Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: rUdYqGQXogo3q8Z9eayCZ1cv+j5kyoCEl4TJfoMVEgc=
Subject key identifier: 05:DD:C7:36:2F:20:29:E0:F1:CC:53:74:C0:89:CD:1C:59:86:D4:24
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 0199221E3D14B1D9D17CFB1AAD57632A55CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:00:31 +0000
Manifest this update: Sun 07 Sep 2025 03:00:31 +0000
Manifest next update: Mon 08 Sep 2025 03:00:31 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: 5liXuE2nEbW4B3rInMPuuQjFJbylUtmZyMwBnKGLNv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:3d:14:b1:d9:d1:7c:fb:1a:ad:57:63:2a:55:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Sep 7 03:00:31 2025 GMT
Not After : Sep 8 03:00:31 2025 GMT
Subject: CN=05ddc7362f2029e0f1cc5374c089cd1c5986d424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:e3:94:86:f2:b8:f1:6d:cf:9e:3b:50:86:
af:75:1d:89:3f:9e:7b:69:05:44:e9:a1:42:f2:03:
50:ed:47:ef:db:49:da:80:ce:e8:7d:55:37:99:a2:
c0:57:cf:83:7b:62:9a:0c:82:ad:79:5e:81:28:b1:
1f:df:54:c1:71:76:00:72:93:d4:c3:bd:42:a9:74:
b3:ba:9a:6f:e1:1b:27:f5:1a:5b:9a:c3:a0:3c:86:
12:fe:a0:62:b5:a8:30:01:b9:2f:96:b8:72:f8:b8:
6f:38:52:10:41:b9:11:fa:83:2c:88:97:c4:88:94:
c9:02:8e:0b:c6:05:88:ed:b9:ec:fe:7b:a6:73:d2:
5b:3c:02:3f:f5:8d:db:30:e3:c7:d5:f5:d1:dc:b1:
6e:85:47:26:4a:0b:7c:0a:75:6b:c4:66:4c:09:e2:
ad:8c:77:f3:3f:bb:c0:52:f4:97:f0:d4:8e:7f:93:
60:dc:d9:2c:ef:65:d8:84:f2:a2:14:db:3f:d7:94:
b0:5d:7e:b6:74:be:6e:9c:4d:c3:f4:68:61:91:ed:
ba:2a:be:e0:56:8e:de:ab:08:c9:63:91:4d:21:a4:
58:e1:c1:aa:7e:dc:c4:c4:5e:be:52:f6:22:3c:a6:
c9:47:5f:9f:4e:ae:73:ba:26:7e:7e:7d:99:ef:bd:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DD:C7:36:2F:20:29:E0:F1:CC:53:74:C0:89:CD:1C:59:86:D4:24
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8d:da:16:38:27:be:07:b4:32:d0:de:c0:d0:f8:ab:75:b8:
eb:8a:67:2c:6c:a2:5b:c6:2a:e6:d5:81:27:26:71:13:d6:b5:
8b:6b:87:d7:8b:0d:71:ec:a0:23:38:ed:f4:a2:ac:44:bd:b1:
35:8d:86:fe:36:31:3e:92:72:f8:a8:12:dc:9c:5f:c5:ec:94:
79:a3:ed:3d:68:d7:06:17:fd:e0:0a:74:db:30:a6:72:a6:55:
3d:bf:d3:ae:de:73:e8:ca:86:81:bc:f5:34:64:2f:d6:1a:58:
4d:29:54:47:7f:cd:a7:1c:5c:a9:1b:da:d2:a3:1f:c7:11:14:
ce:ba:0b:3c:c8:4e:95:e0:75:e6:74:12:9f:8f:af:b7:3e:37:
ff:03:06:d7:8a:1c:ea:e3:9c:41:9b:5f:3e:ca:52:16:ab:f7:
59:af:8b:c4:c1:19:e4:e5:e6:ab:bd:5f:00:8f:f1:60:e8:40:
55:76:73:fa:7a:42:9a:7e:26:8e:5f:d5:63:5a:05:2a:67:4e:
76:83:e6:f5:f0:a8:a9:29:24:a7:b1:ab:5b:68:09:ad:e2:b5:
d2:be:14:b6:d7:f4:57:9c:c3:fa:5c:3d:dd:e3:a0:72:a3:e8:
27:e4:9d:b8:ea:fa:e5:ea:82:15:06:dd:d1:e6:81:b0:38:db:
05:a7:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:33 2025 by rpki-client