Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: +aIPgJzPm9C+MYpPmCMUTiXkr18Fkll7kLHce13U498=
Subject key identifier: E5:F2:94:F5:7A:D9:70:91:C9:5C:5A:12:21:13:5A:15:BD:A4:91:BF
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 01992BFD2931581BDCAA095D8A778BBECC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 0EE2
Signing time: Tue 09 Sep 2025 01:00:35 +0000
Manifest this update: Tue 09 Sep 2025 01:00:35 +0000
Manifest next update: Wed 10 Sep 2025 01:00:35 +0000
Files and hashes: 1: ywILmYvfHvLy0zrc3mPdeVVeQE8.roa (hash: lEGb7Lo1v/pUmyHP90bFn1LBuW2bb3HIQFNpoQo/fns=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: CeuuOWLOkTlBN/2OEm4LZTLy3HMQPhXfDWP/45pf3+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:29:31:58:1b:dc:aa:09:5d:8a:77:8b:be:cc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Sep 9 01:00:35 2025 GMT
Not After : Sep 10 01:00:35 2025 GMT
Subject: CN=e5f294f57ad97091c95c5a1221135a15bda491bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:44:4c:15:e9:41:1b:e9:ae:46:72:ca:be:
fc:2f:79:e8:87:e4:63:3a:c0:5b:94:5f:11:0c:33:
67:b5:aa:9f:d3:51:59:22:2b:20:2c:6f:86:3d:b1:
80:e7:25:c6:9d:51:6a:ac:3e:12:5e:a0:1f:33:c4:
37:a5:7b:31:fc:11:79:c2:fd:cc:5c:5a:0e:7a:ba:
06:c6:d8:a1:03:77:a1:26:86:f0:84:73:6b:a8:b9:
46:49:9f:31:fa:d0:19:90:99:ba:ac:60:24:91:d9:
42:d9:8b:af:e3:5c:09:d3:2c:b4:3f:cc:9c:49:fc:
5d:07:af:40:20:33:4f:14:7c:0a:5e:b2:53:6e:f2:
f5:01:49:4c:bf:f7:c0:0a:33:6e:6f:d9:52:5b:54:
36:44:74:05:87:c8:5a:3b:48:3e:ab:13:99:d4:1c:
1d:9b:c7:53:2a:c1:e2:40:5f:fc:fc:81:4a:00:dd:
34:cf:07:de:1e:d4:8b:fa:32:78:83:8e:22:84:6b:
56:5c:3b:08:9b:7e:9a:31:66:7e:a9:ec:92:31:1f:
3c:90:17:7d:7c:e0:5f:b0:0f:f9:1e:06:5d:f8:8a:
7c:aa:bc:a0:18:1b:57:41:1a:34:2f:18:89:da:2b:
84:f4:92:57:de:ec:66:09:35:d8:85:52:74:6f:7d:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F2:94:F5:7A:D9:70:91:C9:5C:5A:12:21:13:5A:15:BD:A4:91:BF
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a6:a0:e8:b3:9d:65:bf:85:2d:33:06:84:51:19:76:4a:bd:
dc:b7:a5:a4:80:62:f1:34:d3:42:ef:d8:47:24:8b:e6:2a:a3:
9a:d8:4c:9b:ca:c6:c2:f6:c1:ec:29:83:2b:b9:98:92:a4:b5:
0f:c3:38:64:11:b5:63:48:80:db:0e:1d:87:7b:e6:f8:9c:fb:
0e:e9:a3:a2:aa:74:62:e9:97:a9:d3:dd:68:3c:cc:44:29:59:
b7:f3:86:21:a4:a8:d0:48:91:60:72:6f:dd:77:7e:9f:3e:f0:
e3:ad:60:97:d7:0d:a0:aa:99:8a:1d:4a:6c:4a:20:83:46:5c:
72:22:21:a0:17:70:18:76:62:02:dd:42:b9:8b:22:2b:f6:99:
b6:61:3d:b4:30:76:43:a2:bb:7c:c1:0c:16:74:19:d6:eb:51:
d2:0f:e0:d5:a8:b9:a7:5d:97:aa:ec:5b:1c:2b:0a:86:5a:0f:
2e:2b:63:43:2f:2c:b9:18:f2:d0:99:ce:96:40:b5:5e:d6:9e:
80:0a:a0:27:ce:d0:84:1f:22:40:dc:0e:ca:ac:da:11:e9:53:
53:47:65:c3:76:aa:90:e8:e8:35:ec:9f:9c:c5:bc:cf:e6:fa:
1d:3e:7f:93:7b:e2:81:3c:46:20:a3:df:cc:57:ec:ea:44:93:
1c:fe:a7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:48:04 2025 by rpki-client