Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: ax15pQZlt1r4BWS7BIj4w4E/Bshi/No0gJLusIEbRKs=
Subject key identifier: B7:F3:CF:8C:6B:8B:6B:F3:33:30:D5:5C:BB:C4:7A:5E:2B:43:1A:A4
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 01992330EC2ACFE87D82E3917561E4DE15B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 09B4
Signing time: Sun 07 Sep 2025 08:00:32 +0000
Manifest this update: Sun 07 Sep 2025 08:00:32 +0000
Manifest next update: Mon 08 Sep 2025 08:00:32 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: VxAMKVtpuiQjzNAVW4zulgNaZ+/42UJeGiasdSFwev8=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ec:2a:cf:e8:7d:82:e3:91:75:61:e4:de:15:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Sep 7 08:00:32 2025 GMT
Not After : Sep 8 08:00:32 2025 GMT
Subject: CN=b7f3cf8c6b8b6bf33330d55cbbc47a5e2b431aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:07:bb:19:4d:4e:e6:18:13:36:b0:dd:1c:
28:97:6f:f7:1f:f2:13:ba:c8:20:ae:21:63:1f:ef:
87:da:5e:b4:fe:3b:3b:ce:85:ea:c6:3a:f1:d0:61:
7d:c7:35:be:b6:81:a4:99:72:9d:a2:af:68:46:04:
b2:39:26:e2:90:f2:a4:5f:16:c7:f3:d0:ce:be:73:
55:bd:3a:6f:2a:88:5b:9f:ee:f2:aa:90:81:7f:3d:
f4:b5:cf:36:4a:5d:d3:16:7d:6c:3e:0f:78:06:27:
23:ae:79:3e:74:8e:b8:65:44:59:9c:c6:b9:cc:b4:
e3:71:bf:05:7e:44:b0:77:77:63:b8:8a:e8:3e:ca:
38:5d:10:40:6c:56:74:0a:10:b9:2a:13:a8:dd:8a:
80:22:d2:e1:66:49:3c:d1:5b:dd:76:7d:3f:58:1f:
94:ab:3c:91:f1:c5:96:21:f0:d4:55:3d:b8:2a:71:
06:67:35:7a:d2:ba:5e:11:80:95:0b:a1:50:9d:b4:
6b:e2:ed:70:2d:48:ff:30:cf:f9:e6:50:55:c9:b4:
ad:74:f6:99:4c:a2:18:64:73:4c:0a:db:b8:0c:47:
9d:dc:51:f9:6b:b8:d9:7c:36:0c:fc:96:85:68:8c:
e6:a6:f4:71:81:25:6c:bb:59:2d:c4:d9:ae:2b:ce:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:CF:8C:6B:8B:6B:F3:33:30:D5:5C:BB:C4:7A:5E:2B:43:1A:A4
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b0:3a:93:95:49:46:bb:cc:f1:1c:fd:b9:8c:62:e2:8a:dd:
58:2a:43:f0:b8:e5:56:e2:8c:e5:9d:1c:42:75:6b:b7:88:cd:
64:9c:8d:38:53:b1:21:4d:8c:93:95:1e:e6:b0:1e:6f:94:f0:
15:d0:f6:9a:1f:c6:24:85:12:66:d8:2e:07:4d:00:c3:34:a3:
55:5d:31:c0:08:92:2c:e0:f6:88:53:d3:c2:23:87:85:d6:ea:
fe:39:2f:5e:2f:97:9d:33:41:84:af:94:26:9c:37:92:d1:26:
9f:35:e5:7a:4d:0b:65:bb:2a:70:5b:43:68:da:16:ee:67:1d:
fd:5d:c2:f3:5b:ae:02:3c:df:c2:80:5c:9f:1e:95:67:7e:10:
82:4c:b2:4a:ac:88:8b:35:5b:52:a5:9b:59:aa:2b:63:06:39:
ea:6b:b6:55:ce:25:c3:ab:08:6b:67:1f:06:c2:be:86:3f:53:
ff:ee:10:1d:f0:b6:20:89:a2:60:9d:96:c3:82:2e:78:13:0a:
87:8d:c3:17:6b:57:25:e8:45:85:e3:59:b3:f1:92:06:a7:96:
85:3b:37:85:83:bd:9c:06:89:4d:a8:fb:97:b9:7e:9c:87:29:
5e:cc:9d:b3:f7:9f:13:a6:ec:a9:c1:87:b1:12:f4:c6:14:8a:
e8:b0:56:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:28 2025 by rpki-client