Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: 6h12Q2DoM8G1qps84pcMzzo/pjbVZpAym7N5sWaM538=
Subject key identifier: AB:CA:52:7E:27:68:03:82:F8:09:19:10:B5:19:29:BC:98:05:D3:BD
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 01992DB59A7708A5CC9C0337982AE66EE881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0CA3
Signing time: Tue 09 Sep 2025 09:01:40 +0000
Manifest this update: Tue 09 Sep 2025 09:01:40 +0000
Manifest next update: Wed 10 Sep 2025 09:01:40 +0000
Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: J3tkpDizSl0OAyz5EFZmMP5tGorQkqrIlukX4ImwgHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:9a:77:08:a5:cc:9c:03:37:98:2a:e6:6e:e8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Sep 9 09:01:40 2025 GMT
Not After : Sep 10 09:01:40 2025 GMT
Subject: CN=abca527e27680382f8091910b51929bc9805d3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:bf:61:d9:54:97:99:67:08:05:65:26:39:
20:a0:36:b1:d8:3f:4b:2b:9f:c2:fc:b6:2f:25:8b:
0a:0d:2f:10:7c:52:35:1f:b9:f0:f9:bd:fe:82:0c:
6f:2a:59:98:64:20:70:44:2e:df:96:f2:ac:2b:17:
4e:cc:11:62:ce:91:7f:4c:cd:f1:97:c3:d3:67:ac:
ed:04:22:b1:91:cf:38:ab:46:42:cd:50:cb:58:34:
be:a6:62:b9:ec:04:b2:c1:25:54:34:6a:02:a8:2b:
b6:72:25:69:57:06:8b:8b:41:9b:1f:37:26:1e:cd:
f6:e8:97:f8:ec:ef:53:86:0d:9c:6d:3a:5c:f4:39:
1a:51:d7:41:4f:51:58:37:d3:5b:f4:10:3e:dc:53:
f6:1d:ab:47:56:08:bb:ac:49:71:44:95:b6:50:db:
1c:64:c0:76:b4:dc:42:ce:18:92:dd:ed:b8:96:87:
7e:2e:68:ff:40:92:ca:0a:29:e8:a5:72:7f:31:b7:
ce:7d:64:0a:97:fd:da:a3:70:77:05:99:ca:66:20:
8f:b2:9d:15:97:0d:34:ca:e6:4a:12:2c:d4:ef:5c:
30:ec:39:3e:ad:36:09:ae:0c:39:7f:47:6c:fb:c8:
b3:0f:37:57:61:25:65:e6:27:04:52:7c:d0:96:ed:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:52:7E:27:68:03:82:F8:09:19:10:B5:19:29:BC:98:05:D3:BD
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:33:07:75:0e:95:1d:97:3b:9e:e9:39:7a:51:c3:ca:ae:b4:
c5:6c:da:8b:04:a7:d5:dc:e5:20:eb:7a:e6:f2:31:a4:b0:2c:
44:0b:4d:e5:6a:3e:72:29:20:f4:95:a2:06:f2:ee:9d:5d:c1:
cd:aa:a0:62:8f:bc:3d:2d:03:bc:a0:b1:d2:a7:18:ed:93:8e:
73:6a:27:2a:1f:19:69:19:47:33:30:19:49:b2:5a:38:29:ab:
8e:aa:c8:2f:d7:c1:ab:5c:db:81:02:23:f9:1f:fd:25:9c:10:
fd:8d:b9:1d:3d:79:4a:39:ad:34:c5:b1:a5:06:5c:00:72:4c:
5d:f3:85:73:77:f7:99:ee:3d:3d:d4:bc:56:42:d3:1f:e3:5a:
5c:35:f4:93:b3:f5:18:af:71:65:b9:41:48:34:8b:46:6b:69:
cc:10:c9:50:e5:41:68:bf:2e:2a:65:df:88:b3:be:76:3d:91:
24:b0:b4:e0:3f:88:31:af:23:36:85:f9:ee:c1:70:df:18:f4:
c0:c6:61:86:82:4e:97:c4:79:2c:d8:ee:95:a8:f7:e0:d9:d0:
8d:23:94:7f:c8:cb:40:0d:e0:91:70:09:3f:5f:b9:bc:71:fc:
7a:d5:06:ba:3c:e2:9f:26:20:88:ab:be:64:30:af:2f:b3:67:
89:62:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:52:17 2025 by rpki-client