Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: hRXwVb+mPXG5/QRzx0r98be3ceEqYNMjnDU6ImEVumY=
Subject key identifier: 41:E8:AC:16:9A:62:CD:82:CD:2C:D8:0F:0D:BD:6E:96:4D:C3:47:B5
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 0199380235F73E5274DCA7E0BF9F43EBE532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 06F0
Signing time: Thu 11 Sep 2025 09:01:32 +0000
Manifest this update: Thu 11 Sep 2025 09:01:32 +0000
Manifest next update: Fri 12 Sep 2025 09:01:32 +0000
Files and hashes: 1: n3lj8Imlf54KOqF_Kqk-h0qcwVk.roa (hash: 2POYPsdH+jKImtpOmPpWEy8yit+ATY6Eb8geD/u6vK4=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: BMpB2akwL3qTfZVXO80KtnWfKQgFK8O0x4bnkI55xWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:35:f7:3e:52:74:dc:a7:e0:bf:9f:43:eb:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Sep 11 09:01:32 2025 GMT
Not After : Sep 12 09:01:32 2025 GMT
Subject: CN=41e8ac169a62cd82cd2cd80f0dbd6e964dc347b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:43:d3:be:5e:d4:17:cb:e3:43:68:f2:dc:
2a:be:f8:bd:95:be:44:15:48:fc:a1:b5:fb:88:66:
b2:f3:d5:0a:85:57:f2:f6:60:3f:8a:ae:e2:cf:bf:
0f:f2:21:22:94:38:50:69:87:97:b5:06:9a:d9:7d:
06:5c:d2:bf:8d:5f:ab:64:f6:ee:70:82:1e:b3:4e:
fe:a2:a5:b0:39:8e:b7:65:51:ee:3f:ef:c4:18:c1:
b1:f3:12:bf:db:2f:5e:8b:91:b9:d5:63:b5:4c:0e:
a7:9f:64:b8:e2:da:17:ae:a9:89:7f:ed:e3:0a:86:
1e:0d:ee:8c:1f:57:fa:ad:8b:16:71:f0:92:91:1d:
d1:53:e9:69:56:75:bb:7d:40:aa:5b:05:19:a0:0d:
1d:48:d9:0a:42:5d:66:9a:86:80:7b:0c:3f:5f:ab:
79:8a:f6:82:89:0e:21:dd:05:1e:15:f4:5f:88:99:
a7:e8:39:e2:35:81:a8:68:cc:dd:2a:f0:ef:a4:29:
41:13:46:af:9f:3e:2c:0a:aa:55:d4:ea:56:a7:f9:
10:17:a5:23:c6:42:c5:41:bc:94:2d:20:98:37:dc:
b5:3b:bb:f8:e1:3f:29:8c:dc:58:33:0c:a9:80:50:
4b:da:1a:9a:cd:61:2b:7f:6c:c5:a1:ba:a4:c2:03:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:AC:16:9A:62:CD:82:CD:2C:D8:0F:0D:BD:6E:96:4D:C3:47:B5
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0e:a6:c9:63:e0:ae:e8:89:3c:cc:b4:ea:01:e5:09:49:f5:
4e:66:6b:19:0f:e2:d8:9e:c3:1c:d9:45:30:e5:df:47:c0:d5:
e1:3d:67:fb:5a:ad:41:2d:4d:84:07:34:bd:3f:7f:29:75:9e:
18:8b:31:8d:2b:cc:6c:88:d1:49:01:21:3c:c6:98:38:bb:30:
46:b3:ef:42:8d:b0:01:a9:42:6e:d5:26:f9:8a:50:5b:69:2f:
21:51:cc:43:38:8c:02:16:3f:32:c1:18:12:8c:75:2a:78:07:
a8:ee:a2:86:b9:4d:54:ca:3e:86:4f:17:03:5f:43:a8:3e:a9:
1d:c0:62:2e:2b:32:01:18:aa:fd:98:3d:72:9a:7f:5c:38:ca:
b3:96:e6:5f:76:67:a0:31:39:5c:bb:a9:15:8b:80:0a:17:64:
f6:e9:e9:3b:b5:ce:ed:b8:91:56:0a:f0:aa:2f:36:14:d5:d1:
94:13:36:b4:40:88:56:5d:11:57:01:74:18:5d:d4:f9:6b:87:
41:dd:d3:1c:ed:d7:13:3e:49:8e:4a:32:16:22:fb:92:8c:ad:
46:54:c7:06:42:00:9c:3e:7a:a7:a2:e2:59:2c:40:3e:48:65:
bc:a6:bb:4b:f9:19:dd:71:ae:a7:43:98:19:01:5c:58:9d:f3:
1e:89:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:29:02 2025 by rpki-client