:12:66:80:5f:ea:ed:c8:c9:
67:59:a6:70:0f:57:c0:8c:aa:9c:57:fc:06:1a:40:
b0:02:62:e3:42:ea:07:22:90:f2:a4:fb:8d:6e:b8:
ba:e6:00:34:90:fb:b6:7b:74:c7:2b:0d:cf:4c:76:
66:c3:36:29:44:ec:e7:53:c6:5d:a2:75:e6:5e:df:
e6:66:f8:c9:93:f4:be:59:1b:8f:2f:c5:86:9b:07:
fc:b8:41:40:0e:10:47:c7:af:4e:18:58:39:48:4f:
59:77:49:ac:97:6f:ca:d6:20:da:e2:1a:61:9c:1d:
e9:e3:52:c0:9b:5c:4b:ea:88:7f:73:9c:17:69:3e:
72:1b:22:a9:0d:e6:ca:a6:90:e9:68:5d:87:44:94:
5c:fd:f1:1f:2e:b4:e4:19:5a:7b:32:4b:d5:f5:07:
37:76:e7:e4:7b:da:c6:bf:53:8a:99:2b:90:7a:48:
93:ee:06:d8:5c:93:07:6b:67:07:2b:43:fa:f6:dc:
37:ed:52:88:74:44:33:d9:68:05:a6:4d:1b:ca:e3:
ca:5c:de:63:6a:27:cc:3c:da:66:81:96:bc:b0:78:
49:10:b5:b7:ce:32:ff:ee:eb:6a:81:d9:21:2c:d0:
0e:e3:42:f6:ce:f3:46:7f:e8:b0:8f:bc:6a:a5:bb:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:65:F6:A4:81:24:6E:6C:78:16:FF:FD:73:5C:0D:03:50:0E:70
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:29:8d:c9:b3:7b:32:ea:23:5d:13:ea:f6:63:dd:b7:10:96:
34:b8:ab:fe:54:ab:33:84:cf:9d:a3:ab:6e:25:30:1f:20:3d:
01:28:a6:2c:6f:41:23:b9:0f:dc:21:91:52:45:31:f9:27:11:
51:bc:72:4f:7b:80:fa:a8:1c:79:e6:ba:fb:ca:c9:3e:0b:7c:
b3:68:f1:bc:c6:34:a1:79:19:bd:92:b8:86:60:4e:f2:4e:9b:
d7:fd:45:25:7a:69:69:62:8c:a9:2f:17:87:57:5d:ea:b7:96:
dd:c6:77:0d:8b:8b:1c:91:55:81:7d:00:d6:25:a6:b8:ba:d8:
31:e8:4f:39:2a:51:ce:ae:25:41:6d:84:66:e9:01:cd:9b:e0:
31:cc:1c:06:67:18:d8:40:1a:9c:06:f8:ee:ac:53:de:86:af:
e3:f9:4a:4f:47:0c:93:7c:4d:f5:65:f7:b6:66:42:c2:65:07:
e2:55:e0:9c:84:0e:fa:13:4a:1d:2d:26:ee:9d:f3:34:01:d5:
25:10:8c:54:7e:d1:fe:60:a4:bb:21:c0:7d:56:ac:29:50:1e:
c2:d3:a2:ca:45:16:84:f2:82:3f:81:d2:90:24:64:52:59:55:
ef:e2:4c:d2:90:83:85:08:26:83:c6:04:a7:f4:47:d0:77:9c:
af:3a:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:24:31 2025 by rpki-client