Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: ML1YQsJEvkzdH1GeVUUp7w5rUQzANslEfZB52cUMITQ=
Subject key identifier: 27:B5:4E:D2:79:BB:0D:35:67:79:B7:7F:9D:58:1E:A2:48:27:45:F7
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 019916BF4F3A1ADBD9DF87AFED2F48D8FC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 0EF1
Signing time: Thu 04 Sep 2025 22:01:00 +0000
Manifest this update: Thu 04 Sep 2025 22:01:00 +0000
Manifest next update: Fri 05 Sep 2025 22:01:00 +0000
Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=)
2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: 8l4mn3Lx5+kIgbY1jglNBp5wXOIGnTBnVY4KK8ollAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:4f:3a:1a:db:d9:df:87:af:ed:2f:48:d8:fc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Sep 4 22:01:00 2025 GMT
Not After : Sep 5 22:01:00 2025 GMT
Subject: CN=27b54ed279bb0d356779b77f9d581ea2482745f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:67:9d:2b:e0:37:c5:e7:bd:02:eb:f1:4f:
84:d0:7b:5e:dd:f1:45:bf:01:a9:de:0d:5f:ee:bc:
1f:72:da:2b:66:fc:f6:0d:c0:86:35:d2:46:b3:76:
93:43:f8:89:de:70:19:88:c4:53:ec:8a:6a:83:f7:
05:4f:e3:82:ae:ee:43:0f:a5:ab:c0:06:da:e4:77:
7b:ba:7e:ab:42:af:69:90:1d:c3:c3:b1:fe:4e:28:
8c:f0:3e:94:37:c0:9d:40:b9:84:f6:8e:d0:fe:89:
58:92:b1:ca:a5:57:c8:ef:91:01:39:45:4c:29:b3:
26:2f:ca:1d:e1:38:6e:d9:ae:9a:30:eb:ef:77:5b:
25:be:74:89:5c:69:f3:89:46:c7:67:a0:b9:7b:67:
46:55:a0:4d:1c:37:11:05:a6:f8:a1:30:09:e0:eb:
6c:db:66:4d:67:72:01:be:37:de:fe:20:57:2d:13:
bd:ac:6d:0c:a7:31:a2:9d:d7:ab:83:73:6c:c9:01:
77:ab:46:00:e2:34:32:5b:75:89:75:37:04:22:79:
f1:26:df:fe:89:b0:74:b6:1f:a7:b2:ed:cd:de:85:
9c:22:2f:15:97:c0:af:d8:30:65:77:d5:c0:2d:c1:
36:73:c8:3f:5f:f5:58:ff:bb:82:63:bc:c6:c0:e3:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B5:4E:D2:79:BB:0D:35:67:79:B7:7F:9D:58:1E:A2:48:27:45:F7
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:84:2b:1c:b7:7b:4b:dd:7c:8e:66:cc:d3:74:2b:eb:0a:a5:
59:36:24:06:f1:f6:d9:e7:a6:d9:8f:53:ad:87:b3:5b:f8:0b:
e5:e7:7f:89:78:27:b8:af:c7:45:e0:41:a0:36:95:8b:b8:6b:
37:99:19:9f:7c:49:59:0a:00:7b:a5:27:15:ca:22:9e:58:6e:
17:f9:85:e5:8a:db:6d:6d:21:6d:ee:9a:b4:ba:d1:d0:f9:81:
b9:93:ce:40:93:ed:d8:32:10:1f:bb:49:a6:88:14:2a:58:cb:
85:d7:88:0f:62:bd:2f:af:61:5b:8c:49:8c:44:1e:30:be:0e:
19:1d:a1:3f:46:79:e3:15:92:83:b8:53:5c:06:3d:94:8d:c9:
22:4a:27:32:2e:e2:cf:65:c1:d8:94:9f:cc:d9:25:46:5a:d4:
1e:87:a0:a7:4b:bb:9f:9d:ce:04:47:0d:35:89:a5:ff:9a:ae:
e7:74:29:86:12:bd:c5:eb:0a:95:c4:ae:b8:7d:0f:66:14:95:
f7:d1:60:77:c1:2c:cd:f0:b7:b2:39:5c:b3:af:bf:6f:e7:1d:
be:ee:9e:0f:57:e1:0b:e4:86:ff:22:a3:4b:81:49:9d:94:49:
df:71:e0:5c:01:3c:2b:b9:25:53:83:16:a1:0f:37:67:17:32:
b2:86:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:18 2025 by rpki-client