Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: VoQU/bKVrM1uc2tyR77kB+RyMo2H75VeocVuKj+ZV24=
Subject key identifier: A4:74:6B:30:E6:7C:96:7C:64:3D:B6:25:B4:55:2A:E0:D4:60:38:AB
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 019922C32315CF196C50EF8D8278A91C5625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 053F
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: COOSirhVHTLVRSIt4NAQH8L8vr4.roa (hash: tu1lQ0uqkhi4vcEmV6leM3hmh+odZkH5lyLz+npAcNE=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: YiGH8G3NK8/BGuA4e2P8IYatOJaZmq7XLNL358vdWtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:23:15:cf:19:6c:50:ef:8d:82:78:a9:1c:56:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=a4746b30e67c967c643db625b4552ae0d46038ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:63:f6:09:ce:b0:56:1a:a0:bd:2e:9f:9e:b8:
5c:2d:5c:c2:38:a1:05:f3:ef:30:82:f5:08:3e:5e:
24:c9:8a:a0:6c:88:3f:8e:f3:6a:5d:5b:3d:29:28:
9d:02:25:b5:6b:11:56:ac:12:1f:be:02:49:6d:f9:
ed:af:9d:4e:32:41:53:20:53:97:e6:fa:a3:7d:84:
86:e7:80:81:14:1d:53:16:21:46:55:88:0b:d3:ae:
05:60:ea:10:59:7c:84:35:90:7b:04:12:5e:99:c6:
a8:de:dc:49:c1:17:cf:95:6e:5f:f2:00:71:e8:41:
13:2f:56:02:5c:fd:71:1d:06:fd:0e:e5:9c:fb:93:
24:14:a5:40:10:c1:c4:e4:fa:5d:aa:65:b2:c7:5c:
e1:b8:69:87:ba:e5:79:44:df:b0:84:81:fa:42:dd:
1a:5d:de:d5:de:12:1f:62:bd:ab:f2:06:eb:64:48:
ff:74:29:1a:33:7c:4c:f0:7e:d2:d7:55:09:e4:87:
c4:8d:fb:92:5e:0c:34:ce:9c:2e:6a:e8:5a:b8:59:
54:62:1c:3b:2c:be:80:9b:ad:81:47:3a:e8:f2:1a:
30:02:b8:d8:36:41:06:be:0d:28:17:1a:60:b7:2e:
eb:32:de:31:97:f3:15:cd:ce:1e:5e:7d:d9:6a:1a:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:74:6B:30:E6:7C:96:7C:64:3D:B6:25:B4:55:2A:E0:D4:60:38:AB
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c6:fe:ff:17:b4:8a:49:59:36:f6:17:af:ef:f0:15:52:cf:
cc:98:9e:01:3e:2c:92:25:ea:f1:c6:a8:25:29:51:2e:54:ad:
a6:93:c6:dc:55:0b:15:23:55:6a:cc:d6:0d:ba:ef:32:56:87:
f4:29:e2:db:ad:29:2c:4d:3b:92:bb:86:3c:39:ba:f6:2c:10:
d3:30:fc:ef:63:93:2b:95:b5:c1:54:fc:89:6c:6c:a2:11:65:
7c:8b:77:a3:bb:0f:a4:7f:f3:28:7a:73:53:95:f9:b1:6c:71:
2a:b7:4c:0e:50:25:69:42:cf:12:a7:2d:43:3a:9f:2d:a8:da:
9d:cc:3a:17:0b:1c:4f:e4:0e:ed:df:d5:dc:3a:55:92:d0:26:
d6:39:0b:29:1d:20:89:a3:aa:44:07:47:1c:9d:2f:d1:27:52:
2b:fc:99:fd:b7:37:81:7b:9a:70:b6:97:f4:3a:95:74:da:56:
6e:81:e6:c4:f6:e5:21:c7:48:1e:27:90:09:a1:9c:d7:da:21:
26:94:4d:6a:ae:40:cf:f7:30:6b:55:88:4f:5f:57:d3:9c:db:
74:5c:9d:64:04:8e:b1:92:6b:54:13:08:de:2d:6c:6b:9b:d1:
61:ba:95:4d:d1:49:a7:69:a3:50:0b:ad:37:c5:d4:60:e5:e0:
a2:95:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:28:23 2025 by rpki-client