
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier: a5L5tum08+XeQRgl+b3iNM2WnyxyKHofQpljpWyQF9Y=
Subject key identifier: CA:B6:7C:97:A4:C5:9E:57:8C:50:87:D8:EC:0A:D5:B4:D2:1E:0D:DA
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01992F35641822773FFC8E9EFE07A6AEF58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number: 11D7
Signing time: Tue 09 Sep 2025 16:00:52 +0000
Manifest this update: Tue 09 Sep 2025 16:00:52 +0000
Manifest next update: Wed 10 Sep 2025 16:00:52 +0000
Files and hashes: 1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=)
2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=)
3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=)
4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=)
5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=)
6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=)
7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: 9BWJUo00kqadI69ss0Kglk5JRAtj1QfBvETevZxuySc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:64:18:22:77:3f:fc:8e:9e:fe:07:a6:ae:f5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Sep 9 16:00:52 2025 GMT
Not After : Sep 10 16:00:52 2025 GMT
Subject: CN=cab67c97a4c59e578c5087d8ec0ad5b4d21e0dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:09:27:f4:b2:fd:fc:f9:94:f2:ee:a9:35:
e7:ea:dc:df:03:b9:de:73:c5:39:10:dd:13:2b:b1:
38:81:70:f8:8a:04:fd:32:bb:4d:94:ec:2f:55:97:
9a:d5:35:91:7b:60:a9:94:05:e6:67:73:05:af:5b:
1e:f1:22:bf:2c:77:e0:73:a2:bc:b9:9e:48:d0:7a:
f5:98:f0:4c:57:24:88:2b:6d:cd:60:69:96:be:a2:
1b:f0:4b:f0:8f:86:2a:90:97:c5:35:6f:84:35:3b:
b4:4d:74:dc:71:e0:43:aa:74:fd:dd:f9:fb:27:d7:
7a:3d:0d:3a:27:b8:5e:e0:cd:35:0c:9b:e1:63:5c:
7b:0c:96:59:23:39:1e:0a:d2:4f:6d:dd:40:c5:f3:
61:95:60:01:15:4a:78:fc:0e:05:3e:ef:39:ee:59:
d7:0e:ae:0f:e2:6d:b1:35:2e:16:b4:27:05:d9:26:
fe:86:0a:be:65:38:72:20:83:de:14:58:c2:92:09:
b2:22:cd:19:3d:95:c5:04:5f:39:6e:fc:75:89:15:
0c:68:2e:4d:00:65:bc:8e:e4:3d:09:7f:f8:8c:56:
71:fe:13:83:b6:80:30:f3:e6:02:12:6e:58:ef:41:
71:ba:39:d5:11:7c:15:90:b7:c3:07:1a:35:a3:29:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:7C:97:A4:C5:9E:57:8C:50:87:D8:EC:0A:D5:B4:D2:1E:0D:DA
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ab:e2:31:ef:59:f2:2a:2c:c8:98:86:be:b2:c8:8e:c7:5c:
46:d1:39:b0:db:b6:d0:10:c4:67:a4:5b:c9:d1:cd:7a:a4:d7:
b0:ef:33:06:a2:b2:a8:14:e6:44:02:d5:08:e5:ea:55:b6:47:
30:c1:d4:93:90:89:74:12:b0:b3:28:32:4e:01:fd:1d:2e:1d:
fd:6b:a7:ed:d8:92:38:6d:f1:ad:59:71:e2:8d:96:45:11:f1:
59:03:d5:ce:d2:6e:fc:ac:a8:7e:44:7c:ee:cf:94:a3:95:e8:
9a:30:6f:d0:a6:39:41:41:74:7a:6e:c4:e4:28:60:6f:de:e3:
7d:9f:2c:2d:1e:70:67:90:e3:cc:74:da:ac:95:b0:39:de:31:
ae:14:85:e2:8d:48:23:88:d5:1c:68:3a:a1:a7:e6:c5:be:a7:
75:7f:b1:66:b6:a7:d4:5d:41:4e:c4:57:8d:05:3a:aa:7f:a0:
1d:47:d8:c9:3c:64:18:c9:26:e4:89:3c:7a:bb:05:b6:25:13:
d9:98:95:ee:46:cf:db:b8:a2:74:e7:89:9e:db:f1:11:43:db:
4a:c8:fa:cf:bc:b6:98:3a:18:bd:3a:ed:3c:97:e7:9d:06:c8:
1f:44:cb:80:3d:46:67:02:dd:2e:18:4e:33:35:28:55:b2:90:
ea:cf:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:34:40 2025 by rpki-client