Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: EqffHhFKPKDLVOuRyM7yjvJF2+rJz38cGD54+VQ/apw=
Subject key identifier: EC:F8:CF:A3:2C:61:31:5B:D8:A8:69:36:52:D0:1C:64:9A:94:F8:E7
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 0198C9B86DBE27569A1CCF31429A8F5A3933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 3B
Signing time: Wed 20 Aug 2025 23:02:43 +0000
Manifest this update: Wed 20 Aug 2025 23:02:43 +0000
Manifest next update: Thu 21 Aug 2025 23:02:43 +0000
Files and hashes: 1: ay2UhLb9gVwOGFcPuT7u3po7GlY.roa (hash: Nc0lcUmEx3NfjhiK/z5Wio+LmihCcurK5+zIFKzkR30=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: m7VUKO4ZR0cfe7pThCpZDTEbt+usb41VXfK+YP6VbAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:b8:6d:be:27:56:9a:1c:cf:31:42:9a:8f:5a:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Aug 20 23:02:43 2025 GMT
Not After : Aug 21 23:02:43 2025 GMT
Subject: CN=ecf8cfa32c61315bd8a8693652d01c649a94f8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:2e:2b:c4:65:ed:6f:6d:aa:79:87:68:dc:
d8:c0:95:3a:8e:d2:a9:2c:44:8b:01:10:27:6a:06:
cb:0b:a6:84:82:d8:f2:0a:f3:86:47:da:c2:0e:98:
40:7e:18:d0:5d:07:02:bf:a9:16:13:ea:14:15:d4:
26:b9:c2:e9:e3:62:07:e8:d1:6d:87:cb:85:28:be:
24:8e:7d:e2:4c:69:f9:a5:4c:a1:94:3f:b3:da:1a:
8b:ed:4c:31:bb:90:87:de:4a:fa:e6:63:d3:94:ff:
fa:85:02:cb:1f:df:d5:02:e6:4d:ab:08:ff:b6:55:
ed:b4:f2:ee:49:08:b4:13:46:4e:31:eb:8d:74:a1:
f8:bb:71:61:87:51:14:26:00:dc:8f:82:a0:27:e8:
27:0f:63:cf:c4:a0:1f:11:db:8d:07:55:47:d5:9c:
89:f8:24:6e:ad:85:56:81:c0:45:27:d1:12:53:d6:
d3:32:85:a1:c8:3e:05:8a:21:a0:ae:d5:d0:23:7b:
a9:52:ae:98:44:3f:5e:79:a8:c3:d8:70:19:7e:e0:
d5:ca:9c:94:eb:f2:aa:51:c0:13:c0:2f:89:85:47:
bd:69:08:df:e4:61:6f:11:57:31:08:cc:d4:02:13:
4b:d9:fd:a4:ae:e1:ef:a1:50:89:5d:e3:a8:26:71:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F8:CF:A3:2C:61:31:5B:D8:A8:69:36:52:D0:1C:64:9A:94:F8:E7
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d9:71:b3:ee:fb:86:7b:39:47:3b:58:a4:8d:53:f1:4a:af:
3a:f6:75:47:9c:16:66:74:0a:28:c4:d8:99:88:4c:d4:12:51:
47:6d:de:e1:62:a1:e9:ab:c9:69:82:72:80:07:cf:f5:07:11:
26:dc:49:d3:95:f9:5b:b4:c7:bd:a9:f3:43:e6:d1:34:31:80:
a8:6a:0f:76:3a:a5:cf:a2:7f:d1:2a:37:cb:56:54:2e:83:d6:
81:f3:48:c9:ee:6a:1e:26:ce:1b:11:e1:79:a6:fe:11:55:57:
ee:04:f1:06:2d:85:c8:fc:84:28:e2:b6:3c:51:3b:46:52:3f:
b6:bf:dd:84:40:4b:f1:3f:37:1a:29:df:95:ea:35:4a:f4:63:
e6:88:6d:38:6a:fc:c2:ee:d3:8e:10:9b:6e:6f:58:cb:b6:64:
5a:e0:70:fe:a3:93:a8:04:22:7f:dd:5e:1b:4d:ce:2f:9b:61:
7e:6b:a3:54:83:1b:3a:37:bb:79:08:5a:72:d8:7e:a2:e6:cc:
16:a3:6f:6b:4a:d0:99:de:b7:68:8d:dd:bf:34:95:73:a4:4a:
81:d3:b9:24:e7:a4:d8:0b:ed:30:a9:49:8f:41:c0:91:93:2a:
9f:71:ae:d2:62:8f:8a:7f:60:a6:1e:0e:08:e4:84:45:5a:a2:
b5:9c:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:11:53 2025 by rpki-client