Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: Ma3w48ZpC6AQpUGvHnv4v0w+3F6H2lh7qhxqvCRUr6A=
Subject key identifier: AE:2F:F7:3A:06:0C:E3:90:7E:9A:B4:88:CC:4D:2A:ED:8D:C3:E4:BB
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 019922C37309FCFAB954A936FB6C4F24308F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 06:00:58 +0000
Manifest this update: Sun 07 Sep 2025 06:00:58 +0000
Manifest next update: Mon 08 Sep 2025 06:00:58 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: c3esaKYhjgtCyt3DbuIj1REwO3LNMg6PqjjBfPWh2pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:73:09:fc:fa:b9:54:a9:36:fb:6c:4f:24:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Sep 7 06:00:58 2025 GMT
Not After : Sep 8 06:00:58 2025 GMT
Subject: CN=ae2ff73a060ce3907e9ab488cc4d2aed8dc3e4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:0b:5c:5f:a8:c7:48:3b:88:31:80:f6:db:
1a:81:8d:60:84:0b:67:3b:9a:f6:3d:bd:6e:8c:b0:
c3:05:14:71:89:77:f7:22:96:3f:70:fb:53:c8:65:
fb:33:8d:f6:16:8f:c4:0a:46:82:f8:ca:f4:ea:e9:
e1:be:8d:2f:68:11:5d:8a:ad:18:9b:47:a8:aa:2f:
cb:16:1b:e0:a1:82:b7:39:1e:db:81:8b:d8:57:2b:
ed:45:89:46:e8:6e:81:73:7d:99:1e:93:8a:b7:4f:
5a:21:69:ad:42:ca:b6:e9:53:1f:4d:a5:35:3a:18:
c4:11:24:b6:07:bc:10:5a:3f:86:25:e4:a6:81:79:
87:8e:a8:6d:37:11:ff:9d:c4:73:fb:a9:6f:16:6d:
25:63:7d:46:02:a0:00:56:80:1b:bc:c2:30:e2:98:
86:21:c9:6c:d8:d4:86:fa:cd:55:21:f1:30:9b:2a:
d4:b5:40:cf:24:96:bd:70:98:56:a7:d7:b5:e1:8a:
73:ff:a0:f4:65:b9:c2:56:86:7e:38:ea:62:fa:e7:
2f:f9:0f:58:5d:bc:b3:5f:2d:c0:33:1e:26:0b:5c:
92:4c:99:21:7e:e3:f7:20:d1:cb:2b:b9:1c:c1:d3:
d5:0c:20:6d:a6:be:df:4b:90:17:e8:ed:1e:d1:a9:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2F:F7:3A:06:0C:E3:90:7E:9A:B4:88:CC:4D:2A:ED:8D:C3:E4:BB
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:af:04:73:0f:09:10:1d:9e:92:b3:2b:a8:ff:d6:4b:85:12:
de:57:b2:ce:84:cc:81:42:2e:df:23:a2:52:f7:43:b6:c0:6b:
c0:e6:d4:b9:7c:fd:7d:d1:8d:5a:f9:ff:e8:73:99:64:7f:d9:
b8:1e:20:91:20:b8:18:dc:b0:6a:8d:0d:d8:eb:b5:3a:07:cd:
c0:49:33:80:c9:31:f3:29:c6:9a:f5:62:d1:fb:bb:b3:d5:85:
db:d7:9f:a4:6b:bf:c1:d5:a0:7a:11:15:f1:37:aa:30:25:0a:
ae:42:76:51:fe:52:1b:c1:53:e9:f8:42:57:e8:7e:f5:f1:6b:
f8:6f:6c:84:db:0a:90:f4:2a:5f:4d:17:ec:3d:4d:e2:db:13:
9c:04:56:d0:11:b0:f4:a6:4f:97:d4:a0:c3:40:27:ae:0f:5e:
48:30:6b:29:ef:73:71:56:9b:4f:15:74:28:33:e3:50:85:80:
0c:8f:71:2c:7d:a0:e3:8c:f9:d4:b3:18:41:a7:17:14:59:8a:
55:56:d0:b9:d5:2f:68:9b:e3:65:5b:dc:be:d4:fa:85:f9:76:
dd:b9:a9:e0:10:19:f9:e2:d3:58:f8:6d:f3:57:6e:58:89:0a:
76:80:7d:38:1e:19:ad:28:35:ee:f1:e7:c3:6d:bb:63:db:61:
c5:7d:82:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:14 2025 by rpki-client