Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
File: zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json)
Hash identifier: AJKeMkbY0qzqZ1EU93A6ZpjQ0+7dCjBMiO3gtlPJpJU=
Subject key identifier: D5:58:F5:A0:89:02:6E:3D:C9:EE:F3:37:58:BC:46:A0:13:62:07:06
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 019916881065667E34054F1148ED472F5088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
Manifest number: 0CD0
Signing time: Thu 04 Sep 2025 21:00:39 +0000
Manifest this update: Thu 04 Sep 2025 21:00:39 +0000
Manifest next update: Fri 05 Sep 2025 21:00:39 +0000
Files and hashes: 1: talgukTPD8oL2wxiXAXrxPFSwAY.roa (hash: 42F75IV5IsX3V6ll7VHZlZ+ABWMo+HJa6Q+yWz1dm0U=)
2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: AkXFCxZGGgEU9P1VB/4utzIR3R+s2A2rjYBsETYXjaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:10:65:66:7e:34:05:4f:11:48:ed:47:2f:50:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Sep 4 21:00:39 2025 GMT
Not After : Sep 5 21:00:39 2025 GMT
Subject: CN=d558f5a089026e3dc9eef33758bc46a013620706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:fe:18:35:1f:53:6d:09:b7:f2:cc:b4:1f:
93:5f:60:19:7d:66:0e:c2:7e:87:7d:ca:72:4e:f3:
00:fb:4d:c9:0c:98:56:98:e2:41:ac:d0:8a:2e:2d:
63:df:db:f8:50:d2:0f:f6:33:72:62:b3:8d:14:b9:
ac:0d:ad:8b:c7:0d:b8:ce:f7:37:91:05:11:d8:30:
c6:50:19:57:c7:87:95:ef:aa:77:23:e9:89:3d:a5:
0c:44:86:6d:55:4c:b8:ab:8a:3e:c0:1e:a2:58:69:
b8:50:dd:19:f0:f7:b8:df:70:ae:82:c5:ae:7f:fe:
98:65:85:6a:9c:e0:4e:4b:76:39:d2:6a:1e:5a:10:
bb:94:9d:3b:de:15:d6:80:35:52:c9:c2:bc:73:1f:
20:de:7e:4a:95:38:de:6c:49:29:22:cf:52:bb:0a:
46:6d:ef:95:c9:6d:85:20:07:17:4a:96:96:3c:18:
81:92:1d:5b:76:6d:69:16:ec:a5:a3:85:2f:91:b9:
b0:94:77:5e:27:26:d2:82:30:04:f2:4d:14:33:d2:
30:64:e9:10:63:b2:bd:b4:ee:a6:af:d4:c5:e9:1d:
27:bc:7a:b0:06:97:db:d3:14:31:a9:ab:64:ce:77:
ed:eb:c5:a9:af:b7:ec:8a:c7:7b:e8:be:b4:26:98:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:F5:A0:89:02:6E:3D:C9:EE:F3:37:58:BC:46:A0:13:62:07:06
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c2:69:2e:a2:df:d7:92:58:60:a4:3f:91:0e:43:dc:00:14:
7a:50:53:d9:5f:50:df:7e:56:5d:ba:98:a5:f3:4c:f7:57:26:
94:37:ff:7a:11:84:f0:0a:46:1b:f4:c8:1e:ff:3e:3b:0d:6b:
53:ef:1f:5c:48:fd:47:9f:77:0d:60:6c:09:bb:1c:33:d5:29:
f0:29:4c:f1:85:a1:39:8f:62:87:70:1e:af:82:20:79:d1:42:
4c:ca:74:d0:09:4b:2b:87:ae:6d:23:41:d0:78:02:0a:af:ca:
9d:d0:22:32:80:66:10:96:6e:6e:19:fc:88:28:8d:f8:ba:0b:
07:cc:6d:77:13:d8:20:20:fa:71:41:31:99:4e:9a:47:f6:8d:
b2:36:9e:cd:b5:8f:d0:f7:97:8e:c5:65:b6:85:6f:d8:0e:56:
85:46:a1:5e:27:a0:8d:2c:a6:9e:26:c2:88:6f:6d:dc:b6:48:
21:f4:c5:1a:ff:90:ee:4f:55:1e:a9:3c:fb:e1:0e:bd:4b:5c:
aa:72:73:4e:b7:7e:34:55:f2:9f:26:78:ab:bd:88:ed:29:f3:
90:43:84:44:4f:13:1f:33:fe:e5:2a:4d:3c:b7:1a:49:dd:27:
ea:1a:39:5d:6c:b5:4f:d4:60:88:bf:8b:f4:a8:9f:36:3f:88:
d4:d4:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:08:12 2025 by rpki-client