Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: vWR5S252YsKcDTJm849glPFLNAjrVAjaKMLafFYr8Ek=
Subject key identifier: 86:07:C7:3E:96:B7:F1:6B:4A:F9:06:42:30:4B:97:7C:81:F2:41:BC
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 019923313C5778B8166EE24BE660B4036107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0D68
Signing time: Sun 07 Sep 2025 08:00:53 +0000
Manifest this update: Sun 07 Sep 2025 08:00:53 +0000
Manifest next update: Mon 08 Sep 2025 08:00:53 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: CBie9Ng/yV5rmh00c7gzs2dQV5zyGawW5KM1J3awdKA=)
2: FLK4BXajTTtzozg6zwS2W0dW8TU.roa (hash: TZ26mwHHQp1z9Q90vDXRes8PV7AQXwe9m95HyPKhgHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:3c:57:78:b8:16:6e:e2:4b:e6:60:b4:03:61:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Sep 7 08:00:53 2025 GMT
Not After : Sep 8 08:00:53 2025 GMT
Subject: CN=8607c73e96b7f16b4af90642304b977c81f241bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:cb:ef:03:1e:05:da:e1:d9:91:05:1a:97:
85:d2:99:a4:87:74:64:08:cb:02:58:4b:0c:a6:e4:
5a:60:df:6f:dc:aa:25:54:ee:e6:a1:11:e3:26:e7:
ea:e7:59:0e:4d:6f:64:d9:b9:b5:de:08:43:69:1a:
7d:c4:e3:8d:07:3d:2c:93:65:38:38:a0:29:bd:6a:
91:e7:6a:ff:ad:d3:53:29:67:1e:74:2e:cc:1f:f5:
51:1a:c2:63:49:52:10:ab:79:0d:9c:bd:8a:bf:ad:
7f:77:17:18:bb:7f:18:20:f8:d8:ea:12:b7:d8:cf:
27:e7:61:c1:f9:10:0d:38:97:77:3a:51:26:f1:7b:
84:17:37:cb:fa:3d:71:0c:ef:94:f2:58:af:fa:e6:
01:74:1d:b3:a7:8f:dc:98:5e:c3:af:64:00:23:98:
d6:bb:95:f8:ac:08:ab:e9:99:fe:74:35:45:1a:bb:
13:ee:ab:d6:28:07:af:ea:d7:0e:c4:41:40:99:69:
df:3f:02:66:28:e2:cd:9f:ca:fb:ce:02:fa:98:01:
b5:b3:a9:36:97:59:d4:e9:e6:d5:7c:32:2d:30:89:
81:14:03:e0:63:ea:87:2d:35:30:d2:89:29:de:f7:
27:62:3f:bf:b6:95:d9:01:8f:1a:35:97:8d:ee:1d:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:07:C7:3E:96:B7:F1:6B:4A:F9:06:42:30:4B:97:7C:81:F2:41:BC
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4e:2a:d7:06:2c:24:df:62:46:aa:1d:ee:ba:3b:df:5b:13:
cd:56:44:90:80:ed:5b:b5:dc:03:88:a8:e4:bc:d7:04:6c:99:
b3:eb:21:83:9f:17:06:2d:e7:d1:be:fd:0d:8a:52:85:20:fa:
73:95:b9:3a:b2:61:b0:84:98:cb:b4:ce:f0:22:41:ef:df:2e:
30:14:97:9e:e1:18:75:06:78:43:32:e0:c8:a3:b1:43:e7:b0:
43:b1:5c:fe:a2:06:a0:dc:84:24:75:99:cd:e3:7b:ad:b4:c4:
f4:fa:55:e8:02:76:8c:f6:d5:d2:fa:73:34:3a:6b:04:c6:db:
3a:d4:b5:d5:48:2d:e8:f8:a3:8b:f3:3f:3e:76:b1:b8:56:e6:
04:9d:c1:0c:45:08:c8:d1:1d:d1:bb:a1:eb:14:f3:ce:74:6a:
9b:f1:e9:bf:50:7e:0e:d9:ea:28:dd:c8:f9:49:fe:20:94:9f:
78:af:38:06:7f:03:b1:9d:00:d8:34:6b:2d:3c:ec:f3:39:13:
c4:46:0e:93:36:08:5e:ef:b3:7f:5d:47:46:6c:8e:40:a2:96:
b7:1a:55:3d:62:23:0c:f7:ac:7c:cb:9e:36:2b:4b:a5:c3:1f:
67:a7:5e:cf:ec:d2:5f:f8:e9:fb:63:a6:f2:24:8b:d9:0a:1d:
95:0a:2a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:50 2025 by rpki-client