Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json)
Hash identifier: rLmwxQYRTTg4OHpk/0Z4zcOBsR2D4I2o5K1gvrauM7M=
Subject key identifier: 02:FB:97:6D:C0:EA:24:8B:E3:CC:6A:70:F3:02:B4:94:C1:B6:7D:CF
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 019921B24F80F1B226C96E8C471387B34928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
Manifest number: 49
Signing time: Sun 07 Sep 2025 01:02:37 +0000
Manifest this update: Sun 07 Sep 2025 01:02:37 +0000
Manifest next update: Mon 08 Sep 2025 01:02:37 +0000
Files and hashes: 1: IQ9wLXLUZJpqcSIpCMfWB1yWSjQ.roa (hash: P/Kije3VGV+c8f4h3dI1u68XS8jsbX8ac8gPFSGcgjs=)
2: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: 3ouIQvxQgrRpjCCe8RWp/Iki2zrQC2FaN8NQyAVlZY4=)
3: nyurKK5lYc3Jd4A-TJ70SVH4ScU.roa (hash: zjZFoWXTAxAXpj9+aZvhkarE3nbYeEPl4fyvTkTHB8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:4f:80:f1:b2:26:c9:6e:8c:47:13:87:b3:49:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Sep 7 01:02:37 2025 GMT
Not After : Sep 8 01:02:37 2025 GMT
Subject: CN=02fb976dc0ea248be3cc6a70f302b494c1b67dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:01:1b:36:18:c9:17:33:cc:57:27:f9:c5:
12:70:82:8d:7a:aa:e9:e8:04:bc:40:78:eb:a8:7b:
e5:44:12:6a:5b:ab:0f:5a:39:cf:5f:e6:83:d6:30:
84:c9:cf:e6:e9:4c:27:57:20:1a:c9:37:1c:c8:5e:
fc:e5:3f:fa:47:64:3b:f5:aa:a3:7a:4f:d1:5d:d0:
04:07:f2:a3:56:87:8f:5f:54:ff:2c:fe:fb:5e:e0:
be:99:28:6e:63:10:9f:bf:49:55:d0:9e:46:69:e5:
bb:c7:1d:19:3b:4d:34:40:bb:34:ce:da:eb:de:73:
69:d0:01:93:08:a1:4e:8b:79:13:a7:65:31:5f:f2:
15:69:59:c5:5e:fb:7b:c4:3a:93:b9:9e:2f:67:95:
0d:85:b7:c3:95:8e:ec:c8:58:34:a9:6a:4d:79:1e:
0b:19:0f:68:de:57:b6:a8:cf:65:46:5e:95:05:45:
e4:71:8f:2b:0a:2c:ac:78:c2:4e:a1:ad:77:16:01:
d7:6c:63:70:ce:6c:af:be:9f:62:1d:c6:c2:26:6b:
60:27:53:6e:ff:f0:c8:2b:f9:9a:79:d1:05:63:e2:
7c:47:c5:69:58:34:a1:3e:d2:c5:46:4d:d1:5c:34:
ab:5c:c2:85:72:6d:79:7a:00:ce:88:5b:b4:f6:c6:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:97:6D:C0:EA:24:8B:E3:CC:6A:70:F3:02:B4:94:C1:B6:7D:CF
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a6:ba:12:4f:5e:a9:71:e6:47:b7:ed:54:c0:2e:b8:13:ba:
86:bd:87:56:2d:03:11:11:4c:6c:9e:b9:22:22:6f:75:d0:25:
69:7f:87:f5:7e:fa:8c:b2:30:7f:1f:e2:db:4c:e0:f4:0f:91:
50:d0:b5:8d:52:82:50:5b:47:4a:17:38:3b:0d:36:3e:87:70:
d1:8a:7c:ae:f3:13:cb:23:52:7f:9b:b6:36:13:8d:2d:7c:6a:
f6:17:28:75:52:af:cb:3d:5d:6b:21:34:8e:12:24:e8:32:00:
ee:b8:eb:15:1d:32:4f:2f:98:9c:a6:43:28:9e:3f:35:37:f5:
40:07:7d:b3:1e:cd:a9:0b:da:6c:13:ce:4e:02:54:d8:a6:69:
f4:c3:3f:77:52:33:8a:45:3a:a3:be:1f:e4:3e:31:08:b2:98:
aa:a1:a7:51:49:96:4d:5d:85:06:cd:d9:96:68:27:dc:d4:12:
97:4d:66:0a:58:7f:51:97:a0:6b:d4:5c:5d:35:bd:2b:e6:c3:
86:da:ad:cd:6b:f7:35:43:38:8c:55:37:2b:df:dc:ec:7f:fd:
83:9a:6f:58:e0:73:30:14:88:56:7c:ed:63:6f:6d:be:2a:d0:
15:4a:56:4a:c2:98:f2:43:aa:79:f5:29:06:1b:b7:91:31:e7:
71:9c:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:28 2025 by rpki-client