Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: un3iV51UgTlMG8Vib/2JUDXFoS/ygm1fAWAagOwVa6M=
Subject key identifier: BC:A6:B6:69:2A:6C:AB:E9:36:6E:D8:80:23:0D:B1:83:DB:54:BF:7A
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 019923A0BB4635B791F0B9C97C7D5709868B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 0B37
Signing time: Sun 07 Sep 2025 10:02:40 +0000
Manifest this update: Sun 07 Sep 2025 10:02:40 +0000
Manifest next update: Mon 08 Sep 2025 10:02:40 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: SVGvmEpy2xFK9X2azrTpQCgVXeetTkjDLqBR0lciUjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:bb:46:35:b7:91:f0:b9:c9:7c:7d:57:09:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Sep 7 10:02:40 2025 GMT
Not After : Sep 8 10:02:40 2025 GMT
Subject: CN=bca6b6692a6cabe9366ed880230db183db54bf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:48:ff:d5:6a:9a:52:e9:24:e2:17:d6:fa:
75:b3:26:43:9b:92:5f:1e:89:7b:58:0a:75:55:ec:
ab:58:45:9a:68:34:2a:7f:f8:72:33:ab:e9:52:2c:
52:25:f0:c9:a3:92:50:f8:41:83:5c:c3:b1:2f:be:
50:37:41:c4:15:5d:d1:4f:9d:b5:fd:f6:a0:b2:28:
78:07:e4:ed:49:c4:71:3f:9b:57:19:c1:df:9c:cf:
77:34:71:84:1c:1a:80:0f:8a:64:95:a8:13:8c:26:
83:cb:cd:ed:4f:7f:74:4a:7f:05:61:13:37:a8:78:
d1:69:5d:b1:30:aa:a1:0b:ec:1e:73:07:9b:83:af:
f3:c4:5c:c5:4b:bc:cd:f3:df:52:63:2c:7b:e3:9a:
c1:04:02:16:b1:d7:43:bd:fd:cc:45:56:a7:dc:7e:
ca:94:72:85:ab:30:1d:c8:24:cb:0a:04:15:c4:fb:
29:b2:90:57:9f:52:8a:45:37:4c:a8:29:ee:67:ef:
01:f7:77:5e:80:8f:0b:c6:64:30:e3:fc:ae:83:37:
ec:38:5b:d5:60:bb:46:6b:27:7b:5a:25:c4:01:01:
db:e3:91:ca:b4:ac:a1:64:95:71:e2:45:bf:ae:2f:
be:f1:c8:97:fc:58:28:0c:ce:c3:d5:8e:05:ee:ac:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:B6:69:2A:6C:AB:E9:36:6E:D8:80:23:0D:B1:83:DB:54:BF:7A
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a9:c5:0e:9f:c2:35:f3:df:6e:18:07:95:79:1f:04:c6:ea:
e5:51:83:dd:2c:77:b2:70:ce:ff:0d:8a:f2:64:5b:40:45:83:
c6:34:34:53:37:15:5a:d8:78:d2:91:ce:7d:36:6c:bb:b8:45:
ff:c2:05:ed:84:a3:ef:19:d0:60:8c:ee:c7:53:0e:f2:7b:db:
2d:b0:5f:b3:96:4b:ec:4d:28:94:48:78:d9:8c:bf:e0:cb:ab:
d4:3c:4b:7a:75:3d:80:7d:34:af:00:ab:c4:37:7a:a3:a6:f3:
26:aa:7f:ec:22:7d:20:c2:4f:05:93:b1:11:bd:ea:df:a1:36:
81:02:ff:0d:78:b6:5e:83:71:e3:94:4d:1e:76:2a:0b:3f:f3:
d1:9c:94:8e:ba:93:99:ef:f6:67:81:d6:c1:8f:fc:af:12:c4:
d9:9b:6e:c6:8a:88:ff:d8:6c:b8:00:23:a2:17:ae:f8:96:37:
96:ec:56:ff:e5:67:56:4c:43:eb:dd:84:49:6f:36:f6:31:f7:
be:ff:9b:00:41:d6:ff:58:8d:93:42:81:34:ef:87:b5:a9:18:
b1:94:6c:4a:3d:62:5e:03:ef:84:5f:dd:a7:5f:5a:4e:6e:e9:
96:a8:8c:d8:5d:4b:ea:39:08:a9:fb:42:6d:7c:d5:af:74:9e:
36:69:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:08 2025 by rpki-client