Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier: DceXf2vsXF11F2IQpYKXZMVBmKm7HuxfoyN7ji6cc94=
Subject key identifier: D2:CB:48:C3:65:B3:3B:AC:1B:61:87:F2:59:31:35:58:FA:66:BA:28
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 019921B09DE81DCEF070A8F5E5AEA93DC651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number: 1331
Signing time: Sun 07 Sep 2025 01:00:46 +0000
Manifest this update: Sun 07 Sep 2025 01:00:46 +0000
Manifest next update: Mon 08 Sep 2025 01:00:46 +0000
Files and hashes: 1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: rmlRD4iQjDZOniss11DcQ4hY+BynknkSY8qGB4ccPvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:9d:e8:1d:ce:f0:70:a8:f5:e5:ae:a9:3d:c6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Sep 7 01:00:46 2025 GMT
Not After : Sep 8 01:00:46 2025 GMT
Subject: CN=d2cb48c365b33bac1b6187f259313558fa66ba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:64:1c:78:93:78:c4:3c:27:12:84:fe:65:
85:5b:46:55:f2:9b:53:01:ee:c1:fb:6c:aa:2b:6d:
c0:a0:87:78:f5:8a:84:99:a0:a8:53:0c:6a:e0:86:
8f:73:0c:8e:4d:71:68:5e:81:17:3d:1f:cd:33:0b:
56:37:1e:89:3a:56:c6:78:a6:16:4f:81:89:ff:69:
d6:fd:c1:b8:d4:ba:b0:80:09:a2:17:a1:74:ee:86:
72:ee:b6:82:c6:5d:ff:68:fa:ed:cd:a0:2f:8f:31:
32:66:c8:ae:d1:03:20:b7:94:30:a2:30:7a:78:cc:
7a:eb:ff:1b:fa:f4:8c:46:f5:d5:00:aa:28:0b:a8:
35:bf:87:9f:34:2e:2b:15:28:40:0c:d7:9c:98:de:
42:5e:5b:98:89:57:05:fe:7c:6c:d8:1b:95:02:31:
d1:d2:5d:02:67:0b:4f:50:d7:23:87:f6:d9:57:bb:
aa:c1:c1:9b:9e:b4:4e:c5:96:97:21:66:2e:50:a6:
0f:67:c0:d3:32:4b:19:94:08:c1:56:94:c9:12:db:
16:de:c3:50:73:e5:c1:ec:91:bc:9f:65:fc:8f:d5:
d4:a5:a0:ff:78:36:be:69:72:66:4c:d9:10:1d:69:
d1:ac:ee:2f:0d:71:09:0c:69:df:41:1c:cd:ed:63:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:48:C3:65:B3:3B:AC:1B:61:87:F2:59:31:35:58:FA:66:BA:28
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f8:6f:4b:5a:eb:e8:40:31:be:d5:36:ba:b2:49:8c:f3:ba:
38:64:04:09:bb:90:e6:8f:1a:12:7f:b1:18:ef:af:46:ed:a3:
72:e1:48:82:60:e9:bb:04:9b:8e:f9:fc:98:2b:53:e4:8c:fc:
7d:89:fc:78:6c:53:99:81:ef:92:e0:50:bc:da:73:95:13:28:
ba:4e:2f:ac:1b:e1:19:10:cb:09:d1:d4:91:e6:11:c8:c4:5c:
a7:72:d6:d8:78:6f:06:39:fe:97:da:53:2b:51:80:ff:3d:4b:
96:31:f1:7c:d8:0a:66:2a:45:1a:a8:e9:2a:8e:e3:09:98:c8:
2c:f3:42:62:96:ad:28:b8:d3:2c:43:c0:09:da:5c:14:d9:ae:
57:f3:51:44:91:ab:a6:86:c1:ff:7d:f7:f3:1f:7e:c1:40:b5:
2d:b8:5e:3d:f1:23:25:54:37:36:a0:34:4d:69:fb:69:65:45:
2c:3d:55:f5:7a:4f:2d:17:34:ee:de:90:2a:4d:82:75:66:e9:
95:bd:d9:ee:9e:78:a4:83:0a:c8:41:a4:20:40:fb:10:8e:a5:
78:f4:f5:b0:fb:5c:33:f6:3d:ee:eb:73:cc:fe:f1:47:79:fb:
c9:c6:ca:7a:14:67:2d:cb:ef:5c:e5:8f:34:41:fe:6b:1e:45:
ca:96:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:29 2025 by rpki-client