Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: jqT+hQm3spqCjWGZQPgryXZ2GsGuMFWv+ACG7hwj8B0=
Subject key identifier: D1:8D:CF:A5:16:B7:DA:57:D9:8B:B8:BB:B7:15:56:0A:62:CD:BF:1C
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 0199179AF9FEEE0D6474C53E61BCDA5B5488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 0149
Signing time: Fri 05 Sep 2025 02:00:56 +0000
Manifest this update: Fri 05 Sep 2025 02:00:56 +0000
Manifest next update: Sat 06 Sep 2025 02:00:56 +0000
Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: TdxZnkuiSbMZoPMB1HXP28ZqMtiNE2e6yg1PHmC6L3s=)
3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:f9:fe:ee:0d:64:74:c5:3e:61:bc:da:5b:54:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Sep 5 02:00:56 2025 GMT
Not After : Sep 6 02:00:56 2025 GMT
Subject: CN=d18dcfa516b7da57d98bb8bbb715560a62cdbf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:08:80:1b:61:f4:24:69:bf:97:ed:8f:e5:
14:18:25:99:e3:26:7a:3e:c7:fd:34:04:19:a6:cf:
7e:1c:ef:43:d2:aa:dd:4d:ed:31:81:ec:0a:92:64:
5f:06:39:3c:54:59:f7:61:39:18:73:21:d4:8d:8a:
8c:94:f8:87:da:d2:70:ab:d2:27:9b:2c:28:09:75:
04:2a:cd:9b:a0:a0:8f:1a:bb:6c:5f:a4:6c:9b:7e:
4f:40:ab:5a:62:0c:37:e1:a7:cf:7d:ed:89:b1:cf:
ef:ee:5a:22:55:f4:51:95:8a:e9:80:d6:82:9e:f5:
e8:ad:e5:09:20:92:af:45:b0:86:a3:b1:b1:c0:6b:
33:d8:e6:95:3d:7b:5a:eb:f0:02:3f:10:22:fd:95:
95:a5:83:bb:24:6e:8f:dd:57:21:3e:e2:04:0f:38:
df:e0:09:fe:a9:6c:ec:24:ce:99:32:a5:d6:4f:07:
99:9d:53:cc:78:5a:d1:fb:17:9b:a3:0e:b8:ad:0d:
f8:00:bc:1a:26:c9:ce:b9:07:66:2e:5e:f9:ef:5d:
c1:ca:0e:54:10:13:7f:9e:86:26:96:e5:ed:2d:47:
47:49:bc:da:63:6a:09:56:87:db:7f:55:3c:ab:83:
b3:79:6b:aa:b6:4f:d1:1a:85:4d:be:9c:e0:64:31:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:CF:A5:16:B7:DA:57:D9:8B:B8:BB:B7:15:56:0A:62:CD:BF:1C
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e2:27:9e:03:f4:cd:59:3c:a6:ad:7f:86:7d:a9:a2:72:1b:
f8:b5:ac:04:d0:e2:e2:c9:ff:61:8e:28:66:b2:b0:73:91:c1:
45:d1:f4:5b:0c:48:c8:f4:64:f5:d0:05:ac:10:e7:aa:fe:eb:
9b:ba:4b:ec:e4:18:54:1b:29:87:2b:3f:8d:2c:7f:8d:27:b2:
cd:be:e5:37:ad:b9:e1:4b:00:54:25:20:9f:1b:61:a4:76:74:
9e:d7:b8:73:25:ba:26:74:3a:ee:df:ef:fc:0e:ae:0d:74:4e:
41:3b:e3:eb:5f:a1:59:ac:3c:cd:d4:fb:33:7f:0b:91:3c:2d:
bc:a7:96:7b:07:04:95:5e:2f:cd:88:66:a8:bf:1d:fb:5d:d9:
21:9b:6b:1a:8b:a2:70:f2:48:6e:c2:84:b9:70:23:20:ba:b9:
90:78:5f:a6:ce:ff:48:fe:25:10:9c:7f:30:bc:cb:f8:ae:b6:
5c:1d:03:f4:a7:17:76:e6:c2:e0:5e:40:2d:96:91:05:1d:f8:
69:c6:0b:9a:83:7f:04:89:99:e9:63:d1:03:6b:08:9c:c9:96:
53:35:3c:31:ab:45:f8:1d:e4:b8:2d:2a:1e:1b:7f:c1:7c:c8:
f0:24:5b:7c:87:4d:10:53:cb:d4:a6:6f:36:ec:5b:84:1f:19:
00:51:8e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:21 2025 by rpki-client